Summary
What you’ll impact
The Cloud Infrastructure & Security Engineer will own the organization’s cloud infrastructure, deployment pipelines, and security posture, working directly with the CTO to build reliable, automated foundations for the organization’s AI‑native manufacturing platform. The role involves designing, implementing, and operating AWS services, improving observability, and supporting customer security reviews to enable faster product development.
Responsibilities
What you'll do
- Get familiar with our AWS infrastructure, applications, deployment workflows, and data systems.
- Work directly with Anish and the founding team to identify the highest-priority reliability, security, and deployment improvements.
- Start removing manual steps and recurring infrastructure issues that slow down engineering.
- Review production access, secrets management, monitoring, and backups, and address the most urgent gaps.
- Take ownership of cloud deployments and CI/CD pipelines across our customer platform, supplier portal, internal tools, and AI workflows.
- Make deployments repeatable, observable, and easy to roll back.
- Manage infrastructure as code and improve consistency across development, staging, and production.
- Strengthen cloud security through least-privilege access, network isolation, encryption, secrets management, and audit logging.
- Implement useful monitoring and alerting so we catch problems early and diagnose them quickly.
- Give engineers clear, automated ways to deploy and operate services without needing manual infrastructure support for every change.
- Help define and evolve our cloud architecture as our products, customers, and workloads grow.
- Establish tested backup and recovery procedures, incident-response runbooks, and a shared operational support process.
- Improve system performance, availability, and cloud cost efficiency.
- Automate vulnerability detection, patching workflows, and recurring security checks.
- Partner with the engineering team on application security, data access, and the safe operation of AI workflows.
- Support customer security reviews and relevant compliance work with documented controls and evidence.
- Make infrastructure and security a foundation for faster product development.
- You will work closely with product engineers and the CTO to make deployment straightforward, infrastructure understandable, and security part of the development process.
- You will help choose and improve the infrastructure, deployment, observability, and security tooling around this stack.
- You will own an essential part of that foundation and directly shape how our engineering team builds as we grow.
Requirements
What you’ll bring
- You have 2+ years of relevant experience in cloud infrastructure, DevOps, platform engineering, SRE, or security engineering. We care most about what you have independently owned in production.
- You have operated real production systems on AWS. You understand compute, networking, IAM, storage, databases, and the tradeoffs involved in connecting them.
- You built and debugged systems before AI tools became part of your workflow. You have the fundamentals to reason through a networking issue, understand a permissions policy, or recover a failed deployment yourself.
- You use AI aggressively, and you understand what it produces. Claude Code, Cursor, and similar tools should make you faster. You can explain the code and infrastructure changes you ship, catch incorrect assumptions, and troubleshoot when the generated solution fails.
- You have built and maintained deployment pipelines. You know how to ship changes safely, debug failed releases, and recover when something goes wrong.
- You understand practical cloud security. You can identify risks, prioritize them, and implement fixes.
- You can write code and automate repetitive work. You are comfortable with Python, TypeScript, Bash, or similar languages.
- You have experience with infrastructure-as-code tools such as Github Actions, Pulumi, CDK, or CloudFormation.
- You understand Linux, DNS, TLS, and networking well enough to troubleshoot across the stack.
- You have worked with monitoring, logging, alerting, backups, and incident response.
- You know when a managed service is the right answer and when additional infrastructure complexity is justified.
- You document decisions and build systems other engineers can understand and operate.
- We don’t care about your degree. Tell us about the systems you have deployed, secured, scaled, or recovered.
- You do not need experience in supply chain or hardware. You need strong engineering judgment and a willingness to learn.
- Visa: US citizen / permanent resident only