The Role:We're looking for an engineer who enjoys both building infrastructure and securing it. You'll own key parts of our AWS and Kubernetes platform while leading our day-to-day security and compliance work, with roughly half of your time on security.
It's a broad role with real ownership, suited to someone who likes variety and wants to shape how a growing company runs. You'll have a direct impact on how we build and ship.
Platform and DevOps- Kubernetes on AWS: Build, operate, and improve our Kubernetes (EKS) infrastructure on AWS.
- EKS Migrations: Lead and execute workload migrations onto EKS.
- CI/CD with Security Built In: Maintain and improve CI/CD pipelines, building security checks directly into them.
- Automation: Automate wherever you can. If you do something manually twice, script it.
Security and Compliance- SOC 2 Program: Run our SOC 2 program in Vanta: tracking controls, closing gaps, and keeping us audit-ready.
- Vulnerability Management: Own vulnerability management. Triage container CVEs from ECR scans and SAST/DAST findings, then fix them yourself or route them to the right team through GitHub.
- Monitoring and Response: Monitor and respond to AWS security alerts (GuardDuty, Security Hub) and externally reported issues.
- Access and Policy: Manage internal access control and maintain policies for secure development and data handling.
- Design and Threat Modeling: Join design reviews and threat modeling sessions with engineering.
- Security Awareness: Coordinate penetration tests, run tabletop exercises, and help keep the org security-aware.
Qualifications for success:- 2+ years of experience in DevOps, platform, SRE, or security engineering.
- Hands-on production experience with Kubernetes, preferred.
- Solid working knowledge of AWS, including IAM, networking, and core services.
- Experience planning and executing infrastructure migrations.
- Proficiency in scripting (Python, Bash, or similar) and Git-based workflows.
- Ability to work independently, prioritize well, and figure things out without a playbook.
- Based in or able to commute to Littleton, CO, with in-office attendance on Tuesdays.
Nice to have:- Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a similar compliance platform.
- Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail, and SCPs.
- Infrastructure as code experience (Terraform, CDK, or similar).
- Experience with SAST/DAST tools or GitHub Advanced Security.
- Relevant certifications (CKA, AWS Security Specialty, etc.).
Compensation & Posting Statement:The expected base salary for this position is:
$80,000 - $120,000 USD. Salary is based on a number of factors including market conditions, location and may vary depending on job-related skills and experience.
Benefits include fully company-paid medical for employees, a 401(k) with up to 4% company match, company-paid life and disability coverage, a $1,200 annual wellness benefit, flexible time off, paid holidays, a paid winter break, and a monthly internet stipend.
