Senior Platform Engineer (Security)

Join Doxel as a Senior Platform Engineer with a focus on Security. In this role, you will build out Doxel's internal platform, define golden paths for engineers, and own the cloud security posture on GCP. You will work with the DevOps team to streamline developer workflows, continuously evaluate attack surfaces, and set AI-usage best practices. Additionally, you will drive adoption and raise the security bar across engineering. The ideal candidate will have strong experience with Kubernetes, cloud depth, infrastructure-as-code skills, and a security mindset.

• Construire et développer la plateforme interne de Doxel, en définissant les chemins dorés que les ingénieurs utilisent, et en remplaçant l'infrastructure actuelle.
• Assurer la posture de sécurité dans le cloud sur Google Cloud, en intégrant la sécurité dans le CI/CD et la chaîne d'approvisionnement.
• Évaluer en continu les surfaces d'attaque à travers l'application, l'infrastructure et le cloud, et prioriser les résultats en fonction de leur exploitabilité.
• Strong experience with Kubernetes and containerized workloads in production
• Strong programming or scripting ability (Python, Go, or similar) for building platform and automation tooling
• Hands-on cloud depth, ideally Google Cloud (AWS or Azure translates), including IAM, networking, and least-privilege design
• Strong infrastructure-as-code skills (Terraform) and a track record of replacing ad hoc infra with reusable, self-service patterns
• Experience standing up an internal developer platform or paved-road program from scratch
• SOC 2, ISO 27001, or similar compliance experience in a fast-moving company
• Practical experience embedding security tooling into CI/CD (SAST, SCA, secret scanning, supply chain controls) and building secure-by-default pipelines
• Familiarity with construction tech, BIM/3D data, or other domain-rich data products
• 6+ years in platform engineering, infrastructure/DevOps, or site reliability, with real depth building infrastructure, not just operating it
• Demonstrated ability to drive platform adoption and influence engineering teams without formal management authority
• Working knowledge of AI/LLM security risks and a point of view on using AI tools safely
• A security mindset: you design for least privilege and think about how things get abused, even when security is not the headline of the task
• Experience securing data warehouses or large data pipelines (Snowflake a plus)