Staff Platform Security Engineer, Gemini

• This role requires deep technical expertise in cloud security, strong Terraform proficiency, and strong software development skills to build production services
• Strong software development skills in Python or Go with experience building production services
• Strong experience securing AWS environments including IAM, VPC, KMS, and native security services
• Deep Terraform expertise including module development, CI/CD gates, policy testing, remote state management, and zero-downtime deployments
• Proven expertise with Kubernetes security including admission controls, RBAC, network policies, and runtime protection
• Experience with distributed systems, cloud-native architectures, and SRE principles
• Demonstrated ability to build, deploy, and maintain security tools and services in production

Desirable

• The Platform Security team secures Gemini’s infrastructure through service hardening and by developing and supporting a suite of foundational tools
• We provide secure-by-default infrastructure, consumable security services, and expert consultation to engineering teams for secure cloud and non-cloud infrastructure
• The Platform Security team builds and delivers zero-trust foundations and paved paths so every Gemini team can ship safely on supported cloud platforms
• As a Staff Cloud and Kubernetes Security Engineer, you will build security services, tools, and automation while hardening our cloud environments (primarily AWS), securing container orchestration platforms, and implementing infrastructure-as-code security guardrails
• This is a hands-on engineering role where you'll write production code daily, not just infrastructure-as-code
• You'll design and build security platforms that scale across our engineering organization
• You will partner closely with engineering teams to enable rapid, secure delivery while maintaining zero standing privilege and least-privilege access models
• Build and maintain security services, tools, and automation using Python or Go
• Design and implement security controls for AWS and Kubernetes environments using infrastructure-as-code
• Create reusable libraries, frameworks, and platforms that enable secure-by-default patterns
• Develop automated security monitoring, scanning, and remediation services
• Build CI/CD security gates and policy-as-code validation tools
• Partner with engineering teams on architecture decisions and provide security consultation
• Participate in on-call rotation for critical security incidents and infrastructure issues