DevOps Engineer

• Collaborate with the DevOps team to own and evolve CI/CD pipelines (GitHub Actions, ArgoCD, or similar) that let engineers ship with speed and confidence
• Build, manage, and harden cloud infrastructure on AWS and/or GCP using Terraform or Pulumi
• Manage Kubernetes clusters (EKS/GKE) in production, deployment strategies, autoscaling, resource optimization, and security hardening
• Define and enforce security controls across cloud environments: IAM policies, secrets management (Vault/AWS Secrets Manager), network segmentation, and vulnerability scanning
• Implement and maintain observability stacks, metrics, logs, tracing, using Datadog, Prometheus/Grafana, or OpenTelemetry
• Participate in incident response and blameless post-mortems alongside the team; help define SLOs and drive reliability improvements
• Collaborate with engineers to containerize workloads and optimize service delivery from dev to production
• Support compliance and audit readiness (SOC 2, ISO 27001) by building automated controls and evidence collection into the platform
• Identify and eliminate toil through thoughtful automation and help the broader team do the same
• Handle light IT/Help Desk support for the North America team

• 4+ years of production DevOps, platform engineering, or infrastructure engineering experience in a cloud-native SaaS environment
• Proven experience in security engineering, application security, or DevSecOps — you treat security as a first-class engineering concern
• Hands-on expertise with Kubernetes (EKS or AKS) and Docker in production, including cluster security and workload isolation
• Strong Infrastructure as Code skills using Terraform, Helm and GitOps (ArgoCD)
• Deep familiarity with AWS and Azure(optional) — VPCs, IAM,EKS, Lambda, CloudWatch, and equivalent Azure services
• Proficiency in Python, Go, or Bash for automation, tooling, and scripting
• Strong understanding of API design, authentication protocols (OAuth 2.0, SAML, OIDC), and zero-trust security models
• Experience with observability tooling — Datadog, Prometheus, Grafana, or the ELK stack
• Familiarity with security best practices for SaaS platforms: secrets management, SAST/DAST in pipelines, cloud security posture management
• Experience using AI-assisted engineering tools (e.g., Cursor, Claude) to streamline infrastructure-as-code, automation, scripting, troubleshooting, and software delivery workflows.
• Ability to translate complex security and infrastructure concepts into clear, actionable solutions — for both technical and non-technical stakeholders

Nice to have:

• Experience in a cybersecurity or SaaS security company (SSPM, CSPM, ITDR, or similar)
• Familiarity with SOC 2 Type II or ISO 27001 compliance implementation
• Contributions to open-source infrastructure tooling