Senior/Staff Platform Engineer, Infrastructure & Security

Quilter•Los Angeles, CA

About The Position

Quilter is seeking a Senior or Staff Platform Engineer to build and operate secure cloud infrastructure and automate the controls the company depends on. The Platform team supports compute-intensive workloads, Quilter’s cloud service, and customer-managed deployments. The engineer will own systems from design through operation and help shape the technical direction of a growing team. The role focuses on cloud security, infrastructure maintenance, and control automation, including access, secrets, vulnerability remediation, auditability, and repeatable evidence collection. The engineer will own the implementation of technical controls, partner with business stakeholders on compliance scope, and work with Platform engineers on reliability, recovery, and efficiency. The position is suited to someone who enjoys designing and operating durable systems, investigating problems, closing security gaps, automating recurring work, and validating that controls work.

Requirements

Experience owning production cloud infrastructure, including maintaining it, diagnosing failures, and making changes safely.
Hands-on experience implementing security controls such as IAM, secrets management, network restrictions, audit logging, vulnerability remediation, or secure configuration.
Practical Kubernetes, container, and infrastructure-as-code experience.
Strong troubleshooting skills across Linux, networking, cloud services, and application behavior, with judgment to choose solutions appropriate to the problem.
Ability to build and maintain tested automation and small tools in a language such as Python or Go, and work effectively with software engineers on shared systems.
Ability to translate security requirements into technical controls and demonstrate that they work, including explaining implementation choices, validating behavior, and providing evidence for reviewers.
Interest in owning recurring operational work and improving how it is done, alongside larger engineering projects.
Clear communication and prioritization skills, including explaining technical risks and tradeoffs, coordinating remediation across teams, and documenting decisions and procedures.

Nice To Haves

Experience implementing technical controls or automating evidence for SOC 2, ISO 27001, FedRAMP, or a comparable program.
Experience with AWS GovCloud, customer-managed infrastructure, or restricted-network environments.
Familiarity with observability tools such as Prometheus, Grafana, OpenTelemetry, or cloud-native equivalents.
Experience with artifact signing, software provenance, or automated verification of software supply-chain controls.
Familiarity with GPU, ML, batch, or other compute-intensive workloads and their capacity and cost tradeoffs.
AWS and Terraform experience are particularly relevant; comparable experience is welcome.

Responsibilities

Build and maintain secure infrastructure, including cloud and Kubernetes configuration, network boundaries, machine identities, secrets management, least-privilege access, and audit logging.
Own the infrastructure maintenance lifecycle by keeping images, dependencies, and infrastructure components current; investigating vulnerability findings; prioritizing remediation; and safely rolling out changes.
Implement and automate compliance controls, including technical controls, validation checks, access reviews, evidence collection, and remediation tooling.
Work with business stakeholders on compliance scope and audit support for SOC 2, ISO 27001, and prospective FedRAMP work.
Work with service owners to implement and test backup and restore procedures, document recovery steps, and address gaps found through exercises and incidents.
Improve operational readiness by partnering with service owners on alerts, incident playbooks, and communication; participate in production troubleshooting and follow through on corrective work.
Help the team understand resource usage and cost, identify capacity constraints and waste, and make targeted infrastructure efficiency improvements.
Partner with engineers building delivery, runtime, and data platforms to embed security and operational requirements into reusable systems.
Own production cloud infrastructure, diagnose failures, and make changes safely.
Build and maintain tested automation and small tools in a language such as Python or Go, and work effectively with software engineers on shared systems.
Translate security requirements into technical controls, validate their behavior, explain implementation choices, and provide evidence for reviewers.
Communicate and prioritize technical risks and tradeoffs, coordinate remediation across teams, and document decisions and procedures.