Staff Security & Platform Engiineer

Staff Security & Platform Engineer | AI-Driven HealthTech | Up to $240K Base + Bonus + Equity I'm partnering with a high-growth, early-stage healthcare technology company building an AI-driven platform designed to transform oncology surveillance and survivorship care. As the company enters its next stage of growth, they’re hiring a Staff Security & Platform Engineer to take genuine end-to-end ownership of the cloud, security and compliance foundations underpinning both their core healthcare product and AI ecosystem. This is not a narrow DevOps role. You’ll operate at the intersection of Platform Engineering, Cloud Security, DevSecOps and regulated healthcare infrastructure, with the autonomy to define how the environment should be architected, secured, automated and operated as the organization scales. What you’ll own: Architect, secure and operate production infrastructure spanning AWS + GCP, including secure interoperability between the two environments Build and mature Terraform/IaC, deployment automation and CI/CD infrastructure Own cloud IAM and access governance, including least privilege, service accounts and privileged access Drive SOC 2 and HIPAA controls, audit readiness, evidence and remediation Own platform security across secrets/key management, vulnerability management and security operations Administer and evolve GitHub and CI/CD workflows, creating increasingly automated and reproducible deployment processes Build robust monitoring and observability, with Datadog currently central to the environment Architect disaster recovery, rollback and business continuity capabilities Help establish secure Trusted Research Environments supporting healthcare research and AI workloads Partner directly with Engineering, AI and senior leadership while becoming the internal authority on cloud/platform architecture and security One of the first major challenges will be particularly interesting: helping establish a secure GCP research/AI environment and connecting it safely with the AWS-based product ecosystem, with sensitive healthcare data, HIPAA requirements, auditability and reliability built into the architecture from day one. What they’re looking for: You’ll likely bring 10+ years across some combination of Platform Engineering, SRE, DevOps, DevSecOps, Cloud Infrastructure or Cloud Security, with Staff/Principal-level technical ownership. The strongest backgrounds will combine AWS + GCP, Terraform, CI/CD, GitHub, IAM, cloud security, SOC 2, HIPAA, vulnerability management and production operations. Healthcare or life sciences experience is particularly compelling, although other highly regulated environments such as fintech or government are relevant. Most importantly, they want a hands-on builder. Someone who can establish the architecture and standards, but is equally comfortable getting into Terraform, troubleshooting production infrastructure, tightening IAM controls, investigating vulnerabilities or designing the secure connection between two cloud environments. Why this one stands out: You’re joining early enough that many of the most important platform and security decisions are still yours to shape. The remit touches the core healthcare product, AI infrastructure, clinical data, security and compliance, and the person joining will have meaningful influence over how the technology organization scales. Cambridge, MA (Kendall Square) | Hybrid | Up to $240K base + bonus + early-stage equity. #J-18808-Ljbffr