Senior Infrastructure Engineer

Role overview This senior role owns the design, development, implementation, and ongoing operation of infrastructure and build/release pipelines for a software supply chain security platform. The work centers on extending pipelines to be fast, secure, performant, and scalable across diverse runtime environments, while collaborating closely with Product and dogfooding the company's own core offerings.

Responsibilities - Own end-to-end infrastructure and build/release pipeline design, development, implementation, and operations. - Deploy infrastructure-as-code and automation using Terraform, Ansible, Helm, Go, and similar tools to support platform and customer requirements. - Operate and sustain cloud-based CI/CD pipelines with a DevSecOps, shift-left, and automation-first mindset, integrating security tooling throughout the SDLC. - Build and package software for varied environments including AWS, Azure/GCP, on-prem, air-gapped, and FedRAMP deployments. - Automate application deployment using container technology, Kubernetes, GitHub, and related CI/CD tooling, and expose secure public endpoints via load balancers, CDNs, and related infrastructure. - Implement observability across metrics, events, logs, and traces with alerting, and assist developers in delivering secure applications through CORS policies and API security engineering.

Requirements - Hands-on experience with IaC and automation tools such as Terraform, Ansible, Helm, and Go. - Proven experience operating cloud-based CI/CD pipelines with a DevSecOps and automation-first approach. - Strong Kubernetes experience deploying, operating, and troubleshooting in cloud environments, plus networking and runtime troubleshooting including remote and air-gapped setups. - Experience building and packaging software for multiple runtime environments, including cloud, on-prem, and air-gapped targets. - Track record integrating DevSecOps tooling into automated pipelines across the SDLC, and prior work on commercial SaaS and on-prem products serving external customers. - Strong verbal and written communication skills, including the ability to produce clear technical and design documentation.

Nice to have - Deploying Kubernetes to edge environments using bare VMs and bare metal. - Packaging software for on-prem and edge using Zarf, Helm charts, Packer, or virtual appliances. - Securing AWS environments, containers, and Kubernetes clusters. - Familiarity with US Government network compliance programs such as FedRAMP or CMMC. - SDLC security tooling experience across SCA, DAST, SAST, and other DevSecOps categories. - Deploying and supporting self-hosted LLMs, and working with secure SDLC practices such as bug bounty programs and software vulnerability management.

Benefits and work setup - Salary range of $150,000 to $210,000 per year plus meaningful stock options, with placement based on experience and skills. - Fully remote with potential for hybrid co-working arrangements. - Unlimited paid time off, medical, dental, and vision insurance fully covered for the employee and dependents, and 401(k) and retirement options.