Senior Software Engineer, Platform Security & Reliability

The Role

We're hiring a Senior Software Engineer for the Infrastructure team, the group that owns the AWS foundation the rest of Farther's engineering builds on. This is a backend platform role with a security mandate. You come in with an eye for how a platform is actually put together: how our APIs are exposed and authenticated, who and what can reach which data, how storage is laid out, how encryption and key management are applied, how secrets move.

You own those patterns, set the standards so new services get them right by default, and build the monitoring that tells us proactively when something drifts from those standards or when the platform is unhealthy.

You build with compliance in mind: documented controls, automated evidence collection, and a posture that stands up to accredited security compliance review.

You can own a project end to end across compute, networking, data, and IAM, and you act as a technical advisor to teams designing their own systems.

Your Impact

• Own how the platform is accessed: API authentication and authorization patterns, IAM policy design, account and network boundaries, and secrets management, so access is least-privilege and every grant is traceable
• Own data protection across the platform: how storage is structured and segmented, encryption at rest and in transit, key management with KMS, and retention and access controls on sensitive data
• Build proactive security and health monitoring: detective controls with AWS-native tooling (GuardDuty, Security Hub, Config, CloudTrail), alerts on access anomalies and policy drift, and SLIs, SLOs, and dashboards with CloudWatch, X-Ray, and RUM so the platform reports problems before anyone else does
• Maintain compliance-grade controls: documented standards, automated evidence collection, and the audit logging and traceability accredited compliance reviews require
• Design and build shared platform services, internal tooling, and reusable infrastructure patterns on core AWS building blocks (ECS, Lambda, SQS/SNS, RDS, S3), secure by default so other teams inherit the right posture
• Review system designs across engineering for access control, trust boundaries, and blast radius, and drive the fixes when something doesn't hold up
• Build and maintain infrastructure as code that scales with a growing engineering team
• Set platform, security, and reliability standards, document them, and bring the broader engineering team along

The Ideal Match

• 8+ years of software engineering experience with strong backend and platform depth
• Deep, hands-on AWS: you know how the core services interact and can build a production system from them end to end
• Proven cloud security ownership: you have audited and hardened a real AWS environment's API access, IAM, network boundaries, storage, encryption, and secrets, and left the audit trail to prove it
• Infrastructure as code as your default mode (CDK, Terraform, or CloudFormation)
• Real monitoring and alerting practice: detective controls, SLIs/SLOs, alert design, and using telemetry to find problems before users do
• Proficiency in TypeScript, Python, or Scala; you pick up languages as needed and care more about system design than syntax
• Fluent daily use of AI coding tools, paired with real ownership of the result: you can explain how anything you shipped works, defend the design choices, and say where it would fail
• Strong written communication; you document what you build

Bonus Points

• AWS Certified Security - Specialty, or Solutions Architect - Professional
• Experience in accredited security compliance protocols or financial-services regulatory frameworks (SEC Regulation S-P, GLBA)
• Threat modeling, vulnerability management, or pen-test remediation you owned to closure
• SRE background: incident response, postmortems, capacity planning, load testing
• Production PostgreSQL operations
• Fintech or another regulated industry