Staff Platform Engineer, Security (Cloud Security)

Location: Hybrid onsite at the Denver, Colorado or Long Beach, California offices, with a minimum of 3 days per week in the office. Occasional travel to government sites, launch facilities, or partner locations may be required.

Base salary: $205,000–$295,000 in Colorado or $215,000–$310,000 in California, plus equity and benefits.

Company

hirify.global develops autonomous spacecraft, advanced payloads, mission software, and space-based interceptors for U.S. and allied space operations.

What you will do

• Build cloud security tooling, automation, services, CLI utilities, and dashboards for secure-by-default infrastructure.
• Implement security controls across multi-cloud Azure and AWS environments, including IAM, network security, encryption, monitoring, and data protection.
• Operate PKI infrastructure, private certificate authorities, certificate lifecycle management, mTLS, and load-balancer certificates.
• Operate HashiCorp Vault as a central secrets-management platform, including PKI, dynamic secrets, authentication methods, and policies.
• Partner with platform, Kubernetes, and engineering teams on secure cloud architectures, infrastructure-as-code, CI/CD, and container security.
• Execute cloud security posture management, threat detection, incident response, and security improvement projects while using AI tools to accelerate development.

Requirements

• Active security clearance or ability to obtain and maintain one.
• U.S. citizenship, lawful permanent residence, protected-individual status, or eligibility for required ITAR authorizations.
• 10+ years of technical experience securing production cloud environments at scale across Azure and AWS.
• Strong software development skills in Python and/or Go, including security tooling, automation, API design, debugging, and production systems.
• Strong Terraform, cloud networking, IAM, encryption, logging, monitoring, CSPM, CWPP, SIEM, and infrastructure-as-code security experience.
• Experience embedding security into development and operations workflows and solving complex multi-cloud security problems.

Nice to have

• Hands-on PKI experience, including certificate lifecycle management, mTLS, certificate-based authentication, and X.509/TLS troubleshooting.
• Production experience operating HashiCorp Vault and integrating it with Kubernetes, AWS, and Azure authentication methods.

Culture & Benefits

• Fast-paced, mission-critical environment supporting national security space operations.
• Collaboration with spacecraft engineers, ground operations, software developers, and government partners.
• On-call rotation may be required for security incidents and mission-critical support.
• Health, dental, vision, HRA/HSA options, paid time off, paid holidays, 401(k), parental leave, and equity.