Senior/Staff Platform Engineer, Infrastructure & Security

Senior/Staff Platform Engineer, Infrastructure & Security We're looking for a Senior or Staff Platform Engineer to build and operate secure cloud infrastructure and automate the controls we depend on. Quilter uses AI to automate printed circuit board placement and routing. Our Platform team builds the infrastructure that runs these compute-intensive workloads and supports our cloud service and customer-managed deployments. You'll own systems from design through operation and help shape a growing team's technical direction. Your primary focus will be cloud security, infrastructure maintenance, and control automation: access, secrets, vulnerability remediation, auditability, and repeatable evidence collection. You'll own the engineering work behind those controls, partnering with business stakeholders on compliance scope and with Platform engineers on reliability, recovery, and efficiency improvements. This role suits someone who enjoys designing durable systems and operating them: investigating problems, closing security gaps, automating recurring work, and verifying that the controls we rely on actually work. What You'll Do • Build and maintain secure infrastructure. Improve cloud and Kubernetes configuration, network boundaries, machine identities, secrets management, least-privilege access, and audit logging. • Own the infrastructure maintenance lifecycle. Keep images, dependencies, and infrastructure components current; investigate vulnerability findings; prioritize remediation; and roll out changes safely. • Implement and automate compliance controls. Translate agreed requirements into technical controls, validation checks, access reviews, evidence collection, and remediation tooling. Work with business stakeholders on scope and audit support for SOC 2, ISO 27001, and prospective FedRAMP work. • Make recovery dependable. Work with service owners to implement and test backup/restore procedures, document recovery steps, and address gaps revealed by exercises and incidents. • Improve operational readiness. Partner with service owners on useful alerts, incident playbooks, and communication. Participate in production troubleshooting and follow through on corrective work. • Contribute to infrastructure efficiency. Help the team understand resource usage and cost, identify capacity constraints and waste, and make targeted improvements alongside security and maintenance priorities. • Partner on safe deployment and data access. Work with the engineers building our delivery, runtime, and data platforms to embed security and operational requirements into reusable systems. What We're Looking For • Experience owning production cloud infrastructure, including the work of maintaining it, diagnosing failures, and making changes safely. • Hands-on experience implementing security controls such as IAM, secrets management, network restrictions, audit logging, vulnerability remediation, or secure configuration. • Practical Kubernetes, container, and infrastructure-as-code experience. AWS and Terraform are particularly relevant; comparable experience is welcome. • Strong troubleshooting skills across Linux, networking, cloud services, and application behavior, with the judgment to choose a simple solution appropriate to the problem. • Ability to build and maintain tested automation and small tools in a language such as Python or Go, and to work effectively with software engineers on shared systems. • Ability to translate security requirements into technical controls and demonstrate that they work. You can explain implementation choices, validate behavior, and provide evidence for reviewers. • Interest in owning recurring operational work and improving how it gets done, alongside larger engineering projects. • Clear communication and prioritization: you can explain technical risks and tradeoffs, coordinate remediation across teams, and document decisions and procedures. Nice to Have • Experience implementing technical controls or automating evidence for SOC 2, ISO 27001, FedRAMP, or a comparable program. • Experience with AWS GovCloud, customer-managed infrastructure, or restricted-network environments. • Familiarity with observability tools such as Prometheus, Grafana, OpenTelemetry, or cloud-native equivalents. • Experience with artifact signing, software provenance, or automated verification of software supply-chain controls. • Familiarity with GPU, ML, batch, or other compute-intensive workloads and their capacity/cost tradeoffs. What Success Looks Like Access and credential controls are documented and verifiable, infrastructure updates and vulnerability findings are addressed through a repeatable process, and required evidence can be produced without repeatedly reconstructing it by hand. Recovery procedures are tested with service owners, and incident follow-up leads to concrete improvements. At this time, we are focused on hiring primarily within the US, with occasional exception to accommodate exceptional talent. What we offer: • Interesting and challenging work • Competitive salary and equity benefits • Health, dental, and vision insurance • Regular team events and offsites (~4x / year) • Unlimited paid time off • Paid parental leave