Инфраструктура и безопасность вакансии - гибрид

Location: Baku Workplace: hybrid ABOUT YOU  We are looking for a Site Reliability Engineer who is pragmatic, product-minded, and equally comfortable writing code and running production systems to join our Infrastructure department's SRE team. The best candidate will be someone who thrives in a fast-paced, highly collaborative, and exceptionally dynamic setting and is excited to own the application-level infrastructure and reliability of a high-traffic commerce domain end to end - from deploy pipelines and Kubernetes manifests to SLOs, capacity planning, and production readiness. Strong Kubernetes, observability, and software engineering skills are essential, along with experience in operating production services in a cloud environment (GCP/GKE or comparable) and partnering closely with product development teams. The ability to hold a dual perspective - understanding both how developers ship features and what infrastructure needs to stay reliable - and to bring the reliability lens into design decisions early will be key to your success in this role. If you're passionate about making complex distributed systems boringly reliable and love building the commerce and monetization backbone that lets game developers around the world get paid, we would love to hear from you! ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Own the application-level infrastructure: Helm charts, Terraform configurations, Kubernetes deployments, runtime configuration, and service-level networking and integrations Own the domain's observability: design and implement SLOs/SLIs, monitors, alerts, and dashboards for critical services on Datadog and OpenTelemetry-based tooling Help to set up and evolve CI/CD pipelines for domain services (GitLab CI, GitHub Actions), including deploy and rollback automation Perform capacity planning and performance tuning ahead of expected load - product launches, sales events, and regional rollouts - including load testing and performance regression investigation Run Production Readiness Reviews for new services and major changes; define and enforce what "production-ready" means for the domain Support domain incident response: assist with deep investigation of complex incidents, contribute to post-mortems, drive follow-up reliability improvements, and maintain runbooks Build domain-specific automation that reduces operational toil: runbook automation, deploy helpers, recurring operational scripts Maintain and drive a forward-looking reliability roadmap for the domain together with product engineering leads Participate in product team planning, refinements, and architecture reviews, bringing the reliability perspective before design decisions become expensive to change Co-author company-wide SLO/SLI, capacity, and operational standards together with the broader SRE team; contribute improvements directly to shared SRE-operated subsystems Participate in the SRE duty rotation, supporting developers across the company Qualifications & Skills 3+ years of proven SRE, DevOps, or platform engineering experience: on-call or incident response duty, SLO/monitoring ownership, deploy pipeline and infrastructure work for production services Software development background: you have built and shipped backend services, not only operated them - comfortable reading application code during an investigation and writing production-quality automation in at least one language (e.g., Go, PHP) Hands-on Kubernetes experience: Helm, manifests, deploy strategies, debugging application-level performance and networking issues (GKE or another managed Kubernetes) Solid observability practice: building monitors, dashboards, and SLOs/SLIs on a modern platform (Datadog preferred; Prometheus/Grafana experience also relevant), familiarity with OpenTelemetry Infrastructure as Code exposure (Terraform/Terragrunt) for collaboration with platform teams GCP experience (IAM, networking, managed services) Experience building and maintaining CI/CD pipelines (GitLab CI and/or GitHub Actions) Programming/scripting proficiency sufficient to build automation and tooling (e.g., Python, Go, or Bash) Practical experience with incident response, post-mortems, and driving reliability improvements from incidents Strong collaboration and communication skills — this role works embedded with product development teams daily Experience in payments, fintech, e-commerce, or gaming — high-traffic transactional systems Nice to Have: Kubernetes certifications Google Cloud Platform certifications HashiCorp certifications Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play. Equal Employment Opportunity Statement Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act. Criminal History Consideration For the Site Reliability Engineer position, we will conduct a background check that may include the following: Criminal history check Employment verification Education verification Relevance to Job Responsibilities The background check is relevant to this position because of the following role responsibilities: Accessing confidential company data Handling infrastructure that processes sensitive financial transactions Ensuring compliance with regulatory requirements Rights Under the Fair Chance Act Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com. By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with this Xsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com.

Location: London Workplace: Hybrid Attio is the CRM for agentic revenue. Designed for the most ambitious go-to-market teams, it gives companies the power to understand every customer, automate at scale, and build their go-to-market motion exactly as they need. We've raised $116M from some of the world's best investors: GV (Google Ventures), Redpoint, Balderton, Point Nine, and 01A. We hire builders who thrive on complex technical challenges, hold themselves to a high bar, and genuinely care about delighting the people who use what they build. The team here brings sharp judgement, real craft, and the drive to do exceptional work. We're obsessed about the details and energized by the frontier. If you want to do the best work of your career, this is the right place. ABOUT THE ROLE Attio is an AI-native platform trusted with our customers' most sensitive data - and keeping that data secure is foundational to everything we build. As we scale, so does the challenge: a large multi-tenant SaaS platform, AI-driven product features that introduce entirely new attack surfaces, and an engineering team shipping fast with AI-assisted development. We're looking for a Security Engineering Lead to build and lead Attio's Product Security function, spanning application security and security operations. You'll work alongside our Engineering Leadership to make Attio secure by design, lead the response when things go wrong, and recruit a world-class team of Security Engineers and SecOps practitioners. This is a rare opportunity to define how security works at a company operating at the frontier of AI. WHAT YOU’LL DO - Build and lead Attio’s Product Security function. Secure Attio’s large-scale, AI-native SaaS platform, and the sensitive customer data on which it operates. - Work with Engineering Leadership peers to ensure that Attio is secure by design. - Understand and mitigate the unique risks and attack vectors associated with AI-driven product features, and AI-assisted software development. - Ensure that Attio is at the forefront of secure software development and operational practices. - Lead production security incident response; deeply understand security issues and their associated root causes and risks, create remediation plans, and drive to resolution. - Recruit and retain a world-class team of Security Engineers and SecOps practitioners. WHAT YOU’LL BRING - Full understanding of the Application Security landscape in a high scale, multi-tenant SaaS context. - Appreciation of the tools and techniques used to secure SaaS applications, through prevention, detection and remediation of security issues. Understanding of how to integrate those tools into an effective, scalable, cost-efficient program that delivers a secure service. - First-class incident response skills, through the entire incident lifecycle of detection, remediation, clean-up, and post-incident corrective action. - A recognized “talent magnet” and mentor who can recruit, retain and develop a high-quality Information Security team which continues to deliver for the business as Attio scales. DESIRABLE - Experience of running an Application Security program in a high scale, multi-tenant SaaS context. - Experience of hiring and managing a team of Security Engineers, and working with cross-functional partners. - Experience of security certification and re-certification programs. - Project or program management experience. - Background in software engineering or systems administration. WHAT WE OFFER - Competitive salary of £120,000 to £150,000 - Equity in an early-stage tech company on an incredible trajectory - 25 days holiday plus local public holidays - Apple hardware - Private medical insurance through AXA - Pension contribution through Hargreaves Lansdown - Enhanced family leave - Team off-site in fun places! (We've been to Barcelona, Lisbon, Malta, and Split so far)

