Job Type
Full-time
Description
The Role: Senior DevOps / Security LeadWho You Are: You are a proactive leader, always looking for opportunities for improvement. You love to build solid foundations and ensure uptime and reliability, as well as protection from vulnerability, are well managed. You are comfortable to lead projects and take ownership of systems and processes. You're ready to take on AWS cloud infrastructure, CI/CD, release engineering, and observability, and own the information security program and the SOC 2 compliance effort. In this seat, you'll concentrate on elevated infrastructure access with security oversight, you'll operate under explicit compensating controls that preserve segregation of duties and have the opportunity to lead in maturing our DevOps and security posture.
What You'll Do: - Own CI/CD pipelines and release engineering across all environments (Dev/QA/Staging/Production/Demo/Multi-Region).
- Own cloud infrastructure-as-code (reliability, scaling, and cost optimization on AWS).
- Own the observability/monitoring stack, on-call alerting, and incident response.
- Implement and operate change management for production deployments.
- Own the information security program, policies, and the SOC 2 control set and evidence.
- Govern identity and access management (IAM) - provisioning standards, least privilege, and MFA enforcement.
- Run quarterly access reviews/recertification across all in-scope systems.
- Own vendor/third-party security risk assessment and review.
- Manage the SOC 2 auditor relationship and readiness milestones.
- Manage AWS Cognito identity integration, backups, and disaster-recovery procedures.
- Monitor platform uptime percentage (target 99.9%).
- Own deployment frequency and change-failure rate; mean time to recovery (MTTR).
- Manage infrastructure cost as a percentage of ARR.
- SOC 2 Type 1 readiness milestones delivered on schedule.
- Quarterly access reviews completed on time, exceptions remediated.
- Mean time to revoke access on offboarding (target = 1 business day).
- Security incident count and time-to-contain.
What You'll Bring: - Bachelor's degree or equivalent experience; AWS or Security credentials a plus.
- 8+ years across DevOps/SRE/platform engineering AND information security, with senior-level AWS depth.
- Direct ownership of a SOC 2 (or ISO 27001) program, including auditor relationship and evidence.
- Strong infrastructure-as-code (Terraform / CloudFormation), CI/CD, and containerization experience.
- Strong IAM and cloud-security depth - identity federation, access governance, and hardening.
- Hands-on observability and production incident response.
- Deep, hands-on Linux expertise - operating, debugging, and hardening Linux hosts from the command line (systemd, networking, bash scripting, log analysis); the edge devices (Raspberry Pi) and the AWS EC2 services run on Linux.
- Working Rust proficiency - able to build, package, deploy, and troubleshoot the Rust backend / VTS (including ARM / edge cross-compilation) and to own its CI/CD and release pipelines.
- Pragmatic for a small, fast-moving company - risk-based, automation-first, low ego; communicates bottom-line-first.
What's in it For You:- Medical insurance with 1 HSA and 2 PPO plan options
- Flex Spending Account (FSA)/Dependent Care FSA
- Dental, vision, life, short- and long-term disability insurance
- Critical illness and hospital indemnity plans
- 401k with company contribution
- Employee Assistance Program (EAP)
- Company paid telemedicine 24/7 access
- Wellness Program
- Employee discount program
- 8 paid holidays, plus 1 floating holiday
- 15 days of PTO accrued in year 1
- Generous referral bonus program
- Work life balance (a must!)
- Team building, attendance at our annual kickoff each January, and other fun events
- Relaxed professional dress code
Salary Description
$170,000.00 - $175,000.00
