Senior Platform and Security Engineer

Strong hands-on AWS experience is required. The engineer must also have significant experience with OpenTofu/Terraform and modern Infrastructure as Code (IaC) engineering practices, along with strong Kubernetes and container technology experience. The engineer should be comfortable using modern AI-assisted development technologies to complement engineering work, improve productivity, and accelerate implementation while maintaining appropriate engineering review and quality standards., * Design, develop, and maintain scalable, automated, and secure platform solutions in AWS using OpenTofu/Terraform, including networking, identity, compute, storage, and Kubernetes services.

• Implement and operationalize platform security best practices, including system hardening, vulnerability management, secrets handling, least privilege, logging, monitoring, and secure-by-default engineering patterns.
• Deliver engineering tickets from beginning to end, including requirements clarification, solution design, implementation, testing, rollout, documentation, and operational handoff.
• Operate as a self-starter who can identify next steps, manage assigned work, resolve routine blockers independently, and maintain forward progress without requiring continuous direction.
• Work effectively with Kubernetes and container-based development and runtime environments using technologies such as Docker, Podman, and related container tooling.
• Use AI-assisted development technologies, including coding assistants and agentic development tools, where appropriate to complement engineering work, improve productivity, assist with testing and documentation, and accelerate problem solving.
• Critically review, test, and validate AI-generated code or recommendations rather than treating AI-generated output as authoritative.
• Develop and maintain automated tests for infrastructure code, including appropriate unit, integration, and validation testing.
• Develop automation and engineering utilities using Python, Bash, and related scripting technologies.
• Participate in code reviews, design reviews, troubleshooting, and engineering standards development.
• Work closely with Geode’s Tech Governance Group to review and enhance platform and security engineering processes and support security control and audit requirements.
• Maintain continuity of existing platform engineering initiatives and assume responsibility for active workstreams during the coverage period.

• 10+ years of experience in platform engineering, systems engineering, DevOps, SRE, cloud engineering, or a closely related discipline.
• Strong and significant hands-on experience with Amazon Web Services (AWS), including building and operating production workloads and platform services.
• Advanced experience with Infrastructure as Code using OpenTofu/Terraform.
• Strong hands-on experience with Kubernetes, including deploying, operating, troubleshooting, and supporting containerized workloads.
• Strong experience with container technologies, including Docker and/or Podman.
• Strong proficiency in automation and scripting using Python and Bash.
• Experience developing, testing, reviewing, and maintaining production-quality Infrastructure as Code.
• Practical experience implementing security controls, including hardening, vulnerability management, least privilege, secrets management, and logging/monitoring.
• Proven ability to take complex engineering work from requirements through production implementation with limited supervision.
• Demonstrated ability to work as a self-starter, manage assigned work independently, maintain momentum, and produce measurable engineering results.
• Demonstrated comfort with AI-assisted development technologies, such as GitHub Copilot, Claude Code, Codex, or comparable coding and agentic engineering tools.
• Ability to use AI development assistance responsibly, including reviewing generated code, validating technical assumptions, running required tests and quality gates, and ensuring resulting implementations meet security and engineering standards.
• Strong troubleshooting, analytical, communication, and documentation skills.

Preferred Qualifications

• Experience aligning platform and Infrastructure as Code engineering practices with SOC 2, ISO 27001, NIST 800-53, or similar security benchmarks and control frameworks.
• Experience with enterprise CI/CD platforms and secure software delivery pipeline design.
• Experience with automated Infrastructure as Code testing and validation.
• Experience incorporating AI-assisted engineering into established software development and Infrastructure as Code workflows while maintaining human review, testing, security, and change-control requirements.