Задачи: — разворачивание новых web-сервисов в инфраструктуре компании; — поддержание высокой доступности этих highload web-сервисов; — ответственность за сохранность данных; — автоматизация процессов; — взаимодействие с командами разработки/PM/GM; — поддержка документации в актуальном состоянии. Требования: — администрирование (Linux/Unix) от 3-х лет; — умение дебажить проблемы (top, iostat, iotop, strace, ltrace, tcpdump/wireshark, traceroute, mtr и другие); — понимание стека tcp/ip, пакетные фильтры; — администрирование Kubernetes; — понимание контейнеризации (docker/lxc), умение писать Dockerfile; — умение создавать шаблоны в Helm; — владение любым скриптовым языком программирования (Python/Bash или другие); — знание систем управления конфигурациями (saltstack/ansible или другие); — опыт написания CI/CD пайплайнов в Gitlab-ci/Jenkins или другие; — базовое понимание и конфигурирование Nginx; — опыт администрирования реляционных баз данных (Mysql и Postgresql); — умение настраивать бэкапы баз данных, репликацию, навыки дебага баз данных, умение искать и анализировать медленные запросы; — знания английского языка на уровне чтения и понимания технической документации; — коммуникабельность, инициативность, самостоятельность. Будет плюсом: — понимание основ методологии SRE; — понимание основ методологии DevOps; — опыт администрирования ceph и radosgw (s3). Условия: — сложные и интересные задачи, быстрый рост и амбициозные цели перед проектом; — сильная команда специалистов по разным направлениям; — отличная рабочая атмосфера и отсутствие бюрократии; — возможность реализовывать собственные идеи на проекте, участвовать в разных этапах реализации проектов, проявлять инициативу и воплощать идеи в жизнь.

Location: San Francisco Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are looking for an IT Support / Operations Engineer to join Baseten as we continue to scale our IT team. In this role, you will play a critical part in bringing our technical support entirely in-house to provide a seamless, high-touch experience for all Baseten employees. As we continue to scale, you will be the primary point of contact for day-to-day technical issues, allowing you to have a direct impact on our team's productivity and overall office environment. This position is ideal for a hands-on problem solver who enjoys a mix of hardware and software troubleshooting, user lifecycle management, and maintaining the physical IT infrastructure of a modern office. While you will focus heavily on elevating our internal support standards, you will also assist with systems administration and workflow automation as our company evolves. This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in-person to ensure our physical office and AV systems remain high-performing and reliable. RESPONSIBILITIES - Serve as the escalation point for day-to-day technical support, diagnosing and resolving hardware and software issues across our Mac and Windows fleet - Manage user lifecycle administration including provisioning, deprovisioning, and access management across all systems and services - Own the IT onboarding experience for new employees — from laptop setup and account configuration to a smooth first-day experience - Maintain and continuously improve office IT infrastructure to ensure a reliable, high-performing environment for all employees - Build and maintain a knowledge base of self-serve resources to reduce ticket volume and empower users - Manage IT asset procurement, inventory tracking, and vendor relationships - Support new office buildouts and contribute to broader workplace IT planning as we scale - Identify opportunities to automate workflows and eliminate inefficiencies across IT operations - Adapt to the evolving needs of a fast-growing company, taking on new challenges as they arise - Systems administration, including managing admin-level access, configuring user permissions, and performing routine maintenance across cloud-based services. REQUIREMENTS - Strong working knowledge of Google Workspace, MDM platforms (e.g. Kandji), IdM/SSO solutions (e.g. Okta), and video conferencing tools - Proven experience administering macOS at scale, with solid working knowledge of Windows environments - Hands-on experience with automation tools and a track record of streamlining IT processes and workflows - Excellent communication skills with a genuine passion for delivering great support experiences - Strong organizational skills with the ability to manage multiple priorities in a fast-paced, ambiguous environment BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

RELOCATION TO SPAIN Location: Hybrid in Barcelona, Spain. Relocation support is provided for the employee and their family. Company Manychat is a leading Chat Marketing platform used by over 1.5 million customers worldwide to automate conversations on Instagram, Messenger, WhatsApp, and TikTok. What you will do — Maintain and harden AWS infrastructure, including EC2, ALB/NLB, WAF, IAM, and CloudWatch. — Operate EKS clusters powering Python-based AI services and migrate existing services using Terraform and Helm. — Codify infrastructure with Terraform and manage host-level automation via Ansible. — Build and optimize CI/CD pipelines using GitHub Actions. — Own observability efforts with Prometheus and Grafana, including alerting and on-call readiness. — Partner with engineers to drive platform reliability and create maintainable infrastructure documentation. Requirements — 5+ years of experience managing Linux (Ubuntu, Amazon Linux) in production. — Strong experience with Kubernetes (ideally EKS), Helm, and Terraform. — Comfort running and debugging Python workloads in containers. — Solid understanding of networking, IAM, and cloud security best practices. — Hands-on experience with Nginx Ingress and reverse proxy setups. — Must be based in or be able to relocate to Barcelona, Spain. Nice to have — Advanced Ansible skills beyond the basics. — PostgreSQL or Amazon RDS tuning and operations experience. — Deep understanding of observability tools like Loki. — Familiarity with PHP production environments. — Experience with TDD, CI/CD best practices, and agile development. Culture & Benefits — Relocation support for you and your family. — Comprehensive health insurance for you and your family. — Professional development budget for courses, certifications, and conferences. — Hybrid work model and flexible benefits package. — In-office perks including free meals and snacks. — Company-funded sports activities, annual offsites, and team-building events.

