Platform Engineer, Security

About the Role

Dorsia is seeking a Platform Engineer with deep security expertise to join our core engineering team. You will own the security posture of a platform that serves some of the most discerning and high‑profile members in the world. Discretion, trust, and data integrity are core to the product experience we deliver.

The ideal candidate has strong platform experience first and foremost, with security as a genuine depth area. You have built and maintained cloud infrastructure and shipped production systems in an environment of sensitive member data, payment rails, and integrations with high‑end operators.

What You’ll Do

Cloud Infrastructure & Platform

• Architect, design, develop, deploy and maintain high‑quality infrastructure solutions for our Typescript and PHP‑based applications.
• Own and evolve Dorsia’s cloud infrastructure across environments in alignment with core business needs and continuously improve to meet business needs and manage cloud costs.
• Maintain secure‑by‑default configurations across VPCs, IAM policies, ECS/container services, CDN, and DNS.
• Troubleshoot and resolve complex technical issues, providing innovative solutions to ensure the stability and performance of the platform.
• Stay up to date with the latest cloud technologies, industry trends, and best practices.
• Own observability and incident response including logging, alerting, and on‑call playbooks across the platform using Datadog and related tools.
• Collaborate with product managers, designers, and business stakeholders to understand project requirements and translate them into technical specifications.
• Foster a culture of continuous improvement through coding standards, code reviews, and knowledge sharing via documentation and training.

Security Architecture

• Define and enforce authentication, authorization, and access control patterns across services – member‑facing, operator‑facing, and internal.
• Lead threat modeling for new product features before they ship; embed directly with product engineers to ship security improvements without slowing down velocity.
• Own secrets management, certificate lifecycle, and key rotation across environments.
• Build SAST/DAST tooling into the CI/CD workflow.

The Winning Recipe

• Bachelor’s or Master’s degree in Computer Science, Software Engineering, or related field.
• 6‑8 years of major cloud experience (preferably AWS); 1‑2 years of hands‑on platform or application security engineering.
• Deep knowledge of container‑build best practices (PHP containers are a plus), container orchestration platforms (ECS Fargate is a plus), and build and deployment automation (Github Actions is a plus).
• Solid understanding of backend systems, APIs, and web service integration.
• Strong problem‑solving and analytical skills, with the ability to identify and resolve complex technical issues.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross‑functional teams and stakeholders.
• Relevant knowledge of Cloud/DevOps trends, emerging technologies, and best practices, with a commitment to staying current on the rapidly evolving AI cybersecurity landscape and latest trends.

Strong plus: prior experience with reservation system integrations (e.g. SevenRooms, Resy, OpenTable), dining payments infrastructure, or luxury/membership consumer apps.

Compensation & Benefits

• Flexible PTO
• Medical, dental, and vision insurance
• FSA
• Commuter benefits
• Free membership to One Medical
• Teladoc
• Talkspace
• Kindbody
• 401(k)
• In‑office lunch 3 days a week
• Employee Dining Credits
• Salary ranges:
  • Junior level: $100,000–$160,000
  • Mid level: $150,000–$200,000
  • Senior level: $190,000–$250,000