Senior Site Reliability Engineer, Security

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Manage, develop, and enhance the Kubernetes and cloud infrastructure that supports AuthZed's managed services.

• Promote infrastructure security across Kubernetes, cloud systems, networking, IAM, secrets management, encryption, and service-to-service interactions.

• Fortify security throughout the software supply chain, covering CI/CD, dependencies, container images, build artifacts, provenance, vulnerability scanning, and deployment controls.

• Create automated guardrails, policies, and secure defaults for the engineering platform.

• Enhance the identification, prioritization, and remediation of vulnerabilities across containers, dependencies, infrastructure, and cloud services.

• Broaden security telemetry, logging, alerting, detection capabilities, and incident-response playbooks.

• Engage in the SRE on-call rotation and lead or assist during production incidents.

• Collaborate on architecture and infrastructure designs while contributing to threat modeling efforts.

• Influence security engineering strategies, architectural decisions, customer security requirements, and improve AuthZed's security posture.

⛳️ Requirements

• Extensive experience managing production systems as a Site Reliability Engineer, Platform Engineer, Infrastructure Engineer, or Security Engineer.

• Profound hands-on expertise with Kubernetes and containerized production environments.

• Strong proficiency with at least one major cloud provider (AWS, GCP, Azure) and its security model.

• Solid understanding of IAM, workload identity, networking, TLS/PKI, encryption, secrets management, and cloud-native security.

• Experience with Infrastructure as Code tools such as Pulumi, Terraform, or AWS CDK.

• Background in designing, operating, and securing CI/CD and software delivery pipelines.

• Strong grasp of Linux and fundamental container security principles.

• Familiarity with observability, monitoring, logging, and production incident response.

• Strong software engineering capabilities and a tendency to address operational and security issues through automation.

• Excellent security judgment and the ability to assess risk in real-world distributed systems.

• Capability to work independently, lead projects across engineering domains, and offer technical guidance in a small, highly skilled organization.

• Experience managing distributed databases or other stateful distributed systems in production is a plus.

• Experience in securing multi-tenant SaaS or cloud infrastructure is beneficial.

• Experience in contributing to security architecture, threat modeling, penetration testing, or security assessments is an advantage.

• Relevant certifications such as CKA, CKS, AWS Certified Security – Specialty, CISSP, or CCSP are a plus.

• Legally authorized to work in the U.S. or Canada.

🏝️ Benefits

• Competitive salary determined by experience and location.

• Stock options at an early-stage startup.

• Comprehensive benefits package including healthcare (for US-based employees) and other insurance.

• Fully remote work with a flexible schedule to accommodate various time zones.

• Biannual travel for team off-sites focused on team bonding, collaboration, and enjoyment!