Senior Platform & Security Engineer

Our client, a fast-growing digital life insurance technology company, is seeking a Senior / Staff Platform & Security Engineer to own and enhance its cloud infrastructure, delivery pipelines, and security operations. The company operates a modern, multi-tenant insurance platform supporting policy administration, CRM, and broker applications built on Java/Spring, React, MongoDB Atlas, and Azure. As the engineering team adopts AI-accelerated development practices, this role will ensure that rapid innovation is supported by secure, reliable, and auditable engineering processes. This is a hands-on individual contributor role with significant ownership and autonomy. You will be responsible for building platform foundations, strengthening security practices, and ensuring production releases meet the highest standards for reliability and compliance within a regulated industry. Key Responsibilities: Own and enhance cloud infrastructure across Azure, including networking, identity management, RBAC, secrets management, and infrastructure-as-code practices.Design, maintain, and optimize CI/CD pipelines, containerized deployments, and release processes using tools such as GitHub Actions, Docker, Kubernetes, and Helm.Establish and enforce DevSecOps practices, including security scanning, vulnerability management, secrets protection, and access control.Maintain production reliability through automated testing, monitoring, troubleshooting, and performance optimization across application and data layers.Collaborate with engineering teams to improve platform scalability, security posture, audit readiness, and AI-assisted development workflows. Qualifications: Strong hands-on experience with Azure cloud platforms, including networking, identity management (Entra ID), RBAC, resource management, and infrastructure-as-code (Terraform, Bicep, or equivalent).Proven experience with Kubernetes, Helm, Docker, and containerized application environments.Strong background in CI/CD pipeline design and ownership, using tools such as GitHub Actions or similar platforms.Solid understanding of DevSecOps practices, including security scanning (SAST/DAST), dependency management, vulnerability remediation, secrets management, and IAM principles.Experience with Java/Spring applications, JVM build tooling (Maven), Git workflows, and enterprise application environments.Familiarity with automated testing, monitoring, troubleshooting production issues, and maintaining reliable release processes.Experience in regulated industries such as insurance, banking, or financial services is highly preferred.Exposure to AI-assisted development workflows, blockchain/crypto security, KYC integrations, or establishing security programs from the ground up is a plus.Strong documentation, communication, and problem-solving skills with the ability to work independently in a high-autonomy environment. To Apply: Please apply directly to this posting or email your CV/Resume to bernet.tam@pfccgroup.com. Due to the high volume of applications, only shortlisted candidates will be contacted. About PFCC Group: Bridging the Gap Between Vision and Technical Mastery. At PFCC Group, we help organizations scale by integrating cutting-edge AI, optimizing operations, and solving the modern talent puzzle. We connect elite technical talent with high-impact roles at the heart of global financial and technology leaders. Whether it’s building resilient infrastructure or leading digital transformation, we ensure the right minds are paired with the challenges that matter most.