Principal Platform & Security Engineer

Company Description

The global Red Bull Digital Products & Services technology team is responsible for building, launching, and maintaining cutting-edge technology solutions that support all global consumer-facing digital products. These include streaming platforms such as Red Bull TV, mobile apps and games, RedBull.com, and other initiatives that advance the brand by staying at the forefront of emerging technologies.

The Principal Platform & Security Engineer is responsible for defining, evolving, and protecting the technical foundations of Red Bull’s U.S.-based Global Digital Products & Services portfolio.

This role operates horizontally across product pillars, including the Streaming Platform, Wings for Life World Run, and the Digital Products Studio, which focuses on native applications and emerging technologies. The Principal Platform & Security Engineer ensures that teams can move quickly without fragmenting infrastructure or increasing risk, and without compromising security, reliability, or brand trust.

In addition, this role works in close partnership with the Austria-based Global Digital Products & Services Platform, as well as the MIT and IT teams, to align on shared standards, architectural principles, security, and long-term platform strategy across regions.

This position will lead efforts to assess, consolidate, and mature the current U.S. platform landscape across multiple cloud providers, establishing consistent standards for resource management, access control, and operational visibility as the foundation for future growth.

As engineering teams adopt AI-assisted development tools and agent-based coding workflows, this role defines the guardrails, automation, and platform capabilities required to safely scale both human- and AI-driven engineering across multiple products, teams, and geographies.

Job Description

PLATFORM ENGINEERING & DEVELOPER ENABLEMENT

Define and evolve the platform architecture for cloud infrastructure, CI/CD, observability, and systems management across U.S. digital products.

Design and maintain “paved roads” and “golden paths” that enable consistent, secure delivery for streaming, mobile, and emerging technology products.

Manage and rationalize a multi-cloud environment spanning AWS, GCP, Azure, and partner platforms, making pragmatic decisions about workload placement and consolidation.

Establish and enforce standards for resource tagging, ownership attribution, and cost allocation across all cloud accounts and environments.

Identify fragmentation, duplication, and systemic risks across product teams, and propose appropriate platform-level remediation strategies.

Collaborate with teams that own core platforms to review, influence, and guide platform design decisions.

Build and maintain self-service infrastructure provisioning, including sandboxed environments for experimentation and proof-of-concept work, enabling product teams to move quickly without compromising production systems.

Promote self-service and automation opportunities while coordinating with the teams responsible for implementation and operations.

Align platform strategies and tooling with Austrian DPS counterparts to ensure global consistency where appropriate.

SECURITY ARCHITECTURE & GUARDRAILS

Take ownership of platform-level security standards and policy-as-code for U.S. digital products.

Audit, redesign, and enforce IAM policies across all cloud providers, implementing least-privilege access, clearly defined role boundaries, and automated access reviews.

Lead the adoption of SSO and SCIM across all third-party tools and services to ensure centralized identity management and automated provisioning and deprovisioning.

Design and enforce identity and access management models for both human users and AI agents.

Define security boundaries for AI-assisted development, including data access controls, intellectual property protection, and model usage guidelines.

Establish data classification standards and ensure platform-level controls to support data privacy and regulatory compliance.

Collaborate with U.S. Security, Legal, and Corporate IT teams, as well as Austrian counterparts, on threat modeling and compliance initiatives.

Lead architectural planning and long-term remediation efforts for security incidents affecting U.S. platforms.

RELIABILITY, OBSERVABILITY & INCIDENT DESIGN

Define standards for monitoring, alerting, and system health across streaming, mobile, and web platforms.

Establish Service Level Objectives (SLOs) and Service Level Indicators (SLIs) in partnership with product teams to define and measure service reliability targets.

Establish incident response frameworks, conduct postmortems, and drive reliability improveme