Senior Platform Engineer

Role overview

As the first dedicated platform and security hire, build the foundations that keep a lending platform secure, reliable, and observable as the business grows. The role spans cloud infrastructure, employee devices and identity, and the systems engineers use to verify and deploy changes. A central goal is to make safe operations increasingly automatic through infrastructure as code, guardrails, and tested deployment processes.

Responsibilities - Set and improve cloud security controls, including scoped access, secrets handling, network separation, short-lived credentials, and vulnerability management. - Build security checks into development and deployment workflows; maintain scanning and testing tools and track remediation targets for findings. - Establish zero-trust access to internal systems, monitoring for unusual activity and coordinating incident response. - Own reliability practices for core services, including uptime goals, incident management, disaster recovery, and business continuity exercises. - Develop and maintain CI/CD, preview environments, deployment safeguards, monitoring, and operational automation. - Manage the security and lifecycle of employee identities and devices, and automate provisioning, configuration, and recovery where practical.

Requirements - Senior-level experience across platform, DevOps, security, or operations-focused engineering; around six or more years is a guide, with demonstrated ability to own outcomes independently. - Production experience building and securing AWS infrastructure, with strong foundations in least privilege, automation, and infrastructure as code. - Experience owning security posture and reliability in a real production environment; regulated or compliance-sensitive work is useful. - Ability to automate repeated operational work and build systems that reduce manual effort over time. - Comfort owning corporate IT and device fleet processes, including mobile device management and identity lifecycle. - Clear communication about trade-offs and judgment about what is appropriate for the organization’s stage.

Nice to have - Experience with policy as code, detection as code, automated operations, or self-healing systems. - Familiarity with AWS, Serverless Framework, Auth0, BetterStack, Doppler, or mobile device management tools; the specific stack is flexible.