> Markdown version of [/jobs/ext/4629000-staff-security-platform-engineer](https://www.wearedevelopers.com/jobs/ext/4629000-staff-security-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Security & Platform Engineer

- **Company:** Harnham Inc.
- **Location:** Boston, MA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, DevOps, Disaster Recovery, Github, Identity and Access Management, Key Management, Role-Based Access Control, Reliability Engineering, Software Vulnerability Management, Datadog, Google Cloud, Deployment Automation, Terraform, Devsecops
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25303_4611a59697d0d8442214f5228b8beac0

## About the Role

You'll likely bring 10+ years across some combination of Platform Engineering, SRE, DevOps, DevSecOps, Cloud Infrastructure or Cloud Security, with Staff/Principal-level technical ownership.

The strongest backgrounds will combine AWS + GCP, Terraform, CI/CD, GitHub, IAM, cloud security, SOC 2, HIPAA, vulnerability management and production operations. Healthcare or life sciences experience is particularly compelling, although other highly regulated environments such as fintech or government are relevant.

Most importantly, they want a hands-on builder. Someone who can establish the architecture and standards, but is equally comfortable getting into Terraform, troubleshooting production infrastructure, tightening IAM controls, investigating vulnerabilities or designing the secure connection between two cloud environments.

## Description

* Architect, secure and operate production infrastructure spanning AWS + GCP, including secure interoperability between the two environments
 * Build and mature Terraform/IaC, deployment automation and CI/CD infrastructure
 * Own cloud IAM and access governance, including least privilege, service accounts and privileged access
 * Drive SOC 2 and HIPAA controls, audit readiness, evidence and remediation
 * Own platform security across secrets/key management, vulnerability management and security operations
 * Administer and evolve GitHub and CI/CD workflows, creating increasingly automated and reproducible deployment processes
 * Build robust monitoring and observability, with Datadog currently central to the environment
 * Architect disaster recovery, rollback and business continuity capabilities
 * Help establish secure Trusted Research Environments supporting healthcare research and AI workloads
 * Partner directly with Engineering, AI and senior leadership while becoming the internal authority on cloud/platform architecture and security

One of the first major challenges will be particularly interesting: helping establish a secure GCP research/AI environment and connecting it safely with the AWS-based product ecosystem, with sensitive healthcare data, HIPAA requirements, auditability and reliability built into the architecture from day one.