Инфраструктура и безопасность вакансии - удалённо

Location: Remote Who we are Our mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase. With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once. Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love. If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us. Hours & location 🌎 While we hire almost anywhere in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with GMT-3 for at least 20 hours/week. Preferred locations: USA Why this job is exciting As our Compliance Manager, you will own and drive Sourcegraph’s governance, risk, and compliance program, with a primary focus on compliance. This is a highly cross-functional role that works closely with Security, Engineering, IT, Legal, People, Sales, and other teams across the company. You will be responsible for maintaining and evolving our compliance program, including owning certifications such as SOC 2 and ISO 27001 and preparing Sourcegraph for additional frameworks as the business grows. This is not a role where you will simply coordinate work across a large compliance organization. We are looking for someone who has personally owned audit and certification programs end to end: designing and tailoring controls, collecting evidence, training internal teams, working directly with auditors, managing remediation, and driving follow-up work through completion. 📅 Within one month, you will… You will build strong working relationships across Security, Engineering, IT, Legal, People, Sales, and other key stakeholders. You will develop a clear understanding of Sourcegraph’s existing governance, risk, and compliance program, including our ISMS, risk register, controls, certifications, audit processes, and current areas of focus. You will understand how our SOC 2 and ISO 27001 programs operate today, including key owners, evidence requirements, open risks, and upcoming milestones. You will begin participating directly in day-to-day compliance activities and identify opportunities to improve or simplify existing processes. 📅 Within three months, you will… You will have taken ownership of Sourcegraph’s ongoing SOC 2 and ISO 27001 compliance programs. You will independently manage key audit activities, including control testing, evidence collection, stakeholder coordination, auditor requests, findings, and remediation. You will evaluate existing controls and tailor them to Sourcegraph’s environment rather than relying on overly prescriptive or generic auditor recommendations. You will actively maintain Sourcegraph’s risk register, ISMS processes, policies, and compliance documentation. You will help internal teams understand their compliance responsibilities and provide practical guidance that allows them to meet requirements without creating unnecessary process. You will support customer-facing compliance activities, including security questionnaires and compliance-related questions from prospective and existing customers. 📅 Within six months, you will… You will have successfully led Sourcegraph through an audit or major certification milestone. You will own the operating rhythm of the GRC program, including ISMS meetings, risk management activities, control reviews, documentation updates, and audit preparation. You will have established a forward-looking compliance roadmap covering renewals, upcoming audits, new frameworks, regulatory requirements, and opportunities to improve how the program operates. You will be able to independently identify control gaps or deficiencies, assess their risk, recommend practical solutions, and drive remediation with both technical and non-technical stakeholders. You will have introduced automation, AI, or other process improvements that reduce manual compliance work while maintaining or improving program quality. About you You have built or operated compliance programs in a fast-moving technology environment and have personally owned major compliance initiatives from beginning to end. You are comfortable operating independently, getting into the details, and doing the work yourself while coordinating with stakeholders across the organization. You understand that frameworks such as SOC 2 and ISO 27001 define requirements but often leave significant flexibility in how an organization satisfies them, and you know how to translate those requirements into controls that fit the business. You are also comfortable working with technical teams and modern cloud environments. You can understand enough about infrastructure, systems, access controls, software development, and security processes to ask the right questions and effectively translate between auditors and technical teams. 5+ years of experience in governance, risk, compliance, information security compliance, or a related role. Demonstrated end-to-end ownership of SOC 2 and ISO 27001 programs, ideally within a SaaS, technology startup, or similarly fast-moving environment. Experience personally managing external audits and certification processes, including audit preparation, evidence collection, control testing, stakeholder training, auditor interaction, remediation, and follow-up. Strong understanding of risk management, control design, ISMS governance, and compliance program operations. Experience adapting compliance controls to an organization's actual environment rather than applying generic or overly prescriptive requirements. Familiarity with cloud-based technology environments and the security and compliance considerations associated with a distributed or remote workforce. Strong project management and organizational skills with the ability to drive cross-functional initiatives from inception through completion. Excellent written and verbal communication skills and the ability to explain compliance requirements clearly to both technical and non-technical audiences. A hands-on mindset and willingness to personally execute the work required to keep the compliance program operating effectively. Curiosity about AI, automation, and emerging technology, with an interest in using new tools to improve compliance workflows. Nice-to-haves: Experience with additional security, privacy, or compliance frameworks such as GDPR, HIPAA, HITRUST, FedRAMP, FISMA, PCI DSS, or related standards. Experience supporting security questionnaires, customer assurance processes, or sales-related compliance activities. Experience with GRC platforms, compliance automation tools, or building internal automation for evidence collection and control monitoring. Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, CRISC, or similar credentials. Level 📊 This job is an IC3. You can read more about our job leveling philosophy in our Handbook. Compensation We pay above-market salaries because we want to hire exceptional people who can focus on building great products, not worrying about paying bills. As an open and transparent company, our compensation philosophy and pay bands are visible to every Sourcegraph teammate, and we strive to make our approach equitable, explainable, and competitive. Your base salary is determined by the IC3 pay band for your location zone (1-4). Our pay bands are informed by market data and designed to ensure competitive compensation wherever you live. During the recruiting process, we'll discuss the range applicable to you based on job level, relevant skills, experience, qualifications, and location zone. The starting salary for the IC3 pay band in each zone is: Zone 2: $137,718 USD Zone 3: $102,899 USD In addition to competitive cash compensation, we offer meaningful equity (because when Sourcegraph succeeds, we want you to succeed, too) and generous perks & benefits . Interview process Below is the interview process you can expect for this role (you can read more about the types of interviews in our Handbook). It may look like a lot of steps, but rest assured that we move quickly and the steps are designed to help you get the information needed to determine if we’re the right fit for you… Interviewing is a two-way street, after all! We expect the interview process to take 5 hours in total. 👋 Introduction Stage - we have initial conversations to get to know you better… [30m] Recruiter Screen [30m] Hiring Manager Screen 🧑‍💻 Team Interview Stage - we then delve into your experience in more depth and introduce you to members of the team, including cross-functional partners… [Async] Working assignment [60m] Assignment Walkthrough + Review [60m] Resume Deep Dive [60m] Technical Interview 🎉 Final Interview Stage - we move you to our final round, where you gain a better understanding of our business and values holistically… [30m] Values [30m] Leadership We check references and conduct your background check Please note - you are welcome to request additional conversations with anyone you would like to meet, but didn’t get to meet during the interview process. Learn more about us You can learn more about what it is like to work at Sourcegraph by reading our handbook . We are an ambitious team who are collectively working hard to build the most influential company in the world. You can read more about our culture , competitive compensation and benefits here. Sourcegraph is an equal opportunity workplace; we welcome people from all backgrounds. Sourcegraph participates in E-Verify for U.S. Employees.