Требования: — Опыт работы на позиции DevOps от 4х лет; — Опыт работы с высоконагруженными системами и распределенными архитектурами (например, в банковской сфере, fintech, или финансовых платформах); — Понимание принципов обеспечения высокой доступности (HA), Disaster Recovery (DR) и работы в рамках SLA/SLO; — Опыт внедрения CI/CD-пайплайнов, автоматизации деплоя; — Знание Linux (группы и права доступа, сервисы systemd, анализ производительности); — Опыт работы с Docker, Kubernetes (администрирование кластеров, сетевые политики, CSI), Helm (управление релизами), Ansible и Terraform (автоматизация развертывания и управление инфраструктурой); — Опыт работы с Prometheus, Grafana, ELK (Elasticsearch, Logstash, Kibana), Jaeger (для трассировки); — Опыт настройки alerting и анализа метрик; — Опыт работы с инструментами безопасности (SonarQube, Vault); — Знание одного из скриптовых языков (Python, Bash, Go); — Опыт работы с системами управления версиями (Git, GitLab, GitHub, Bitbucket); — Знание основ построения сетей передачи и хранения данных. Обязанности: — Взаимодействие с вендорами и разработчиками внедряемого ПО; — Сборка тестовых стендов, сборка и ввод в эксплуатацию продуктивной среды совместно с командой проекта и подрядчиком; — Установка релизов на тестовые стенды и продуктив, автоматизация установки релизных сборок; — Установка обновлений ОС, устранение уязвимостей информационной безопасности; — Анализ производительности работы ИС в зоне ответственности команды; — Внедрение, сопровождение и развитие мониторинга ИС, алёртинга на базе корпоративных Zabbix / Prometheus / Grafana / GMonit; — Обеспечение доступности платформы цифрового рубля в соответствии с требованиями SLA; — Устранение сбоев в работоспособности ИС; — Реагирование на отклонение работы системы от ожидаемого; — Ведение и актуализация технической документации команды.

Location: Limassol; Nicosia; Athens Workplace: hybrid The role:   Driven by complex database architectures, automated failover mechanisms, and bulletproof operational resilience? If you thrive on taking ownership of enterprise-grade database systems across multi-cloud and complex on-premises setups, mastering zero-downtime clustering, performance optimization, and large-scale data migrations, this is your next strategic move! Join our team as a Senior Database Administrator and play a key role in architecting secure, highly available DB capabilities, driving our long-term technology strategy, and elevating the reliability of our global infrastructure. The main responsibilities of the position include: Act as primary DBA for enterprise databases (Oracle, MySQL, PostgreSQL, MSSQL, MongoDB) across on-premises and cloud setups Architect and guide configurations for High Availability (HA), Disaster Recovery (DR), and zero-downtime data migrations Research and implement next-gen database technologies, deployment tools, and automation to drive efficiency Partner with InfoSec to maintain top-tier database security, access controls, and compliance auditing Mentor and develop team members through continuous feedback, targeted goal-setting, and personalized growth plans Foster an open, highly motivated team culture built on active knowledge-sharing and creative problem-solving Coordinate daily task distribution to ensure an optimized, well-balanced workload across the DBA team Partner with the DBA Team Leader to set, track, and execute departmental KPIs aligned with corporate goals Collaborate with internal departments to support business-critical projects and infrastructure needs Main requirements: BSc/MSc in Information Technology or any other relevant field Minimum 5 years’ experience in a similar position, preferably in the financial services industry High-level expertise in at least one major engine (MSSQL, MySQL, Oracle, PostgreSQL, or Redshift) and a deep understanding of fault-tolerant, high-availability database architectures Proficient in database tuning, SQL query optimization, and writing Shell scripts to automate operational workflows Strong technical knowledge of Linux and Windows OS, paired with hands-on experience in cloud database platforms (AWS RDS, Azure, or Oracle Cloud) Advanced problem-solving skills with the foresight to identify areas needing security enhancements, system updates, and scheduled maintenance Proven leadership capability to coach, mentor, and develop team members while keeping the team motivated and focused on goals Excellent verbal and written communication skills in English Able to translate complex technical concepts clearly for both colleagues and management Native or fluent English skills with the ability to translate complex technical concepts clearly for both colleagues and management High level of accountability, strong attention to detail, and a self-driven commitment to continuous upskilling and learning Highly organized and adaptable in fast-paced environments, with strong cross-functional coordination skills to build effective internal relationships Benefit from: An attractive remuneration package Private health insurance A corporate pension fund An intellectually stimulating work environment Continuous personal development and international training opportunities The Hiring Experience: What Awaits You Let’s Connect – Intro Chat with Talent Acquisition Deep Dive – First Interview with Your Future Team Test your edge – Aptitude / Personality Assessment Final Connection – Final Interview All applications will be treated with strict confidentiality!   By submitting this application, I confirm that I have read and agree to the terms of the Privacy Policy and the Confidentiality Undertaking.

