Senior/Staff Platform Engineer, Infrastructure & Security

Quilter•Los Angeles, CA

About The Position

Quilter is hiring a Senior or Staff Platform Engineer to build and operate secure cloud infrastructure and automate the controls the company depends on. The Platform team builds infrastructure for compute-intensive workloads and supports Quilter’s cloud service and customer-managed deployments. The engineer will own systems from design through operation and help shape the technical direction of a growing team. The primary focus is cloud security, infrastructure maintenance, and control automation, including access, secrets, vulnerability remediation, auditability, and repeatable evidence collection. The role owns the engineering work behind these controls, partnering with business stakeholders on compliance scope and with Platform engineers on reliability, recovery, and efficiency. It is suited to someone who enjoys designing and operating durable systems, investigating problems, closing security gaps, automating recurring work, and verifying that controls work.

Requirements

Experience owning production cloud infrastructure, including maintaining it, diagnosing failures, and making changes safely.
Hands-on experience implementing security controls such as IAM, secrets management, network restrictions, audit logging, vulnerability remediation, or secure configuration.
Practical Kubernetes, container, and infrastructure-as-code experience; AWS and Terraform are particularly relevant, and comparable experience is welcome.
Strong troubleshooting skills across Linux, networking, cloud services, and application behavior, with sound judgment in choosing appropriately simple solutions.
Ability to build and maintain tested automation and small tools in a language such as Python or Go, and to work effectively with software engineers on shared systems.
Ability to translate security requirements into technical controls, explain implementation choices, validate behavior, and provide evidence for reviewers.
Interest in owning recurring operational work and improving how it is done, alongside larger engineering projects.
Clear communication and prioritization skills, including explaining technical risks and tradeoffs, coordinating remediation across teams, and documenting decisions and procedures.

Nice To Haves

Experience implementing technical controls or automating evidence for SOC 2, ISO 27001, FedRAMP, or a comparable program.
Experience with AWS GovCloud, customer-managed infrastructure, or restricted-network environments.
Familiarity with observability tools such as Prometheus, Grafana, OpenTelemetry, or cloud-native equivalents.
Experience with artifact signing, software provenance, or automated verification of software supply-chain controls.
Familiarity with GPU, ML, batch, or other compute-intensive workloads and their capacity and cost tradeoffs.

Responsibilities

Build and maintain secure cloud and Kubernetes infrastructure, including network boundaries, machine identities, secrets management, least-privilege access, and audit logging.
Own the infrastructure maintenance lifecycle by keeping images, dependencies, and infrastructure components current; investigating vulnerability findings; prioritizing remediation; and rolling out changes safely.
Translate agreed compliance requirements into technical controls, validation checks, access reviews, evidence collection, and remediation tooling.
Partner with business stakeholders on compliance scope and audit support for SOC 2, ISO 27001, and prospective FedRAMP work.
Implement and test backup and restore procedures with service owners, document recovery steps, and address gaps identified through exercises and incidents.
Improve operational readiness by partnering on alerts, incident playbooks, and communications; participate in production troubleshooting and follow through on corrective work.
Help assess resource usage and cost, identify capacity constraints and waste, and make targeted infrastructure efficiency improvements.
Partner with engineers building delivery, runtime, and data platforms to embed security and operational requirements into reusable systems.