• Выполнять задачи, ставящиеся перед командой, включая исследование ядра Android, реверс-инжиниринг компонентов с закрытым исходным кодом, отладку смартфонов, проверку имеющихся уязвимостей и proof-of-concepts на эксплуатируемость, написание рабочих эксплоитов, объединение эксплоитов в цепочки.

Задачи: — Общение с пользователями в чате: быстро отвечать на обращения, разбираться в проблемах и понятно объяснять следующие шаги. — Проверка статусов платежей в админ-панели и помощь пользователям в понимании ситуации с их переводом. — Фиксация багов для команды разработки с подробным описанием действий пользователя, фактического и ожидаемого результата, приложением ID перевода и скриншотов. — Общение может проходить на разных языках с помощью переводчика, основной рабочий язык — русский. Требования: — Грамотное письменное владение русским языком и уверенный английский (B2). — Для общения на других языках достаточно уметь пользоваться нейросетями или переводчиками. — Опыт работы в чат-поддержке будет плюсом, особенно в финтехе или мобильных приложениях. — Внимательность к деталям и спокойная работа с суммами, ID переводов и статусами платежей. Условия: — Полностью удалённая работа. — Поддержка пользователей в чате. — Основной поток обращений с 06:00 до 22:00 CET. — Загрузка около 8 часов в день. — График 2/2, 5/2, смены — возможны разные форматы. — Оплата 800-1000 USD в месяц. Как измеряем результат: — Скорость закрытия вопроса пользователя — от первого сообщения до решения. — Положительные отзывы на Trustpilot, App Store или Google Play, отмечающие поддержку.

