Key skills

PythonGoAWS IAMAWS VPCAWS KMSAWS native security servicesTerraform module developmentTerraform CI/CD gatesTerraform policy testingTerraform remote state managementTerraform zero-downtime deploymentsKubernetes admission controlsKubernetes RBACKubernetes network policiesKubernetes runtime protectionDistributed systemsCloud-native architecturesSite Reliability Engineering (SRE) principlesSecurity tools and services developmentInfrastructure-as-codeSecurity monitoring and scanningPolicy-as-code validationCI/CD security gatesGeminiAWSAzureGCPTerraformKubernetesIAMService MeshCI/CDCloud Security

About this role

Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering crypto products and services to individuals and institutions. The Staff Platform Security Engineer will build security services and tools, harden cloud environments, and implement security guardrails to ensure secure delivery across the organization.

Responsibilities:

Build and maintain security services, tools, and automation using Python or Go
Design and implement security controls for AWS and Kubernetes environments using infrastructure-as-code
Create reusable libraries, frameworks, and platforms that enable secure-by-default patterns
Develop automated security monitoring, scanning, and remediation services
Build CI/CD security gates and policy-as-code validation tools
Partner with engineering teams on architecture decisions and provide security consultation
Participate in on-call rotation for critical security incidents and infrastructure issues

Requirements:

8+ years of experience in the field
Strong software development skills in Python or Go with experience building production services
Strong experience securing AWS environments including IAM, VPC, KMS, and native security services
Deep Terraform expertise including module development, CI/CD gates, policy testing, remote state management, and zero-downtime deployments
Proven expertise with Kubernetes security including admission controls, RBAC, network policies, and runtime protection
Experience with distributed systems, cloud-native architectures, and SRE principles
Demonstrated ability to build, deploy, and maintain security tools and services in production
Experience with GCP security services and multi-cloud environments including Azure
Knowledge of policy-as-code tools such as Open Policy Agent, Sentinel, or similar
Experience with container security scanning, image signing, and supply chain security
Background in incident response for cloud and container environments
Experience with service mesh technologies and zero-trust networking
Contributions to open source security tools or cloud security communities