Staff Platform Engineer, Security

QUALIFICATIONS

• Active security clearance or ability to obtain and maintain security clearance
• 10+ years of experience in technical roles, including securing production cloud environments at scale, with strong understanding of cloud security models, attack patterns, and defensive strategies across Azure and AWS
• Strong software development skills in Python (preferred) and/or Go with experience building security tooling and automation
• Strong software engineering fundamentals: comfortable with data structures, algorithms, API design, debugging production systems, and working across multiple languages
• Strong Terraform skills including module design and infrastructure-as-code security best practices
• Experience building security tooling or automation used by engineering teams
• Strong experience with cloud networking and troubleshooting across AWS and Azure: VPCs/VNets, subnets, NACLs/NSGs, Security Groups, Transit Gateways/Virtual WAN, VPC peering, route tables, and VPN/ExpressConnect—you can debug "why can't X talk to Y" across multi-account/multi-subscription network topologies
• Hands-on experience with cloud security tools (CSPM, CWPP, SIEM ) and infrastructure-as-code security (Terraform, CloudFormation)
• Strong knowledge of IAM , encryption, logging/monitoring, and cloud-native security patterns
• DevSecOps mindset with experience embedding security into development and operations workflows
• Proven ability to assess risk, prioritize work, and execute complex security projects
• Track record of solving complex technical problems
• Comfortable diving into unfamiliar codebases and leveraging AI to bridge knowledge gaps
• Strong communication skills and ability to collaborate effectively across teams

PREFERRED QUALIFICATIONS

• Strong PKI knowledge with hands-on experience working with certificate infrastructure—including certificate lifecycle management, mTLS implementation, certificate-based authentication, and X.509/TLS troubleshooting
• Hands-on experience operating HashiCorp Vault in production—including Vault PKI, dynamic secrets engines, and authentication methods. Experience integrating Vault with Kubernetes, AWS, and Azure auth methods is a plus

WORK ENVIRONMENT

COMPENSATION

• Colorado Base Salary: $205,000–$295,000
• California Base Salary: $215,000–$310,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave
• Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

ADDITIONAL REQUIREMENTS

• Work Location —this role will be onsite at our Denver, CO or Long Beach, CA offices. The expectation is a minimum of 3 days per week in the office. #LI-Onsite
• This position will be open until it is successfully filled.
• To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
• True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.
• True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.