Policy As Code

Policy As Code Engineer Jobs

3 jobs found

1d ago

Staff Security Engineer, PEG Security Engineering (Information Security, Architecture and Engineering)

Bain & Co. Chicago, IL

Chicago, IL

1d ago

$141k - $177k/yr Full time Senior Api Security Azure

Apply Now

Job Description

Bain & Co offers a collaborative, impact-driven environment with a strong focus on practical security outcomes. Employees enjoy comprehensive benefits, generous paid time off, and a path that blends rigorous security work with fast, delivery-focused engineering. This role is based in Chicago, IL with hybrid work options.

As a Staff Security Engineer in the PEG Security Engineering team, you will secure Bain’s PE platform estate on Azure AKS, embed security into the development lifecycle, define security standards and controls, and lead platform security engineering and incident response across cross-functional teams.

Responsibilities

Own and operate the platform's security posture end to end across core controls including HashiCorp Vault or Azure Key Vault, Istio mTLS, Cilium network policy, Pod Security Standards, and OPA/Gatekeeper policies.
Design and implement zero trust security architecture across the estate with defense in depth, least privilege, and explicit security boundary design.
Perform lightweight threat modelling (STRIDE) for new services and major features prior to implementation; document risks, mitigations, and residual risk decisions.
Manage supply chain security controls such as container image scanning, image signing, SBOM generation, and dependency vulnerability management.
Define and enforce identity and access controls including SAML/OIDC integration patterns, JWT/OAuth concepts, and enterprise IdP guidance (Okta/Entra).
Define and maintain data classification controls and enforce them at the platform layer through governed access patterns, masking/tokenization, and API-layer enforcement.
Own runtime detection controls by operating Falco rules and escalation pathways; integrate signals with the central SIEM and minimize alert noise while preserving actionable insight.
Lead security incident response for the platform, driving containment, remediation, and post-incident reviews with clear follow-up actions.
Conduct regular security reviews of the AI layer, including Agent Gateway egress controls, prompt injection risks, PII handling, and data exfiltration controls for model interactions.
Maintain security runbooks and execute quarterly internal security reviews across teams; ensure controls are tested, auditable, and actively maintained.
Set and enforce security standards, build controls as code, and partner with Platform Engineering, Data Platform, Product Engineering, and the Agent / AI squad to reduce risk while enabling rapid delivery.

Requirements

Bachelor’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related field, or equivalent practical experience.
6+ years of experience in security engineering, infrastructure security, SRE/DevOps with a security focus, or platform engineering roles with hands-on security ownership.
Proven experience implementing and operating security controls in Kubernetes-based production environments (policy enforcement, workload isolation, network controls, and runtime detection).
Experience designing and operating secrets management and identity/access controls (HashiCorp Vault and/or Azure Key Vault, PKI, OIDC/SAML patterns, enterprise IdP integration).
Experience implementing supply chain security practices (scanning, signing, SBOMs, dependency management) and integrating controls into CI/CD pipelines.
Experience leading or materially contributing to security incident response, including post-incident review and remediation planning.
Demonstrated ability to work cross-functionally as an enabling partner, raising security standards without unnecessarily blocking delivery.

Technologies

HashiCorp Vault, Azure Key Vault
Istio, Cilium, Pod Security Standards, OPA, Gatekeeper
Falco, Kubernetes, AKS
SAML 2.0, OIDC, JWT, OAuth
Okta, Entra, Azure AD
Kyverno, Rego, Trivy, Cosign, Sigstore, Syft, Dependabot, Renovate
Python, Bash

Benefits

Bain pays 100% individual employee premiums for medical, dental and vision programs
Generous paid time off, including parental leave, sick leave and paid holidays
Fully vested 401(k) company contribution
Paid Life and Long-Term Disability insurance
Annual fitness reimbursements

Compensation and location

Location: Chicago, IL (hybrid)

Salary: USD 141,000 - 176,750 per year

Compensation by location

Chicago, IL: $141,000 - $169,250
Boston, MA: $147,250 - $176,750

View full job page →

10d ago

Prisma Cloud Platform Security Engineer

Novacoast Staffing Remote 🌍 Remote

Remote

10d ago

$65 - $75/hr Contract Cloud Cloud Native Cloud Platform

Apply Now

Job Description

Novacoast Staffing is seeking a Prisma Cloud Platform Security Engineer for a remote, contract engagement. This role concentrates on implementing, managing, and optimizing Prisma Cloud across single- and multi-cloud environments, with direct client interaction, scripting duties, deployment leadership, and policy development at the forefront.

