Lumin Digital

Lumin Digital

Security Platform Engineer

Remote- United States

Sponsorship not specifiedDetected 37 days ago
PythonCode ReviewGitElasticsearchAWSKubernetesTerraformCI/CDAPI DevelopmentRESTCybersecurityComplianceCommunicationCollaboration

About the role

  • Your scope spans telemetry clusters, GitOps-driven deployment workflows, and the patterns that make security a paved path for the rest of engineering.
  • You will work in AI-assisted engineering tools every day: agentic coding assistants like Claude Code, MCP-based integrations, and custom agent harnesses.

Responsibilities

  • Build and operate Lumin's security fabric: the foundation other security capabilities depend on, engineered for reliability and scale across hundreds of environments.
  • Build and maintain agentic AI workflows using tools like Claude Code, MCP-based integrations, and custom agent harnesses to automate security platform engineering tasks.
  • Build and operate security telemetry, log analytics, and observability infrastructure: logging clusters, ingest pipelines, OpenSearch index management and performance tuning, and the alerting systems that enable detection and response capabilities across the platform.
  • Design and implement deployment workflows using GitOps patterns (ArgoCD, Argo Workflows, Kustomize) to manage security infrastructure across hundreds of AWS accounts and regions, with consistency, auditability, and separation of duties enforced as code.
  • Write and maintain production-quality Python applications and tooling that support platform operations: automation, integrations, internal utilities, and the AI-assisted workflows that wrap them.
  • Design and maintain secure cross-account and multi-region infrastructure patterns, including KMS, IAM roles, and VPC configurations, ensuring consistent security posture across hundreds of environments.
  • Provide engineering support during security incidents by ensuring logging and monitoring infrastructure is healthy, data is available, and tooling is functioning, in coordination with Security Operations, who own the response process.
  • Support internal security audits and compliance frameworks by engineering evidence collection into the platform's data flows.
  • Collaborate with other Security Engineers, Risk teams, and core Site Reliability Engineering to align infrastructure decisions and share operational knowledge.
  • Evaluate emerging AI-assisted engineering patterns and tooling through proof-of-concept work, including agent harness designs, prompt patterns, and eval methodologies relevant to platform reliability and security automation.

Requirements

  • Industry certifications that demonstrate hands-on technical depth are valued but not required.
  • Demonstrated experience with GitOps deployment patterns (ArgoCD, Argo Workflows, Kustomize, or similar) and container orchestration in production environments.
  • Experience with security telemetry pipelines and log analytics platforms (OpenSearch or similar), including data normalization, enrichment, and the structural fidelity required for downstream automation.
  • Working knowledge of cloud security and compliance frameworks (SOC 2, PCI DSS, CIS Benchmarks, AWS Well-Architected), with the ability to translate control requirements into automated, auditable systems.
  • Excellent written and verbal communication, including the ability to translate complex platform architectures into clear documentation, runbooks, and knowledge-transfer materials.
  • While performing the duties of this Job, the employee is regularly required to sit
  • Ability to occasionally lift/move up to 25 pounds.
  • At least 1 year of production experience with at least 2 agentic coding tools, such as Claude Code, Gemini, Cursor, Codex, AMP, or OpenCode.
  • Hands-on proficiency with cloud-native platform engineering: AWS (KMS, IAM, EKS, networking, and supporting services), Kubernetes, and Terraform or equivalent IaC tools.

Nice to have

  • Contributions at the edge of what's possible with platform reliability and AI, including open-source projects, agent evaluation work, public writing, talks, or similar.
  • Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people.
  • These values shape a workplace where collaboration thrives, ideas flourish, and new possibilities are discovered every day.
  • We encourage our team to explore, experiment, and challenge the status quo - because continuous improvement isn't just a goal, it's how we operate.
  • Lumin Digital is an equal opportunity employer.
  • For more information, visit lumindigital.com http://lumindigital.com.

Skills

  • agentic coding assistants like Claude Code, MCP-based integrations, and custom agent harnesses.
  • Success means our security fabric scales without us, and our on-call rotations get quieter every quarter.
  • Write and maintain production-quality

Compensation

  • Minimal, generally 12 days or less per year, approximately two team get-togethers per year.

Benefits

  • include: We take care of our people with medical, dental, and vision insurance, a 401(k) with company match, flexible PTO plus 12 paid holidays, paid sick leave, and paid parental and family leave.
  • We also offer a lifestyle spending account, tuition reimbursement, and a cell phone stipend.
  • Participate in an on-call rotation for security infrastructure services, restoring service health, documenting resolutions, and converging the systems toward needing fewer humans in the loop over time.

Company info

  • At Lumin, we thrive on curiosity and innovation.
  • Our culture is built on trust in our expertise and decisions, respect for diverse perspectives and talents, and boldness in pursuing new ideas.

Equal opportunity

  • Individuals with a disability who are otherwise able to perform the essential functions of the job may request reasonable accommodation through the Human Resources department.
  • equal opportunity employer.
  • We consider all qualified applicants without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other legally protected basis.

This listing is sourced directly from Lumin Digital's careers page and normalized into a canonical job model.