Senior Platform Engineer - DevSecOps
Core
Hands-on security engineering owner for cloud infrastructure (AWS/GCP) powering Rosterfy's SaaS platform, embedding shift-left security and enabling safe AI/ML workloads.
Role type
Senior IC DevSecOps Platform Engineer
Builds
Secure cloud infrastructure, CI/CD pipelines, and AI/ML platforms (LLM, RAG, vector workloads) for Rosterfy's engineering squads.
Domain
Cloud Security, DevSecOps, AI/ML Security
Deliverable
production ML models | infrastructure
Required skills
AWS (EKS, EC2, RDS, S3), Infrastructure as Code (AWS CDK), Docker, Linux, Kubernetes, Cloud Identity & Access Management, Secrets Management, CI/CD Security Scanning, Observability, Incident Response, PHP/Laravel codebase remediation
Preferred skills
Compliance (SOC 2, ISO 27001, GDPR), Vanta, CNAPP/CSPM tools, Threat Modelling, Software Supply Chain Security (SBOM, SLSA), GCP (GKE, IAM), AI/LLM Security (OWASP LLM Top 10, RAG), Data/ML Platform (BigQuery, Vertex AI)
Technologies
AWS, GCP, Kubernetes (EKS, GKE), BuildKite, GitHub, AWS CDK, Docker, Lacework, Wiz, Prisma, OpenTelemetry, Vertex AI Model Monitoring, WhyLabs, Evidently AI
Responsibilities
Own secret management, identity and access, policy-as-code guardrails, vulnerability management, and technical evidence for SOC 2/ISO 27001/GDPR; improve developer experience via local workflows and automation; secure AI workloads against prompt injection and data leakage; document security architecture and operational runbooks.
Seniority
Senior, hands-on IC
