Platform Engineer – API Security
Core
Design, author, and deploy API security policies using service mesh and infrastructure as code to protect enterprise APIs against external threats.
Role type
Senior Platform Engineer (API Security)
Builds
Enterprise API security program, policy enforcement pipelines, and secure cloud infrastructure
Domain
Cloud Security / API Security / Kubernetes
Required skills
API security fundamentals, policy as code (OPA/Rego, Kubernetes Network Policies, Istio AuthorizationPolicy), Helm, Kubernetes (EKS/GKE), Docker, Terraform, CI/CD pipelines, Golang, Python
Preferred skills
Production Istio and Envoy experience, CKA certification, AI-assisted engineering tools
Technologies
AWS, GKE, Kubernetes, Istio, Envoy, Terraform, Argo CD, Helm, OPA/Rego (via careerplan.io/jobs/a4515fc0-3cb9-482e-bc3e-af111b55be2c-platform-engineer-api-security-at-trideca)
Responsibilities
Author and deploy security policies through the service mesh aligned to OWASP API Security Top 10; Design and roll out API security policies covering authentication, authorisation, and rate limiting; Own pipelines that apply policies across the enterprise; Deliver large-scale Helm changes through GitOps; Migrate live API traffic onto the enterprise gateway; Run brown bag sessions and champion engineering best practice
Seniority
Senior, hands-on IC with platform leadership
