layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Staff Platform Engineer, Security at True Anomaly | LAYIQ

Build security tooling, automation, and services for cloud security—implementing secure patterns that engineering teams can adopt
Implement security best practices and provide technical input on cloud security, IAM architecture, network security, and infrastructure-as-code
Implement and maintain security controls that strengthen the security posture of our cloud environments across Azure and AWS
Implement secure-by-default cloud infrastructure including
IAM
, network architecture (VPCs, subnets, NACLs, Security Groups, Transit Gateways), data protection, encryption, and security monitoring
Operate and maintain PKI infrastructure for cloud environments—including private CA hierarchies (AWS Private CA, AD CS), certificate lifecycle management, mTLS for service-to-service authentication, and load balancer certificate management
Operate and maintain HashiCorp Vault as the central secrets management platform—including Vault PKI engine, dynamic secrets, authentication methods, and policy management. You'll build and maintain this infrastructure, not just configure managed services
Partner with Kubernetes Security Engineer to implement unified PKI infrastructure across cloud and container environments, providing input on design decisions. Collaborate on K8s
IAM integration, network policies, node security, and CSI driver security
Design and troubleshoot multi-account and multi-VPC network topologies—diagnosing connectivity issues and security group misconfigurations across cloud environments
Build automation and tooling to enforce security policies, detect misconfigurations, and respond to threats in cloud environments
Execute cloud security posture management (CSPM), threat detection, and incident response projects
Implement security improvements to infrastructure-as-code, CI/CD pipelines, and deployment processes
Partner with engineering teams to implement secure cloud architectures for new capabilities and workloads
Build security testing tools, CLI utilities, and dashboards to continuously validate security controls
Solve complex security challenges in multi-cloud environments
Leverage AI tools to accelerate development and automate security workflows

Compensation

COMPENSATION

Colorado Base Salary: $205,000–$295,000
California Base Salary: $215,000–$310,000
Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

ADDITIONAL REQUIREMENTS

Work Location

—this role will be onsite at our Denver, CO or Long Beach, CA offices. The expectation is a minimum of 3 days per week in the office.

This position will be open until it is successfully filled.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.

Staff Platform Engineer, Security

Employer job description

RESPONSIBILITIES

QUALIFICATIONS

PREFERRED QUALIFICATIONS

COMPENSATION

About this listing