Principal Platform Engineer, Security Platform

At Wyze, we make smart home technology accessible to everyone. We're known for disrupting markets with high-quality, affordable products - from cameras to lighting to sensors and more. We believe technology should simplify life, not complicate it. We’re a fast-moving, customer-obsessed team driven by curiosity and powered by data. Wyze is seeking a hands-on builder with backgrounds in platform engineering, infrastructure engineering, SRE, or security engineering. As a security builder at Wyze, you will design and build secure-by-default platforms, automation, and guardrails that continuously enforce security and compliance controls. You will turn security requirements into scalable, automated controls and self-service workflows. Responsibilities: Secure-by-Default Infrastructure: Build reusable infrastructure patterns and paved paths that make secure and compliant configurations the default for engineering teams. Policy & Guardrails: Implement policy-as-code and automated guardrails across infrastructure provisioning, GitOps, CI/CD, and cloud environments to enforce requirements. Identity & Access Automation: Automate identity lifecycle, access provisioning, least-privilege enforcement, privileged access, and periodic access controls across Wyze systems. Security & Compliance Automation: Translate security and compliance requirements into automated, testable, and enforceable controls across Wyze infrastructure and engineering workflows. Continuous Compliance: Detect configuration and control drift, automate remediation where appropriate, and maintain continuous compliance rather than point-in-time validation Qualifications: 7+ years of experience in software engineer. Hands-on experience with cloud platforms such as AWS, GCP, OCI, or Azure, and Infrastructure-as-Code tools such as Terraform. Strong programming skills in Go, Python, or similar languages for automation and infrastructure tooling. Experience with IAM, CI/CD such as GitHub Action and Jenkins, GitOps automated provisioning, and secure-by-default infrastructure practices. Familiarity with policy-as-code and guardrail technologies such as OPA/Rego, AWS SCPs, Azure Config, and similar technologies Strong understanding of least privilege, secrets management, cloud security, and automated security and compliance controls. Strong problem-solving, communication, and collaboration skills across different teams. Compensation The base pay range for this role is $196,000 – $266,000 per year.