Buspatrol

Platform Security Engineer

TX - Austin, Remote. Posted 10 days ago

The role

This person will secure the platform layer including AWS identity, network security, and infrastructure-as-code. They will partner with various engineering teams to turn security requirements into reusable controls and paved-road patterns.

What you will do

  • Design, implement, and continuously improve security controls across AWS multi-account environments.
  • Establish least-privilege identity patterns using AWS IAM, IAM Identity Center, and Entra ID.
  • Build and maintain secure, reusable Terraform modules and AWS CDK constructs.
  • Evolve AWS Organizations, Control Tower, and service control policies.
  • Secure cloud networking through controls for VPCs, routing, security groups, and WAF.
  • Implement and operate secrets-management and encryption patterns.
  • Integrate security checks into GitHub Actions and other delivery workflows.
  • Develop policy-as-code and preventive guardrails.
  • Partner with engineering teams to define secure golden paths and platform templates.
  • Operate and improve cloud security telemetry and findings.

Required qualifications

  • 8–10+ years of professional experience in cloud security, platform security, DevSecOps, infrastructure security, or a related engineering discipline.
  • Deep hands-on experience securing production AWS environments, preferably across multiple accounts and environments.
  • Strong knowledge of AWS IAM, IAM Identity Center, KMS, Secrets Manager, Parameter Store, CloudTrail, GuardDuty, Security Hub, AWS Config, Organizations, SCPs, and VPC security.
  • Demonstrated ability to implement infrastructure security through Terraform, AWS CDK, CloudFormation, or comparable infrastructure-as-code tooling.
  • Experience designing and enforcing least-privilege access, role-based access, group-based permissions, cross-account access, and privileged-access controls.
  • Experience securing CI/CD pipelines, source-control workflows, build runners, artifacts, containers, and deployment processes.
  • Practical understanding of cloud network security, including segmentation, routing, security groups, WAF, private connectivity, site-to-site VPNs, and Direct Connect concepts.
  • Experience with vulnerability management, security findings, risk prioritization, remediation tracking, and verification of control effectiveness.
  • Working knowledge of policy-as-code, preventive and detective controls, security automation, and compliance evidence collection.
  • Strong Linux, networking, scripting, Git, and troubleshooting skills.
  • Experience responding to or supporting security incidents in production environments.
  • Ability to communicate clearly with engineers, architects, security professionals, auditors, and technical leadership.

Nice to have

  • Experience with AWS Control Tower, landing zones, account vending, shared services, or large-scale AWS governance.
  • Experience with Wiz, Qualys, Prisma Cloud, Lacework, or comparable CNAPP/CSPM and vulnerability-management platforms.
  • Experience with GitHub Actions, OIDC federation, artifact registries, image signing, SBOM tooling, and supply-chain security.
  • Experience with Kubernetes or ECS security, container hardening, runtime controls, and workload identity.
  • Experience with Zero Trust, data protection, PII tokenization or redaction, DLP, or secure production-data access patterns.
  • Experience supporting SOC 2, ISO 27001, CIS, NIST, or similar security and compliance frameworks.
  • Familiarity with Backstage, internal developer platforms, golden paths, or security self-service tooling.
  • Experience securing AI products, AI agents, model-serving infrastructure, or non-human identities.
  • Experience with site-to-site VPNs, Direct Connect, Transit Gateway, private endpoints, and hybrid-cloud connectivity.
  • AWS Security, AWS Solutions Architect, AWS DevOps Engineer, CISSP, CCSP, or relevant equivalent certification.

Benefits

  • Competitive salary and benefits package
  • Unlimited PTO

About the company

BusPatrol is a technology company with a public safety mission. Their AI, machine learning, telematics, and cloud-connected systems help communities make the journey to and from school safer for students.