Задачи: — Управление полным жизненным циклом платформы Coin Master. — Обеспечение высокой доступности, производительности и экономичности в многорегиональной AWS-среде. — Проектирование и поддержка надежной, высокопроизводительной инфраструктуры с использованием Infrastructure as Code (IaC). — Создание самовосстанавливающихся сред с использованием AI-агентов для мониторинга и устранения проблем в реальном времени. — Внедрение безопасности на уровне инфраструктуры с использованием AI-инструментов для выявления и устранения уязвимостей в Kubernetes и AWS. — Разработка инструментов и сервисов для ускорения выпуска кода инженерной командой. Требования: — Опыт работы DevOps не менее 3 лет. — Опыт управления Kubernetes кластерами и AWS инфраструктурой в продакшене. — Опыт интеграции AI-инструментов в рабочие процессы, включая использование AI-агентов (Cursor, Claude Code или аналогичные) для автоматизации инфраструктуры. — Опыт управления несколькими AWS аккаунтами в разных регионах, знание Lambda, CloudFront, SQS, VPC, IAM. — Глубокое понимание оптимизации затрат в облаке через архитектурные решения и автоматическое управление ресурсами. — Опыт работы с современными CI/CD платформами: GitHub Actions, Jenkins, ArgoCD. Преимущества: — Опыт оркестрации LLM (LangChain, LangGraph) или создания внутренних инструментов/агентов для автоматизации задач через облачные API. — Опыт работы с Kafka (MSK/Apache Kafka) и высокопроизводительными кеширующими слоями Redis/Elasticache. — Опыт управления CloudFlare и сложными конфигурациями edge-computing. Условия: — Конкурентная компенсация. — Оплачиваемый отпуск и больничные. — Медицинская и страховая поддержка для сотрудника и семьи. — Спортивные занятия и карта MultiSport. — Современный офис в Варшаве на улице Królewska 16. — Бесплатные завтраки, обеды, кухня с закусками и фруктами. — Современное техническое оборудование, включая macOS устройства. — Обучение и компенсация обучения. — Программа рекомендаций с бонусами. — Культура совместной работы с регулярными мероприятиями. — Бонус на релокацию для переезжающих в Варшаву. — Парковка для велосипедов и автомобилей.

Задачи: — Проектировать, развертывать и управлять инфраструктурой AWS от сетей до мультиаккаунтной архитектуры и платформ EKS. — Автоматизировать развертывание и обновления с помощью Infrastructure-as-Code (Terraform/OpenTofu) и GitOps. — Сотрудничать с продуктовыми и функциональными командами для создания возможностей самообслуживания и поддержания автономии разработчиков. — Обеспечивать надежность, безопасность и экономичность платформы, включая соответствие требованиям FedRAMP и FIPS. — Разрабатывать новые архитектурные возможности для поддержки масштабируемости, устойчивости и AI-нагрузок. — Участвовать в общем дежурстве для поддержания стабильности платформы. Требования: — Опыт работы не менее 5 лет в роли Platform, DevOps, Software или Site Reliability Engineer. — Глубокие практические знания AWS сервисов: VPC, CloudFront, API Gateway, EKS. — Владение Kubernetes и Infrastructure as Code (Terraform или OpenTofu) с подходом GitOps. — Высшее образование в области компьютерных наук, инженерии или эквивалентный опыт. — Готовность проживать или переехать в Мадрид, Испания. — Свободное владение английским языком. Плюсом будет: — Опыт работы в средах с требованиями соответствия (FedRAMP или FIPS). — Опыт создания внутренних платформ для разработчиков (IDP) с современными инструментами. — Опыт работы с архитектурами на основе ячеек или мульти-региональными архитектурами в масштабе. Условия: — Постоянный контракт с конкурентной оплатой и ежегодным бонусом за результаты. — Гибридный формат работы с офисом в центре Мадрида рядом со стадионом Бернабеу. — Частная медицинская страховка (Sanitas) и полностью оплачиваемые суточные ваучеры на питание. — Неограниченный оплачиваемый отпуск плюс 23 стандартных праздничных дня и 3 дня волонтерства. — Гибкий график, компенсация абонемента в спортзал, а также компенсация расходов на уход за детьми и транспорт. — Возмещение до 50% стоимости курсов английского и испанского языков.

Задачи: — Развертывание и поддержка облачной инфраструктуры в AWS (IaC через Terraform) — Администрирование кластеров Kubernetes (EKS) и управление деплоем через Helm — Настройка, оптимизация и защита пайплайнов в GitLab CI и GitHub Actions — Внедрение инструментов сканирования уязвимостей (SAST/DAST) и управление секретами в HashiCorp Vault — Настройка сквозного мониторинга и логирования (Prometheus, Grafana, ELK/Loki, Sentry), оперативное реагирование на инциденты — Участие во внедрении и поддержании практик информационной безопасности по стандарту ISO 27001 — Настройка и поддержка веб-серверов (Nginx), управление VPN, SSL/TLS сертификатами и DNS Требования: — Уверенное знание Linux (Ubuntu/RHEL) и владение Bash для автоматизации — Практический опыт работы с AWS (EKS, IAM, S3, RDS) и Ansible — Глубокое понимание процессов контейнеризации (Docker, Kubernetes) и автоматизации CI/CD — Понимание принципов сетевой безопасности, опыт работы с криптографическими протоколами и системами управления секретами — Знание принципов и практический интерес к внедрению стандартов безопасности ISO 27001 Условия: — Официальное оформление в соответствии с регламентом МФЦА (AIFC) — График работы 5/2, гибкий гибридный формат (сочетание офиса в Алматы и удаленки) с гибким началом дня — Стабильная заработная плата — Интересные и динамичные digital-проекты (включая AI-интеграции и масштабные веб-платформы) — Сильная техническая команда, минимум бюрократии и открытость к вашим технологическим инициативам

