Platform Engineer; Runtime & Security

At Félix, we are building the indispensable financial companion for Latinos in the US. We combine an AI-powered, conversational-first interface with real-time financial infrastructure to make cross-border money movement as easy as sending a text. Starting with fast, affordable remittances powered by AI and crypto rails, we are expanding into credit, savings, and wallet services to support the complete immigrant financial journey.

Our ambition is to deliver a white-glove financial experience with the simplicity of a conversation to a community the traditional financial system has historically overlooked.

We are a hyper-growth Series C company, backed by over $300 million in funding from top-tier global investors, including Andreessen Horowitz, QED, Castle Island, Switch Ventures, HTwenty, Monashees, General Catalyst Customer Value Fund. This isn't just about the numbers; it's a testament to the trust our investors have in our vision and our team. Additionally, Félix was selected as an ‘Endeavour Entrepreneur’ and was a recipient of the Cross Tech Fintech Startups Award.

Joining Félix means you will be part of a team building a legacy, a company that will outlive us all. This is a rare opportunity to apply your skills to a deeply meaningful mission—serving a community that has been underserved for too long because we are obsessed with our customers. We get things done with urgency and focus, driven by extreme ownership over our impact.

We collaborate without ego, fostering radical transparency and fierce loyalty so we can grow together. Because we aim for insanely great rather than just good enough, we stay insatiably curious — always experimenting, building the future today, and delivering a product that truly makes our users' lives better.

We're looking for a highly technical Staff Platform Engineer to lead the platform and security foundations of Maestro — Félix's internal, identity-aware AI teammate.

Maestro already runs at meaningful scale (500+ per-user pods on private GKE) and lives where work happens:
Slack, incident rooms, and an emerging agentic intranet, acting across our toolchain (Git Hub, Google Workspace, Click Up, Notion, Pager Duty, New Relic).

The interesting problems here are not prompts or models. Once an AI teammate can open a pull request, page an engineer, or query production, the hard questions become identity, credentials, isolation, blast radius, and audit. This is a platform and security role for an agentic system — you'll own the secure, multi-tenant runtime that makes delegated AI work safe at scale.

You'll be the technical anchor for Maestro's infrastructure and security within the AI team: architecting the control plane, hardening the runtime, running the fleet, and shaping what the platform needs next as adoption grows. AI is the domain you'll operate in — deep platform and security engineering is the craft we're hiring for.

• Own the Maestro platform architecture. Design, build, and operate the multi-tenant control plane and per-user runtime on private GKE — the Kubernetes operators (CRDs/controller-runtime), Helm charts, gVisor-sandboxed pods, and per-user isolation primitives (KSA/GSA, Workload Identity, Network Policy, per-user work spaces) that reconcile one user into a fully wired, isolated environment.
• Lead the security model end to end. Treat the LLM and its tools as adversarial. Own identity separation (requester / actor / persona), JIT short-lived scoped tokens, an encrypted OAuth refresh-token vault (CMEK/Cloud KMS), zero-credential egress patterns, and a policy layer that decides whose credentials an agent uses — never the prompt.
• Harden service-to-service trust. Enforce mesh identity with Istio mTLS + SPIFFE,…