Senior Platform Engineer

About the Role: This is a backend-focused engineering role where you will work on developer-facing platforms, security automation, policy enforcement, and cloud-native infrastructure. You will help drive the shift from reactive security practices to proactive and automated security solutions by embedding security controls directly into the software development lifecycle.

We are seeking a highly skilled Senior Platform Engineer - API Security to join our Platform Engineering team. In this role, you will design, build, and operate a scalable API Security Platform that enables engineering teams to develop and deploy secure applications with confidence.

• Design, build, and enhance the API Security Platform, including security controls, policy engines, and developer-facing services.

• Develop scalable backend services and APIs that support enterprise-wide engineering teams.

• Implement secure-by-default patterns, frameworks, and reusable platform capabilities.

• Automate platform operations, including CI/CD pipelines, infrastructure provisioning, credential management, and certificate rotation.

• Build and maintain remediation capabilities that automate identification and resolution of security findings.

• Develop and manage security and operational policies using Policy-as-Code principles.

• Improve platform reliability through monitoring, logging, observability, alerting, and performance optimization.

• Investigate security detections, troubleshoot production issues, and continuously improve platform effectiveness.

• Collaborate with engineering teams, platform architects, and security stakeholders to deliver secure and scalable solutions.

• Contribute to cloud-native architecture, operational excellence, and continuous platform innovation.

• 6-12 years of experience building and operating production-grade backend applications, platforms, or developer tools at scale.

• Strong programming expertise in Python, Go, or Java with a proven ability to design, develop, test, and support production systems.

• Hands-on experience with Kubernetes, Docker, containerized workloads, and cloud-native application development.

• Strong knowledge of modern CI/CD practices and automation tooling.

• Experience with Infrastructure as Code (IaC) tools such as Terraform and Ansible.

• Experience working with cloud platforms, preferably AWS.

• Strong understanding of observability practices, including logging, metrics, tracing, monitoring, and alerting.

• Experience developing and managing declarative, version-controlled configurations and Policy-as-Code implementations.

• Strong problem-solving skills and the ability to troubleshoot complex distributed systems.

• Demonstrated ability to work effectively in cross-functional, global engineering environments.

• Product-oriented mindset with a passion for improving developer experience and platform adoption.

Preferred Skills

• Knowledge of API security concepts, including OWASP API Top 10, OAuth 2.0, OIDC, JWT, and mTLS.

• Experience with service mesh technologies such as Istio or Envoy.

• Exposure to vulnerability management, security scanning, secure code review, or remediation platforms.

• Experience building internal developer platforms (IDPs) or large-scale engineering platforms.

• AWS, Kubernetes (CKA), or related cloud/platform certifications.