Software Engineer – Infrastructure

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Take ownership of the BYOC product lifecycle, which encompasses installation, upgrades, support, security assessments, and documentation.

• Establish compatibility across various clouds, regions, Kubernetes versions, SCPs, egress proxies, and deprecation policies.

• Develop repeatable infrastructure-as-code cell deployments, account bootstrapping, and network patterns like PrivateLink and certificates.

• Deliver releases to independently versioned cells featuring staged promotion, approval gates, rollback procedures, observability, runbooks, and audited break-glass access.

• Create scoped-credential agents for pre-installation checks, installations, failed-upgrade troubleshooting, and drafting runbooks.

• Enhance engineering efficiency and optimize cloud expenditure for each installation.

• Set up cell guardrails that encompass credential scope, isolation, workload identity, and PKI.

• Collaborate with founders, identity and policy engineers, customers, and customer security teams.

• Engage in escalation and on-call rotations.

• Oversee the first customer-hosted deployment from pre-production to production.

• Execute a second customer deployment without custom work.

• Publish the initial BYOC support matrix and upgrade policy.

• Align on a BYOC roadmap with product and engineering teams.

⛳️ Requirements

• Experience in software engineering at a staff level.

• Proficiency in building infrastructure as software using Pulumi, Terraform, or CDK.

• Capability to develop tooling in Go or TypeScript.

• Proven production experience with Kubernetes and Helm.

• Extensive experience with AWS, particularly in IAM, permission boundaries, Organizations, SCPs, and VPC networking.

• Background in running software within accounts or environments that are not directly managed, such as customer VPCs, on-premises systems, or regulated networks.

• Experience in supporting customer-managed software during upgrades.

• Experience in delivering versioned releases that include support matrices and deprecation policies.

• Ability to debug issues across infrastructure and networking layers.

• Experience collaborating directly with customers’ platform and security teams.

• Experience in making trade-offs between product and custom work.

• Strong writing skills for clear planning and asynchronous updates.

• Familiarity with using coding agents in infrastructure tasks and recognizing where human review is necessary.

• Authorization to work in the United States or Canada is mandatory.

• Experience with GCP or Azure, workload identity and PKI, as well as OAuth/OIDC/mTLS or MCP, is highly desirable.

🏝️ Benefits

• Competitive equity package featuring a 4-year vesting schedule with a 1-year cliff.

• Comprehensive health, dental, vision, and paramedical coverage for you and your family.

• 4 weeks of vacation annually.

• 11 statutory holidays observed.

• 1 volunteer day provided each year.

• Encouragement to take at least 2 weeks off each year for rejuvenation.

• Provision of a new MacBook Pro.

• $500 stipend for peripherals.

• Access to the best AI tools available.

• Flexibility of remote work.

• Asynchronous collaboration encouraged.

• Significant autonomy and opportunities to achieve mastery.

• Culture of team accountability.