Site Reliability Engineer – SRE

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the availability, latency, and error rates of Enformion APIs; establish service level objectives and alerting mechanisms.

• Spearhead the troubleshooting and resolution of production incidents; conduct blameless post-incident reviews and monitor follow-up actions.

• Automate repetitive operational tasks and remediation efforts.

• Strategically plan capacity and optimize performance across CDN, applications, and data tiers.

• Create solutions to detect harmful or unwanted traffic, such as scraping, malicious bots, credential stuffing, fake account creation, and API key abuse.

• Set up and fine-tune CDN, WAF, bot management, and rate-limiting controls.

• Examine traffic logs and investigate patterns and trends of abuse.

• Uphold acceptable-use policies and terms of service at the infrastructure level.

• Manage infrastructure as code and implement security policy checks prior to production changes.

• Enforce least-privilege IAM, network segmentation, TLS management, and secrets handling within AWS environments.

• Integrate security checks into CI/CD pipelines, covering dependency, container, and configuration scanning.

• Identify and resolve configuration drift; maintain centralized logging for operational and security investigation purposes.

• Provide automated-control evidence for audits and client security questionnaires.

• Collaborate with Engineering, Marketing, Product, and Legal/Compliance teams to safeguard site quality and data integrity.

• Assist marketing and product teams in understanding how traffic quality impacts analytics, conversion metrics, and campaign reporting.

⛳️ Requirements

• Bachelor’s degree in computer science, a related technical field, or equivalent practical experience.

• Minimum of 3 years of experience with security attacks and mitigation strategies, particularly regarding bot, scraping, and application-layer threats.

• Hands-on experience with CDN providers (Akamai, Cloudflare, Fastly) and their traffic management, WAF, and bot management capabilities.

• Proficient in using Elastic/OpenSearch or a similar platform for log mining and analytics.

• Strong understanding of TCP/IP, DNS, HTTP, and TLS, and the management of traffic at each layer.

• Skilled in Linux administration and scripting (Python, Bash, or similar languages).

• Experience managing production systems in a public cloud environment.

• Familiar with Infrastructure as code practices (e.g., Terraform).

• Experience in integrating security tools into CI/CD pipelines.

• Knowledge of containerization and orchestration, including basic container security principles.

• Experience with observability tools (e.g., Datadog).

• Proven experience in securing high-traffic commercial APIs.

• Familiarity with SLOs, error budgets, and incident management processes.

• Exposure to SOC 2 or ISO 27001 control environments.

🏝️ Benefits

• Flexible PTO.

• 401k match.

• Dental/Vision/Medical.