Staff Platform Security Engineer

Staff engineer on Gemini's Platform Security team, building the zero-trust foundations and paved paths that let every team ship safely on AWS. The role is hands-on, writing production code daily, and can be based in New York, Miami or remotely in the US.

The engineer builds security services, tooling and automation in Python or Go, implements infrastructure-as-code controls for AWS and Kubernetes, creates reusable secure-by-default libraries, develops automated monitoring, scanning and remediation, adds CI/CD security gates and policy-as-code checks, consults on architecture, and takes on-call shifts. Gemini wants eight or more years of experience, production software skills, deep AWS security (IAM, VPC, KMS), expert Terraform including module development and policy testing, and Kubernetes security covering admission control, RBAC, network policy and runtime protection.