Задачи: — Обеспечивать надёжность и доступность сервисов на bare metal с Kubernetes поверх железа — Строить и поддерживать observability (Prometheus, Grafana, Loki): метрики, дашборды, алерты, SLO/SLI — Реагировать на инциденты, проводить post-mortem и устранять причины, а не симптомы — Тюнить PostgreSQL и другие БД под продакшен-нагрузку, искать боттлнеки — Поддерживать CI/CD (GHES, ArgoCD), снижать время и риск деплоев — Сетевая инфраструктура: маршрутизация, сегментация, балансировка нагрузки, безопасность — On-premise и air-gapped поставки (~10%) — Capacity planning и работа над снижением toil — Безопасность, которая не тормозит команду — Взаимодействие с командой разработки и инженерами клиентов Требования: — Глубокий опыт bare metal — без облачных абстракций — Понимание внутреннего устройства Kubernetes, а не только манифестов — Опыт устранения продакшен-инцидентов под давлением, умение быстро находить root cause — Тюнинг БД под нагрузкой (приоритет — PostgreSQL) — Опыт построения observability и систем алертинга с нуля — Опыт on-prem и air-gapped развёртываний — Сети: L2/L3, routing, firewall, VPN — Продакшен Linux troubleshooting — Подход security-mindset с балансом на скорость доставки — Высокая автономность при работе с незнакомым стеком — Видение инфраструктуры за пределами текущей задачи — Английский B2+ Будет плюсом: — Опыт с GPU-кластерами для AI — Ceph/ZFS/распределённые хранилища — Опыт hardening/compliance для гос. заказчиков — Air-gap CI/CD Не ищем: — YAML-инженеров, которые только применяют готовые манифесты. Нужен человек, который понимает, что происходит под капотом — и готов первым встать ночью, если что-то упало.

Задачи: — Поддержка и усиление AWS инфраструктуры (EC2, ALB/NLB, WAF, IAM, CloudWatch) — Управление и развитие EKS кластеров, обслуживающих Python AI сервисы — Миграция существующих сервисов в Kubernetes с использованием Terraform и Helm — Кодирование инфраструктуры с Terraform и автоматизация на уровне хостов с Ansible — Создание и улучшение CI/CD пайплайнов с GitHub Actions — Ответственность за наблюдаемость: Prometheus, Grafana, алертинг и готовность к дежурствам — Поддержка патчей ОС, сертификатов, правил WAF и общей гигиены инфраструктуры — Взаимодействие с инженерами для внедрения лучших практик и повышения надежности платформы — Создание чистой и поддерживаемой документации и плейбуков по инфраструктуре — Редкая поддержка внерабочих инцидентов Требования: — Опыт управления Linux в продакшене (Ubuntu, Amazon Linux) от 5 лет — Глубокие знания Kubernetes (желательно EKS), Helm и Terraform — Уверенность в запуске и отладке Python приложений в контейнерах — Понимание сетевых технологий, IAM и лучших практик облачной безопасности — Практический опыт работы с Nginx (Ingress и обратный прокси) — Отличные коммуникативные навыки для объяснения сложной инфраструктуры разработчикам Плюсы: — Продвинутые навыки Ansible — Опыт настройки и эксплуатации PostgreSQL или Amazon RDS — Глубокое понимание инструментов наблюдаемости (Prometheus, Grafana, Loki и др.) — Знакомство с PHP в продакшене — Опыт TDD, CI/CD и agile разработки — Опыт SRE-подобной деятельности: построение устойчивости, автоматизация, инструменты инцидентов Условия: — Гибридный онбординг с возможностью удаленной работы и поддержка релокации для кандидата и семьи — Медицинская страховка для кандидата и семьи — Бюджет на профессиональное развитие: конференции, онлайн-курсы и др. — Гибкий пакет льгот — Гибридный формат работы и щедрые отпуска — Привилегии в офисе: бесплатные обеды и перекусы — Спортивные активности, ежегодные выездные мероприятия и тимбилдинги, финансируемые компанией

Задачи: — Обеспечивать исключительную поддержку клиентов по телефону, электронной почте и в чате, поддерживая высокий уровень эмпатии, ясности и профессионализма — Быстро и точно решать сложные технические и процедурные вопросы, при необходимости эскалируя их — Обрабатывать большой объем входящих запросов с отличным приоритизированием, управлением временем и вниманием к деталям — Проводить проактивные обращения и продуманные последующие действия для предотвращения повторяющихся проблем и повышения удовлетворенности клиентов — Вносить вклад в создание базы знаний и улучшение процессов, выявляя тенденции поддержки и болевые точки клиентов — Сотрудничать с командами продукта, операций и инженерии для предоставления обратной связи и улучшения клиентского опыта Требования: — Опыт работы в поддержке клиентов не менее 1 года в условиях большого объема, например, в контакт-центре, SaaS-платформе или стартапе — Исключительные устные и письменные коммуникативные навыки, сильное активное слушание и понимание прочитанного — Умение решать проблемы с программным и аппаратным обеспечением, используя различные платформы и инструменты — Высокая способность к многозадачности и работе с несколькими системами одновременно без потери точности — Демонстрация устойчивости, самоуправления и стремления к постоянному обучению и улучшению — Менталитет "А-игрока" с сильной склонностью к действию: повышаете стандарты, действуете быстро, сохраняете устойчивость в условиях неопределенности и берете ответственность за достижение значимых результатов Условия: — Быстрая и совместная рабочая среда — Пособие на обучение и развитие — Конкурентная денежная и долевая компенсация, а также возможности для карьерного роста — 100% покрытие медицинских, стоматологических и офтальмологических расходов — Возмещение до $25,000 за услуги по планированию фертильности, усыновления и родительского планирования — Гибкая политика отпусков — Ежемесячный стимул для поддержания здоровья — Офисные хабы с ожиданием работы из офиса 3+ дней в неделю и офисными привилегиями — Возможна помощь с релокацией для желающих переехать в офис Checkr

