Platform Engineer (Encryption & Data Security)
The Platform Engineer (Encryption & Data Security) is responsible for designing, building, and operating platform capabilities that ensure secure data handling across the organization. This role focuses on encryption, certificate lifecycle management, and data classification/labeling, enabling development teams to securely build and operate services by default.
What You’ll Do
Design, implement, and maintain secure infrastructure services supporting over 30 development teams.
Design and operate end-to-end encryption strategies across:
Service-to-service
Data at rest
Data in transit
Develop and manage infrastructure as code using GitOps principles.
Manage and optimize AWS cloud infrastructure for scalability, reliability, and security.
Collaborate closely with development teams to ensure effective integration and smooth operations.
Participate in on-call rotations to ensure infrastructure availability and incident response.
Monitor, troubleshoot, and resolve issues across infrastructure, networks, and applications.
Implement and maintain best practices for system security, reliability, and performance.
Communicate effectively with cross-functional teams to gather requirements and deliver robust solutions.
What You'll Bring
Deep understanding of TLS, PKI and certificate chains
Encryption fundamentals (symmetric/asymmetric, key rotation)
Demonstrated ability to collaborate effectively within a team environment
Experience in platform engineering, site reliability engineering, or a related field.
Proficiency in at least one programming language.
Experience with at least one Infrastructure as Code tool or provider.
Deep expertise in Amazon Web Services (AWS), including core services such as EC2, S3, VPC, EKS, ALB/ELB, and Transit Gateway.
Strong Linux engineering skills, including networking, storage, and operating system fundamentals
Solid understanding of network security fundamentals and experience with CDNs.
Experience deploying and managing infrastructure through GitOps pipelines.
Strong problem-solving and debugging abilities in complex distributed systems.
Excellent written and verbal communication skills.
Strong organizational skills and attention to detail.
Preferred Qualifications
Experience working within compliance and regulatory frameworks (CMMC and FedRamp is a plus).
Familiarity with additional programming languages such as Go or Java.
Experience with large-scale distributed systems.
Knowledge of messaging systems such as RabbitMQ or Kafka.
Understanding of cloud security best practices.
Understanding of microservices architectures and distributed systems technologies.
Relevant AWS certifications.
Experience with automated certificate rotation services