Senior Platform Engineer, Security

Senior Platform EngineerAs a Senior Platform Engineer, with an emphasis on Security, your main mission is to build out Doxel's internal platform and define the golden paths that engineers rely on, replacing today's hand-rolled infra. Own cloud security posture on GCP, bake security into CI/CD and the supply chain, and help shape how Doxel uses AI safely.What You'll DoWork with DevOps team to build out golden paths that streamline developer and builder workflows streamlining and applying shift left security policies on CI/CD deployment, internal tooling, LLM, and data science workflowsOwn cloud security posture on Google Cloud, landing-zone guardrails, least-privilege IAM, secrets and key management, codified as infrastructure-as-code so secure defaults are baked into golden paths rather than bolted on afterContinuously evaluate attack surfaces across the application, infrastructure, and cloud, prioritize findings by exploitability and blast radius, and feed the highest-leverage fixes back into the platformSet and enforce AI-usage best practices, guardrails for agentic coding tools internally and Provide a security point of view on product AI/LLM features (prompt injection, data egress, model supply chain), in partnership with engineering leadershipAction on improving security and compliance through a risk based approach implementing SOC2, ISO27001, and ISO27701 security and compliance frameworks. Drive adoption and raise the security bar across engineering through better defaults, not mandates.What You Bring6+ years in platform engineering, infrastructure/DevOps, or site reliability, with real depth building infrastructure, not just operating itStrong infrastructure-as-code skills (Terraform) and a track record of replacing ad hoc infra with reusable, self-service patternsHands-on cloud depth, ideally Google Cloud (AWS or Azure translates), including IAM, networking, and least-privilege designStrong experience with Kubernetes and containerized workloads in production. Practical experience embedding security tooling into CI/CD (SAST, SCA, secret scanning, supply chain controls) and building secure-by-default pipelinesStrong programming or scripting ability (Python, Go, or similar) for building platform and automation toolingA security mindset: you design for least privilege and think about how things get abused, even when security is not the headline of the taskDemonstrated ability to drive platform adoption and influence engineering teams without formal management authority.PreferredExperience standing up an internal developer platform or paved-road program from scratchWorking knowledge of AI/LLM security risks and a point of view on using AI tools safelySOC 2, ISO 27001, or similar compliance experience in a fast-moving company.Experience securing data warehouses or large data pipelines (Snowflake a plus)Familiarity with construction tech, BIM/3D data, or other domain-rich data products$175,000 - $220,000 a yearDoxel provides comprehensive health/dental/vision benefits for employees and their families including an Unlimited PTO policy, a 401(k) program, and a flexible work environment among other benefits. Doxel is an equal opportunity employer and actively seeks diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.