Задачи: — Проектировать, поддерживать и оптимизировать решения для обеспечения безопасности конечных точек. — Разрабатывать и внедрять стандарты усиления безопасности операционных систем для минимизации уязвимостей корпоративных устройств. — Тестировать, оценивать и внедрять новые продукты и технологии безопасности для рабочих станций сотрудников. — Настраивать расширенный сбор логов и телеметрии для обнаружения угроз. — Проактивно выявлять, оценивать и устранять уязвимости и ошибки конфигурации на рабочих станциях. — Реагировать на инциденты безопасности на уровне рабочих станций и поддерживать качественную документацию. Требования: — Опыт управления и обеспечения безопасности Windows и MacOS в корпоративной среде на большом масштабе. — Опыт администрирования облачных решений AV/EDR. — Умение использовать скриптовые языки, такие как PowerShell, Python или Bash, для автоматизации задач безопасности. — Экспертиза в управлении системными конфигурациями через MDM или другие инструменты управления конфигурациями. — Знание механизмов сбора логов и лучших практик усиления безопасности операционных систем. — Английский язык на уровне B1 и выше. Преимущества: — Опыт обеспечения безопасности Linux рабочих станций. — Опыт работы с SIEM решениями, такими как Splunk, ArcSight ESM, IBM QRadar или Elastic Security. — Профессиональные сертификаты в области информационной безопасности (офенсивной или дефенсивной). — Участие в CTF соревнованиях. Условия: — Официальное трудоустройство с стабильной зарплатой и медицинской страховкой. — Гибридный режим работы и гибкий график. — Пакет релокации для кандидатов из других регионов. — Доступ к профессиональным консультациям (психологическим, финансовым, юридическим). — Внутренние обучающие программы и частично или полностью оплачиваемые дополнительные курсы. — Членство в клубе скидок и предоставление всего необходимого рабочего оборудования. Процесс найма: — Рассмотрение заявки. — Предложение. — Прием на работу.

Location: Kyiv, Ukraine Workplace: Hybrid [https://app.ashbyhq.com/api/images/user-content/eaa93aea-4a8e-480b-ac45-957f53a8b99b/230615d5-1e71-4618-8216-a6082a6261ae/Holy%20earth.png] HOLYWATER TECH https://holywater.tech/ — це технологічна компанія, яка створює розважальні продукти на перетині людської творчості та штучного інтелекту. Вони є прикладами ШІ-нативних платформ, що переосмислюють способи сторітелінгу та дають змогу будь-кому стати творцем. Екосистема продуктів HOLYWATER TECH включає: → My Drama https://apps.apple.com/us/app/my-drama-watch-shorts-movies/id6498713494 — стримінгову платформу вертикальних серіалів, №1 серед європейських та американських компаній у ніші → My Passion https://apps.apple.com/us/app/my-passion-romance-books/id1568149521 — цифрову бібліотеку книг №1 у понад 10 країнах світу → My Muse https://apps.apple.com/ua/app/my-muse-audiobooks-stories/id6738098034 — платформу ШІ-генерованих серіалів, що відкриває нову еру сторітелінгу ___________________________________________________________________________ HOLYWATER TECH СЬОГОДНІ — ЦЕ: - понад 100+ млн завантажень застосунків - стратегічне партнерство з FOX Entertainment - х2 рази — щорічне зростання компанії за 2024-2025 роки - 30+ міжнародних нагород, зокрема Muse Creative, W3, Telly, Runway AI Film Festival, Lovie - понад 100 млн годин переглянутого та прочитаного користувачами контенту - провідні позиції у своїх нішах на ринках США та Європи ___________________________________________________________________________ Ми створюємо нові формати, історії та будуємо світ, де єдине обмеження — людська уява. І зараз шукаємо IAM Engineer, хто готовий/-а долучитися й творити його разом із нами. ТВОЯ МІСІЯ: - Проєктувати та розвивати IAM-архітектуру (Okta або аналогічний IdP): SSO (SAML / OIDC), SCIM provisioning, групи, RBAC, lifecycle, MFA / passkeys. - Будувати та підтримувати модель доступів і governance: least-privilege, RBAC-матриця, quarterly access reviews, повний цикл joiner / mover / leaver (включно з якісним offboarding). - Розвивати підхід Zero Trust: conditional access, device trust і керування MDM (напр. Mosyle / Jamf) та політиками пристроїв. - Адмініструвати identity-складову корпоративних SaaS (Google Workspace, Slack та ін.): акаунти, домени, SSO-інтеграції; вести міграції доступів