Software Engineer, Infrastructure

Role overview

Own the systems that build, release, and operate an infrastructure product across hosted environments and customer cloud accounts. The work centers on making customer-managed deployments secure, repeatable, upgradeable, and as reliable as the hosted service, while creating shared tools and release processes for both.

Responsibilities

- Develop and maintain infrastructure-as-code, account bootstrap, and network patterns that let customers install and upgrade deployments with minimal bespoke work. - Define supported clouds, regions, Kubernetes versions, compatibility limits, and deprecation practices for independently versioned installations. - Build a release pipeline with staged promotion, approval controls, rollback, and separate handling of control-plane and data-plane components. - Establish availability and durability targets, observability, incident runbooks, and safe support processes for customer environments without standing access. - Create audited, tightly scoped automation for pre-install checks, installation, upgrade diagnosis, and operational guidance; require engineer approval for customer-account changes. - Work with engineering, product, security, and customer teams to set deployment guardrails and balance reliability, cloud costs, and product-wide needs.

Requirements

- Experience building infrastructure as software with Pulumi, Terraform, or CDK, plus Go or TypeScript tooling; production Kubernetes and Helm experience. - Deep AWS knowledge, particularly IAM, permission boundaries, Organizations policies, and VPC networking. - Experience operating and upgrading software in environments outside your direct control, such as customer cloud accounts, private networks, or regulated settings. - Track record shipping versioned software that customers upgrade independently, including compatibility guidance and planned deprecations. - Ability to troubleshoot issues across application, network, proxy, TLS, and certificate layers, and to work directly with customer platform and security teams. - Understanding of control-plane and data-plane separation, and practical experience using coding agents with human review where needed.

Nice to have

- Experience with bring-your-own-cloud, self-hosted, or single-tenant products; cell-based architecture; or private connectivity on GCP or Azure. - Production experience with workload identity or PKI, such as SPIFFE/SPIRE, cert-manager, or private certificate authorities; familiarity with OAuth, OIDC, mTLS, or agent protocols.

Benefits and work setup

The role is remote-first, with asynchronous collaboration and hiring focused in North and South America. The source describes health, dental, vision, and paramedical coverage, four weeks of vacation, statutory holidays, a volunteer day, equipment and peripherals support, and equity. Compensation is described as market-competitive; no specific salary is provided.