Sr Platform Engineer, Identity and Security

Location: Westlake Village, California, United States. Work model: Office.

Salary: $110,000–$170,000 per year.

Company

hirify.global is a specialty financial services firm focused on the production and servicing of U.S. mortgage loans and management of investments related to the U.S. mortgage market.

What you will do

• Design, implement, and manage scalable, resilient AWS infrastructure and multi-account patterns, including cross-account IAM, resource policies, and KMS key policies.
• Automate enterprise certificate lifecycles covering issuance, validation, renewal, revocation, deployment, certificate authority operations, inventory, and expiry alerting.
• Build event-driven AWS automation with EventBridge, Lambda, Secrets Manager, Systems Manager, and S3, and deploy certificates to AWS services and Windows and Linux servers.
• Administer and improve the resilience and security of Active Directory, DNS, Windows authentication, encryption, key management, and configuration management.
• Develop infrastructure-as-code with Terraform/OpenTofu and AWS CloudFormation/CDK, configuration management with Chef, AWS SSM, or Ansible, and CI/CD pipelines with GitLab CI/CD.
• Implement monitoring, logging, alerting, security best practices, troubleshooting, documentation, and platform engineering guidance for development teams; mentor junior team members.

Requirements

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
• 7+ years of experience in Platform Engineering, DevOps, or Site Reliability Engineering.
• Extensive hands-on AWS experience with ACM, KMS, Secrets Manager, Systems Manager, IAM, EventBridge, Lambda, and S3, including multi-account environments and cross-account policies.
• Strong PKI and certificate lifecycle experience, including certificate authority operation, certificate formats, chain assembly, renewal automation, and revocation.
• Experience deploying and binding certificates on Windows IIS and Linux Nginx, Apache, and Tomcat servers.
• Strong Active Directory experience with replication, FSMO roles, trust relationships, and AD-integrated DNS; strong knowledge of Kerberos, NTLM, service principal names, delegation, encryption types, and service account models.
• Practical experience with encryption at rest and in transit, key management services, Windows Server administration, and cloud integration.
• Proven infrastructure-as-code experience with Terraform/OpenTofu and AWS CDK, plus strong GitLab CI/CD pipeline design and implementation experience.
• Deep cloud and CI/CD security knowledge; solid networking knowledge covering TCP/IP, DNS, load balancing, and firewalls.
• Experience with monitoring and logging tools such as NewRelic, CloudWatch, Cloud Logging, or Prometheus.
• Advanced PowerShell scripting skills plus Python or Bash; experience with Chef, AWS SSM, or Ansible.
• Excellent problem-solving, troubleshooting, communication, and collaboration skills.

Nice to have

• AWS Certified Security – Specialty or other relevant AWS certifications.
• Experience with ACME, cert-manager, or equivalent certificate automation tooling and with operating a private certificate authority.
• Experience with multi-tenant platforms, namespace isolation, and hardening Active Directory against credential attacks.
• Experience with Microsoft Entra ID, hybrid identity integration, and disaster recovery design with defined RTO and RPO targets.
• Strong AWS EC2 experience, including Auto Scaling and Warm Pools.
• Understanding of Windows server build processes using Chocolatey and Packer for AMI or image generation.
• Solid Windows Server and IIS experience.
• Experience with Docker and Kubernetes containerization and orchestration.

Culture & Benefits

• Work in an accountable, reliable, and ethical environment supporting U.S. homeownership.
• Medical, dental, and vision coverage.
• Paid vacation, holidays, illness, and parental leave.
• Wellness and employee recognition programs, with onsite gyms and café-style dining at select locations.
• Retirement benefits, life insurance, 401(k) match, and tuition reimbursement.
• Philanthropy programs, potential performance-based bonuses, and stock-based incentives for eligible roles.