і акаунтів між доменами. - Підсилювати безпеку ідентичностей і доменів: захист від account takeover, phishing-resistant MFA, безпекова постава корпоративної пошти та доменів. - Автоматизувати IAM-процеси (provisioning / deprovisioning) через API та скрипти (n8n / Make). - Документувати процеси, виступати technical reference для команди. ___________________________________________________________________________ ДЛЯ ЦЬОГО ЗНАДОБЛЯТЬСЯ ТАКІ НАВИЧКИ ТА ДОСВІД: - 3-4+ років у Identity & Access Management або суміжній IT-security ролі. - Практичний досвід із системами управління доступами / IdP (Okta, Microsoft Entra ID / Azure AD, OneLogin, Ping, Keycloak тощо) - Глибоке розуміння IAM-практик: SSO (SAML / OIDC), provisioning (SCIM), RBAC, lifecycle, MFA. - Досвід з access governance: least-privilege, access reviews, on / offboarding. - Розуміння Zero Trust і керування пристроями (MDM / device trust). - Адміністрування корпоративних SaaS на рівні identity / accounts (Google Workspace тощо). - Досвід роботи з API та автоматизацією (n8n / Make / скрипти). - Досвід адміністрування AI-інструментів (Claude / LLM) у корпоративному середовищі та саме використання цих інструментів у своїй роботі. Nice to have: - Досвід саме з Okta. - Досвід інфраструктурних / tenant-міграцій (Google Workspace, Slack, акаунти між доменами). - Сертифікації (Okta, CompTIA Security+ тощо). - Compliance (SOC 2 / ISO 27001). - Cloud security (AWS IAM). - 1Password або аналогічні secrets-менеджери. ___________________________________________________________________________ ЩО ОТРИМАЄШ ВІД НАС: - Швидке професійне зростання. Ми будуємо середовище, де розвиток — норма: лекції, бібліотеки, хакатони, школи. Компенсуємо профільне навчання й вивчення будь-якої мови, зокрема української. - Формат роботи на твій вибір. Можеш працювати вдома, в офісі на київському Подолі чи у Львові (генератори, укриття, обіди, снеки — all inclusive), або ж за кордоном — маємо кілька офісів і там. - Техніку та сервіси. Все, що треба для роботи. - Відпочинок. 20 днів відпустки + на офіційні свята та безлімітні лікарняні. - Турботу про тіло та менталку. Компенсуємо спорт, медстрахування в Україні (після випробувального), послуги корпоративного лікаря і підтримку ментального здоров’я. ___________________________________________________________________________ ЧОМУ З НАМИ КЛАСНО? - Реальний вплив. Твої рішення прямо впливають на 100+ млн користувачів — їхній досвід, емоції й час у продукті. - Жива культура. Ми створюємо середовище, де можна експериментувати й пробувати нове. Середня оцінка відповіді на питання «Наскільки тобі подобається працювати в HOLYWATER?» за результатами eNPS — 9,23/10. - Автономність. Ми довіряємо рішенням команди: мінімум мікроменеджменту, максимум простору для ініціативи й впливу. - Сильні люди поруч. Ми постійно челенджимо статус-кво та досягаємо нових вершин. Думати інакше й прагнути більшого — тут це підтримають. Можливо, це — твій шанс стати нашим наступним big name? ___________________________________________________________________________ ХОЧЕШ БІЛЬШЕ ПРО HOLYWATER TECH? ЧЕКНИ ЦЕ: Як працює HOLYWATER TECH — на Vector Media https://vctr.media/ua/vid-banochki-svyatoyi-vodi-zi-lvova-do-ugodi-z-fox-entertainment-yak-praczyuye-holywater-startap-yakij-buduye-netflix-dlya-vertikalnogo-video-318305/ Партнерство з Dhar Mann Studios та FOX Entertainment https://www.hollywoodreporter.com/tv/tv-news/dhar-mann-microdramas-deal-fox-holywater-1236478483/ Інтерв’ю со-CEO Богдана Несвіта https://www.linkedin.com/in/bogdannesvit/ про партнерство FOX Entertainment для Forbes https://forbes.ua/innovations/maemo-60-mln-koristuvachiv-i-rostemo-duzhe-shvidko-ukrainska-holywater-znimatime-vertikalni-seriali-z-amerikanskoyu-fox-yak-vona-zaluchila-takogo-partnera-intervyu-25102025-33594 Про вертикальні серіали, які змінюють індустрію — у Детектор медіа https://detector.media/mediumy/article/248303/2026-03-13-vid-tiktok-do-gollivudu-prodyuserka-holywater-tech-pro-vertykalni-serialy-yaki-zminyuyut-industriyu/ Наші Instagram https://www.instagram.com/holywater.tech/ та LinkedIn https://www.linkedin.com/company/holywater/?viewAsMember=true — щоб бути в курсі всього, що в нас відбувається Хочеш творити історію разом з нами у HOLYWATER TECH? Відгукнися на вакансію!

