Staff Platform Engineer (Security)

Join True Anomaly, a pioneering company in space security. As a Staff Platform Engineer (Security), you will play a crucial role in protecting our infrastructure and enabling space domain awareness and satellite operations. You will build security tooling, implement security controls, and work closely with engineering teams to ensure safe cloud platform usage. This hands-on role requires strong expertise in Azure security, deep knowledge of AWS, and a passion for solving complex security challenges. Enjoy a comprehensive benefits package, including 100% employer-sponsored healthcare, generous time off, equity options, and learning and development opportunities.

• Construire des outils de sécurité et mettre en œuvre des contrôles de sécurité pour permettre aux équipes d'ingénierie de livrer en toute sécurité sur les plateformes cloud.
• Mettre en œuvre des contrôles de sécurité pour les environnements multi-cloud, en travaillant en étroite collaboration avec les ingénieurs sur les décisions d'architecture.
• Écrire du code de production quotidiennement, en prenant en charge des projets de sécurité dans le domaine du cloud.

• Strong experience with cloud networking and troubleshooting across AWS and Azure: VPCs/VNets, subnets, NACLs/NSGs, Security Groups, Transit Gateways/Virtual WAN, VPC peering, route tables, and VPN/ExpressConnect—you can debug "why can't X talk to Y" across multi-account/multi-subscription network topologies
• Hands-on experience with cloud security tools (CSPM, CWPP, SIEM) and infrastructure-as-code security (Terraform, CloudFormation)
• Track record of solving complex technical problems
• Strong communication skills and ability to collaborate effectively across teams
• Strong software development skills in Python (preferred) and/or Go with experience building security tooling and automation
• Experience building security tooling or automation used by engineering teams
• Proven ability to assess risk, prioritize work, and execute complex security projects
• Active security clearance or ability to obtain and maintain security clearance
• Comfortable diving into unfamiliar codebases and leveraging AI to bridge knowledge gaps
• Strong knowledge of IAM, encryption, logging/monitoring, and cloud-native security patterns
• 10+ years of experience in technical roles, including securing production cloud environments at scale, with strong understanding of cloud security models, attack patterns, and defensive strategies across Azure and AWS
• Strong software engineering fundamentals: comfortable with data structures, algorithms, API design, debugging production systems, and working across multiple languages
• DevSecOps mindset with experience embedding security into development and operations workflows
• Strong Terraform skills including module design and infrastructure-as-code security best practices
• Requires coordination across distributed teams including spacecraft engineers, ground operations, software developers, and government partners
• Occasional travel to government sites, launch facilities, or partner locations may be required
• Fast-paced, mission-critical environment supporting national security space operations
• May require participation in on-call rotation for security incident response and mission-critical system support
• Hands-on experience operating HashiCorp Vault in production—including Vault PKI, dynamic secrets engines, and authentication methods. Experience integrating Vault with Kubernetes, AWS, and Azure auth methods is a plus
• Strong PKI knowledge with hands-on experience working with certificate infrastructure—including certificate lifecycle management, mTLS implementation, certificate-based authentication, and X.509/TLS troubleshooting