Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
Senior/Staff Platform Engineer, Infrastructure & Security
- Remote from
- USA
- Salary
- Undisclosed
- Department
- Cybersecurity
- Employment
- Full Time
- Experience
- Senior
- Published
- Apply before
- 10 Dec 2026
- Listing views
- 44
- Application actions
- 2
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
About this role.
About Quilter
At Quilter, we are helping electrical engineers save time and accomplish more by automating the tedious and time-consuming task of designing printed circuit boards (PCBs). Our small team is composed of experts in electrical engineering, electromagnetic simulation, ML/AI, and high-performance computing (HPC). We are inventing and leveraging novel techniques to solve the decades-old problem of automating circuit board design where today hundreds of billions of dollars are spent. We have raised $25 million in Series B funding from some of the very best and are charging full-speed toward our goal.
No matter where we come from, we’re united by a common vision for the future and a core set of values we think will get us there:
Curiosity
Conviction
Rigor
We’re looking for a Senior or Staff Platform Engineer to build and operate secure cloud infrastructure and automate the controls we depend on.
Quilter uses AI to automate printed circuit board placement and routing. Our Platform team builds the infrastructure that runs these compute-intensive workloads and supports our cloud service and customer-managed deployments. You’ll own systems from design through operation and help shape a growing team’s technical direction.
Your primary focus will be cloud security, infrastructure maintenance, and control automation: access, secrets, vulnerability remediation, auditability, and repeatable evidence collection. You’ll own the engineering work behind those controls, partnering with business stakeholders on compliance scope and with Platform engineers on reliability, recovery, and efficiency improvements.
This role suits someone who enjoys designing durable systems and operating them: investigating problems, closing security gaps, automating recurring work, and verifying that the controls we rely on actually work.
What You’ll Do
Build and maintain secure infrastructure. Improve cloud and Kubernetes configuration, network boundaries, machine identities, secrets management, least-privilege access, and audit logging.
Own the infrastructure maintenance lifecycle. Keep images, dependencies, and infrastructure components current; investigate vulnerability findings; prioritize remediation; and roll out changes safely.
Implement and automate compliance controls. Translate agreed requirements into technical controls, validation checks, access reviews, evidence collection, and remediation tooling. Work with business stakeholders on scope and audit support for SOC 2, ISO 27001, and prospective FedRAMP work.
Make recovery dependable. Work with service owners to implement and test backup/restore procedures, document recovery steps, and address gaps revealed by exercises and incidents.
Improve operational readiness. Partner with service owners on useful alerts, incident playbooks, and communication. Participate in production troubleshooting and follow through on corrective work.
Contribute to infrastructure efficiency. Help the team understand resource usage and cost, identify capacity constraints and waste, and make targeted improvements alongside security and maintenance priorities.
Partner on safe deployment and data access. Work with the engineers building our delivery, runtime, and data platforms to embed security and operational requirements into reusable systems.
What We’re Looking For
Experience owning production cloud infrastructure, including the work of maintaining it, diagnosing failures, and making changes safely.
Hands-on experience implementing security controls such as IAM, secrets management, network restrictions, audit logging, vulnerability remediation, or secure configuration.
Practical Kubernetes, container, and infrastructure-as-code experience. AWS and Terraform are particularly relevant; comparable experience is welcome.
Strong troubleshooting skills across Linux, networking, cloud services, and application behavior, with the judgment to choose a simple solution appropriate to the problem.
Ability to build and maintain tested automation and small tools in a language such as Python or Go, and to work effectively with software engineers on shared systems.
Ability to translate security requirements into technical controls and demonstrate that they work. You can explain implementation choices, validate behavior, and provide evidence for reviewers.
Interest in owning recurring operational work and improving how it gets done, alongside larger engineering projects.
Clear communication and prioritization: you can explain technical risks and tradeoffs, coordinate remediation across teams, and document decisions and procedures.
Nice to Have
Experience implementing technical controls or automating evidence for SOC 2, ISO 27001, FedRAMP, or a comparable program.
Experience with AWS GovCloud, customer-managed infrastructure, or restricted-network environments.
Familiarity with observability tools such as Prometheus, Grafana, OpenTelemetry, or cloud-native equivalents.
Experience with artifact signing, software provenance, or automated verification of software supply-chain controls.
Familiarity with GPU, ML, batch, or other compute-intensive workloads and their capacity/cost tradeoffs.
What Success Looks Like
Access and credential controls are documented and verifiable, infrastructure updates and vulnerability findings are addressed through a repeatable process, and required evidence can be produced without repeatedly reconstructing it by hand. Recovery procedures are tested with service owners, and incident follow-up leads to concrete improvements.
Please note: We are an equal opportunity employer. At this time, we are focused on hiring primarily within the US, with occasional exception to accommodate exceptional talent.
What we offer:
Interesting and challenging work
Competitive salary and equity benefits
Health, dental, and vision insurance
Regular team events and offsites (~4x / year)
Unlimited paid time off
Paid parental leave
Want to learn more about Quilter, our vision, and our investors? Visit our About page and visit our Blog.
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
4/5Autonomy Level
5/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would start by inventorying human and workload identities, defining role-based access boundaries, and using short-lived credentials wherever possible. I would enforce separation between environments, review privileged access regularly, centralize audit logs, and automate policy validation to detect excessive permissions.
I would validate the finding, assess exploitability and affected exposure, then prioritize containment if needed. I would update the vulnerable image or dependency through the normal deployment path, test the change, deploy it safely, verify the fix in production, and document follow-up actions to prevent recurrence.
I break requirements into specific, testable control objectives, such as access review cadence, encryption, logging, or change approval. I then implement controls as code where possible and automate collection of immutable evidence, so audit preparation does not depend on manual reconstruction.
I would define recovery objectives, identify critical data and dependencies, document restore runbooks, and schedule realistic restoration exercises. Each test should measure recovery time and data integrity, identify gaps, assign owners, and result in tracked corrective actions.
I prioritize based on risk, operational impact, and business context, then look for reusable guardrails that reduce friction instead of adding manual gates. I communicate tradeoffs clearly, phase high-risk changes safely, and use observability and cost data to confirm that improvements deliver the intended result.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