Location: London, UK Workplace: Hybrid Sensor Tower’s digital intelligence platform provides unparalleled insight into market trends, advertising, competitor’s strategies, and consumer/user audience across mobile, web, and gaming. Sensor Tower’s insights are trusted by more than 2,500 enterprises worldwide across tech, retail/commerce, entertainment/media, gaming, consumer packaged goods and finance. Who You Are You are a DevOps engineer with software development background who likes working on everything that helps to improve the quality of life for your team and providing your expertise in creating a performant CI/CD stack to boost the code development/build process. What You’ll Do - Collaborate closely with our engineering team to help them be more productive by improving development tools. - Maintain a strong connection to the product and remain comfortable engaging in direct feature development - You will take ownership of CI/CD stack, keeping it robust, observable, stable, and performant. - Research, implement, and develop tools to help developers write new code. - Ensure the CI/CD infrastructure and process is reliable and consistent. What we’re looking for - Solid background in Linux. - Experience in CI/CD stack development and maintenance. - Working proficiency with Ruby, Javascript or Python. - Knowledge of AWS technologies (EC2, load balancing, auto-scaling, IAM, S3, Route53, etc.). - Telemetry and monitoring experience (OpenTelemetry, Grafana, Kibana). - Experience with containerization (Docker, Kubernetes, etc). What we’d be particularly excited about - Experience with CI build time optimization especially with Jenkins, Rspec and Cypress/Playwright. - Familiarity with databases like MongoDB and/or ClickHouse. - Experience with build systems like Webpack, Gradle, etc. - Proficiency with the CI tools like Jenkins, TeamCity, etc. What you’ll learn: - You’ll learn about the Ruby language and the Rails framework since it’s used in many aspects of our projects and tools. - You’ll gain deep insights into infrastructure automation using technologies such as Ansible and Terraform since they are central to our deployment strategies. Blog Posts Read more about some of our Technical challenges here (written by members of our engineering team): https://sensortower.com/blog/how-we-scaled-to-thousands-of-sidekiq-workers   About Sensor Tower Sensor Tower is a global provider of digital intelligence solutions, empowering companies to understand consumer behavior and market performance across mobile apps, digital platforms, and gaming ecosystems. Headquartered in San Francisco, Sensor Tower's insights are trusted by more than 2,500 enterprises worldwide. Founded in 2013, Sensor Tower’s market insights have helped marketers, app developers, and gaming leaders demystify the mobile app ecosystem with visibility into usage, engagement, and paid acquisition strategies. Today, Sensor Tower’s digital market insights platform has expanded to include Gaming, Web, Audience, and Digital Advertising Insights, helping global leaders understand market trends and their competitor’s strategies and audiences across the entire digital ecosystem. Why Sensor Tower? Our flexible work environment allows employees to live in greater connection with the people, places, and activities they love! GLOBAL TEAMS Sensor Tower has a global presence, with teams across the world and available in most time zones, including North America, Europe, Middle East, Africa, APAC and LATAM. We maintain regional offices in SF, LA, NY, London, Singapore, Beijing, Seoul, Tokyo and Vancouver. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, and veteran status. We will consider qualified applicants with arrest and conviction records. If you have a disability or special need, please do not hesitate to let us know and we'll do our best to accommodate. Fraud warning: It's common for scammers to create positions that look legitimate on other sites. To ensure your submission is considered, only apply for positions at Sensor Tower through our company website or through posts directly associated with Sensor Tower company profiles on sites such as LinkedIn, Indeed, BuiltIn or Hackajob. At no point will Sensor Tower ever ask for money, credit card, or bank account information to complete a job application. Communications received from Sensor Tower are only sent by e-mail addresses ending in sensortower.com http://sensortower.com. All Sensor Tower interviews will be conducted via phone or Zoom. At no time will a conversation be moved to an alternative email outside of sensortower.com http://sensortower.com or text. Should an issue arise that you feel we should be aware of, please contact us. Please provide your resume when applying. To all recruitment agencies: Sensor Tower does not accept third party resumes. Please do not send resumes to our jobs alias, Sensor Tower employees or any other organization location. Sensor Tower is not responsible for any fees related to unsolicited resumes. Sensor Tower will not pay any third-party agency or company that does not have a signed agreement with Sensor Tower. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE At Sentry, Support is an engineering discipline. Our customers are the greatest technical minds in the world—developers at elite enterprises building the future of software—and they deserve answers that go deeper than a knowledge base link. We are architecting the Technical Support engine. We’re looking for a veteran engineer to help us redefine the standard of technical support by combining deep human expertise with autonomous agentic systems. You are a debugger of both code and systems. You will treat support volume as a data signal to build automated resolution paths, ensuring our human engineers only touch the most complex, high-impact architectural puzzles. Sentry Support Engineers aren't just clearing queues; they are Orchestrators. You will engage with our users across GitHub, Discord, and our internal systems, while acting as the Technical Lead for our Agentic Ops. You ensure that when a developer asks a complex question, our systems have the right context and a seamless "Human-in-the-Loop" path to you when deep, nuanced expertise is required. IN THIS ROLE YOU WILL Master the Sentry Ecosystem & Support Elite Developers - Deep-Dive Debugging: Perform root-cause analysis on complex issues and distributed tracing gaps across polyglot environments. - Support the Great Minds: Act as a strategic consultant for senior engineers at our largest enterprise customers, solving high-stakes architectural challenges that push the boundaries of observability. - Troubleshoot SDK Implementations: Go deep into the source code of Sentry’s SDKs to help developers instrument complex frameworks and custom environments. - Engineering Feedback Loop: Serve as the bridge between the world's best developers and our product teams, using data from your systems to prioritize high-impact platform fixes. Engineer Agentic Operations (The Scaling Engine) - Deterministic Support Paths: Engineer the logic that powers our support agents, moving beyond probabilistic guesses to high-fidelity, autonomous resolutions. - Knowledge Engineering: Build the right context into our systems so they can resolve issues consistently and indefinitely. - Agentic Tooling Development: Use MCP (Model Context Protocol) and Sentry’s internal APIs to build "skills" for our agents, allowing them to perform complex lookups or state-checks autonomously. - The Seer Philosophy: We’ve already proven AI can handle autonomous production fixes with Seer. You will apply that same philosophy to the support lifecycle—moving us from a "Help Desk" to an "Autonomous Resolution Engine." YOU’LL LOVE THIS JOB IF - You love eliminating Non-scalable effort: you enjoy automating repetitive work and take pride in building systems that save time and effort. - You’re a Full-Stack Troubleshooter: You enjoy jumping from a React frontend issue to a Python backend trace to a CI/CD pipeline failure in a single afternoon - You Value Evidence-Based Support: You prefer looking at data trends over anecdotal evidence to decide where to build automation next. - You’re a Developer Advocate: You want to guide the industry on how elite engineers and AI co-exist in a high-density technical ecosystem. QUALIFICATIONS - 4+ years of experience in technical support engineering, systems engineering, or software development, with a track record of solving high-complexity SaaS problems. - Strong Coding Foundations: Mastery of Python, JavaScript, Java, or Ruby. You are comfortable reading SDK source code and identifying bugs in production-level repositories. - Systems Depth: Deep understanding of distributed systems, microservices, APIs, and the "path of a pixel" from frontend to database. - AI & Automation Literacy: Practical familiarity with LLM orchestration (RAG, context windows, system prompts) and a critical eye for where AI succeeds versus where it requires human intervention. - Exceptional Communication: The ability to explain complex architectural concepts to a human and write precise "system instructions" for an AI. BONUS QUALIFICATIONS - Open Source Contributor: An active presence on GitHub or experience maintaining open-source libraries. - Former Software Developer: You’ve spent time in the trenches as a full-time dev and know exactly what keeps our customers up at night. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $100,000 to $125,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money. In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays. ABOUT THE ROLE: Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day. We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role. You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day. WHAT YOU'LL ACHIEVE: - Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS. - Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS. - Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools. - Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift. - Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection. - Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse. - Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream. - Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC. SKILLS YOU NEED TO BRING: - Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company. - Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM). - Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments. - Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration. - Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors. - Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level. - Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC. NICE TO HAVES: - Experience at a fast-growing tech or AI company where the security program had to outpace headcount. - A background in IT engineering, SRE, or production engineering that transitioned into security engineering. - Experience building internal security tooling or workflows that improved employee or developer experience. - Contributions to the security community through open-source tools, blog posts, or conference talks. We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $200,000 - $220,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.