Devops Engineer

What you'll do

• Design and maintain AWS IAM roles, policies, and least-privilege boundaries across our accounts
• Triage and resolve security issues; harden production against common threat vectors
• Build cost monitoring and optimization for Cloud services and APIs
• Own the API key and secrets lifecycle — issuance, rotation, scoping, revocation
• Drive our SOC 2 Type II program: controls, evidence collection, audit prep
• Ship preview deployment infrastructure so every PR gets a reviewable environment

Must-haves

• 3-5 years in a DevOps, SRE, or platform engineering role
• Production AWS experience (IAM, VPC, ECS/EKS or Lambda, RDS, CloudWatch)
• Infrastructure-as-code with Terraform (or CloudFormation/Pulumi)
• CI/CD pipeline ownership (GitHub Actions, CircleCI, or similar) including preview/ephemeral environments
• Containerization with Docker and a working knowledge of Kubernetes or ECS
• Hands-on secrets management with a tool like AWS Secrets Manager, HashiCorp Vault, or Doppler
• Demonstrated cost-optimization work — right-sizing, savings plans, usage dashboards
• Comfort with a scripting language (Python, Go, or Bash) for automation
• Security mindset: you've handled vulnerability scanning, patching, and incident response

Nice-to-haves

• Direct experience taking a company through SOC 2 Type I or II (controls, auditor coordination, evidence automation with Vanta/Drata/Secureframe)
• Experience optimizing spend on LLM/AI APIs (OpenAI, Anthropic, etc.) or real-time voice infrastructure (Twilio, Daily, LiveKit)
• Observability stack work — Datadog, Grafana, Prometheus, OpenTelemetry
• Background supporting low-latency or real-time systems (voice, streaming, WebRTC)
• Exposure to SSO/identity federation
• Open-source contributions to infra tooling
• Prior early-stage startup experience where you wore multiple hats