Senior Platform Engineer – DevSecOps

About the role

As a Senior Platform Engineer – DevSecOps you will own the security of Rosterfy’s cloud infrastructure across AWS and GCP, embedding shift‑left security into every squad’s workflow while supporting rapid growth and AI/ML initiatives.

Key responsibilities

• Maintain and evolve AWS EKS and GCP Kubernetes platforms, converting existing setups to IaC (Terraform, AWS CDK).
• Automate security controls, secret management, IAM, and policy‑as‑code, and provide evidence for SOC 2, ISO 27001 and GDPR compliance.
• Integrate security scanning (dependency, container, IaC) into CI/CD pipelines (BuildKite, GitHub) and improve developer tooling.
• Participate in on‑call rotation for reliability and security incidents, handling detection, triage, containment and post‑mortem analysis.
• Support AI/ML workloads (BigQuery, Vertex AI, vector databases) by implementing LLM security controls, prompt‑injection protection and data‑leakage safeguards.

Required profile

• 7+ years in DevOps, platform or SRE roles with a strong security focus.
• Hands‑on experience with AWS services (EKS, EC2, RDS, S3) and GCP equivalents.
• Proven ability to work in compliance environments (SOC 2, ISO 27001) and produce audit evidence.
• Resilient, proactive problem‑solver with clear communication and documentation habits.

Required skills

• AWS (EKS, EC2, RDS, S3), GCP (GKE, IAM, BigQuery, Vertex AI)
• Infrastructure as Code – Terraform, AWS CDK
• Container orchestration – Kubernetes, Docker
• CI/CD – BuildKite, GitHub Actions
• Security tooling – Vanta, secret management (KMS, Secrets Manager), policy‑as‑code, CNAPP/CSPM concepts
• Observability – OpenTelemetry, CloudWatch, logging and monitoring solutions
• Compliance – SOC 2, ISO 27001, GDPR

What we offer

• Competitive salary
• Paid time off for volunteering activities
• Referral bonuses and recognition programs