Responsibilities

Implement and manage Prisma Cloud across diverse single- and multi-cloud deployments to support client projects.
Create custom Prisma Cloud policies tailored to each client’s requirements.
Collaborate with Docker and Kubernetes to bolster container security.
Lead cloud security solution deployments across various cloud configurations.
Offer technical guidance and strategic security recommendations to clients.
Configure Security Operating Platforms and optimize security policies.
Automate security processes by integrating with CI/CD pipelines.
Work with internal teams and clients to troubleshoot, guide, and deploy solutions.
Assist in migrating and validating security policies during environment transitions.

Requirements

3+ years of hands-on Prisma Cloud experience, including implementation and policy writing.
Client-facing experience—direct work with end clients.
Hands-on expertise with Docker and Kubernetes.
Experience automating pipelines in CI/CD environments.
Strong Python scripting skills.
3+ years delivering or leading security solutions in large enterprise settings.
Bachelor’s degree in computer science, MIS, or equivalent experience.

Technologies

Prisma Cloud
Docker
Kubernetes
Python

Experience

Containerization tools: 2 years (Required)
Cloud security: 3 years (Required)
Python scripting for DevOps: 3 years (Required)
Hands-on Prisma Cloud implementation and policy writing: 3 years (Required)

Compensation & Location

Location: Remote

Compensation: USD 65 - 75 per hour

Job Type: Contract

Benefits

Fully remote work
Medical, Dental, and Vision insurance
401K
PTO & sick leave (as required by law)

Schedule

8 hour shift, Monday to Friday

View full job page →

15d ago

Senior Software Engineer - AI Engineering

Mercury.com New York, NY

New York, NY

15d ago

$167k - $219k/yr Full time Backend Developer Senior API

Apply Now

Job Description

Based in New York, this onsite Senior Software Engineer - AI Engineering role offers a salary range of USD 166,600 to 218,700 per year. You will help extend, harden, and scale Mercury's internal AI platform, strengthen the shared knowledge layer, and accelerate AI prototyping across the organization.

Responsibilities

Develop and evolve MCP servers that unify internal systems and data sources into a coherent interface for agents and engineers.
Scale and operate the LLM gateway infrastructure, including routing, rate limiting, cost attribution, and cross-team observability.
Turn early patterns into durable defaults with shared prompt libraries, guardrails, and policy-as-code to enable fast and safe progress.
Define and maintain structured context artifacts that are clean, reliable, and agent-friendly so LLMs can reason accurately about Mercury's domain.
Improve internal knowledge discoverability and retrieval so both humans and agents can quickly access accurate answers.
Collaborate with domain teams to standardize key sources of truth and keep them current.
Create and refine sandbox environments and tooling that allow engineers to experiment with AI safely and efficiently.
Build self-service scaffolding so non-engineers such as PMs, ops, and finance can prototype and deploy AI-powered workflows with minimal hand-holding.
Develop playgrounds and evaluation harnesses to test and iterate internal AI agents in controlled environments before production.

Requirements

5+ years of backend development experience in complex, production systems, delivering components that other engineers depend on.
Fluent across programming languages with the ability to navigate platform engineering, infrastructure, and developer tooling independently.
Hands-on experience building LLM-powered systems such as RAG pipelines, agents, or evaluation frameworks, with at least one delivering to production.
Strong understanding of AI deployment tradeoffs including cost modeling, observability, latency, and safety.
High initiative and self-direction, capable of autonomous work with limited scope and high-leverage outcomes.
Clear communication across technical and non-technical audiences, explaining what was built and why it matters.

View full job page →

Policy As Code Engineer Jobs

Staff Security Engineer, PEG Security Engineering (Information Security, Architecture and Engineering)

Prisma Cloud Platform Security Engineer

Senior Software Engineer - AI Engineering

Get Policy As Code Engineer Jobs alerts