Principal Platform Engineer, Security Platform

At Wyze, we make smart home technology accessible to everyone. We're known for disrupting markets with high-quality, affordable products - from cameras to lighting to sensors and more. We believe technology should simplify life, not complicate it. We’re a fast-moving, customer-obsessed team driven by curiosity and powered by data.

Wyze is seeking a hands-on builder with backgrounds in platform engineering, infrastructure engineering, SRE, or security engineering. As a security builder at Wyze, you will design and build secure-by-default platforms, automation, and guardrails that continuously enforce security and compliance controls. You will turn security requirements into scalable, automated controls and self-service workflows.

Responsibilities:

• Secure-by-Default Infrastructure: Build reusable infrastructure patterns and paved paths that make secure and compliant configurations the default for engineering teams.
• Policy & Guardrails: Implement policy-as-code and automated guardrails across infrastructure provisioning, GitOps, CI/CD, and cloud environments to enforce requirements.
• Identity & Access Automation: Automate identity lifecycle, access provisioning, least-privilege enforcement, privileged access, and periodic access controls across Wyze systems.
• Security & Compliance Automation: Translate security and compliance requirements into automated, testable, and enforceable controls across Wyze infrastructure and engineering workflows.
• Continuous Compliance: Detect configuration and control drift, automate remediation where appropriate, and maintain continuous compliance rather than point-in-time validation

Qualifications:

• 7+ years of experience in software engineer.
• Hands-on experience with cloud platforms such as AWS, GCP, OCI, or Azure, and Infrastructure-as-Code tools such as Terraform.
• Strong programming skills in Go, Python, or similar languages for automation and infrastructure tooling.
• Experience with IAM, CI/CD such as GitHub Action and Jenkins, GitOps automated provisioning, and secure-by-default infrastructure practices.
• Familiarity with policy-as-code and guardrail technologies such as OPA/Rego, AWS SCPs, Azure Config, and similar technologies
• Strong understanding of least privilege, secrets management, cloud security, and automated security and compliance controls.
• Strong problem-solving, communication, and collaboration skills across different teams.

Compensation The base pay range for this role is $196,000 – $266,000 per year.