(Senior) Infrastructure & Security Engineer

Role overview A remote-first startup is hiring an infrastructure and security engineer to harden its core platform and treat reliability, security, and auditability as first-class product features for enterprise customers. The role blends platform engineering, security engineering, and IT responsibilities, with significant ownership over how production systems are built and operated.

Responsibilities - Own and harden the platform across cloud infrastructure, Kubernetes, Postgres, infrastructure as code, CI/CD, observability, and incident response. - Embed security by default through least-privilege access, secrets management, and tenant isolation rather than retrofitting controls later. - Translate SOC 2 and ISO 27001 commitments into automated controls and continuously generated evidence. - Convert recurring operational toil into self-service systems that engineers actually adopt, such as preview environments and streamlined internal access. - Build the sandboxes, guardrails, and human checkpoints that let engineering teams run AI agents safely. - Lead incident response calmly, then drive the follow-up work that prevents the same class of issue from recurring.

Requirements - Deep hands-on experience with at least one major cloud provider (AWS or comparable), Kubernetes, infrastructure as code, CI/CD pipelines, and observability tooling. - Security engineering skills grounded in translating least-privilege and auditability requirements into working, automated systems. - Comfort owning the enterprise IT side of a startup, including certifications, customer security reviews, identity, and device management. - High agency in ambiguous situations, with the ability to turn a vague problem into a concrete, shipped plan. - Pragmatic judgment about when to harden, when to simplify, and when to leave a system untouched. - Genuine curiosity about how AI changes the way software is built and run.

Nice to have - Production experience with Terraform, Postgres, RabbitMQ, and a Node.js or TypeScript event-sourced stack is welcomed but not required; depth in what you know and the ability to pick up the rest matters more.

Benefits and work setup - Remote-first team culture with a fast-moving, builder-oriented environment that values curiosity, authenticity, and kindness. Candidates from non-traditional backgrounds are encouraged to apply even if they do not check every box.