We are onboarding an associate to manage daily order desks, direct messaging, and buyer assistance for our direct-to-consumer store. - Flawless Written Communication: Top-tier English, precise grammar, and a courteous, professional desk manner.

Location: Europe (+/- 3 hours) Workplace: Remote 👋 A LITTLE ABOUT US We’re building the best platform for authoring, publishing, and maintaining world-class docs. Close to 40,000 sign-ups per month, over 100k Monthly Active Users, used by 2M+ people and thousands of teams like Zoom, FedEx, Nvidia, Snyk, and Google. We’re profitable, backed by P9 Capital, Notion Capital, and Fly VC, and our amazing team is spread across 15 countries in North America, Europe, and Asia. 👩‍💻THE ROLE We see Support at GitBook as a key function to strengthen customer trust. Every conversation is a chance to shape the product and make our support model more scalable. As a Technical Support Specialist, you’ll help technical teams document and share what they know with GitBook. You’ll answer product questions and troubleshoot issues with custom domains, integrations, APIs, SSO/SAML and bugs. You’ll use your knowledge of Git and DNS, and your ability to read logs across platforms to track down problems. You’ll keep first-response time, resolution time, and CSAT on track and share recurring feedback with Product and Engineering to improve GitBook. You'll turn what you learn into insight that shapes our roadmap, reduces friction and helps customers succeed long-term. 🫶YOU WILL BE VALUED FOR - Technical foundations: You know Git, GitHub/GitLab, SAML SSO, DNS and web fundamentals such as caching and redirects. - Developer fluency: You’re comfortable reviewing code, testing APIs and understanding OpenAPI specifications to support customers using our Integrations Platform. - AI forward thinking: You’re familiar with AI and LLM tools (including MCP) and keep up with new developments. You bring ideas for automation, self-service and smarter workflows. - Customer empathy and clear communication: You listen carefully and explain complex issues simply both in writing and conversation with a friendly tone. - Prioritization under pressure: You keep a busy queue moving with quick thoughtful replies while investigating deeper issues. You know when to switch focus or escalate. - Systems thinking: You don't just solve tickets. You ask why they happened and how to prevent the next hundred. - Remote collaboration: You troubleshoot with teammates, share what you learn and know when to work async or jump on a call. - Autonomy and adaptability: You take ownership, try things, ask for help when needed and learn as the product and team evolve. - Market curiosity: You follow how technology, AI, documentation and developer tools are changing and where GitBook fits. You dig into customer problems and bring ideas back to the team to improve our product, processes and customer experience. 🙌 WHAT WILL YOU BE DOING - Solving high-impact technical problems: Triage, troubleshoot and debug customer problems, knowing what needs urgent escalation and what belongs in a bug report or roadmap discussion. Document complex issues with reproduction steps and relevant logs and work with Engineering to resolve them. - Supporting customers: Help customers through our Helpdesk, Slack or Teams with everything from Authenticated Access and SAML SSO to monorepos and redirects. Ask follow-up questions to understand what they’re trying to achieve, help them get more from GitBook and build relationships where they feel comfortable sharing honest feedback. - Turning support into product insight: Spot recurring bugs, friction points and feature requests. Quantify their impact, suggest workarounds and bring clear, evidence-based recommendations to Product, Engineering and Design. - Shaping how we work: Help our small team improve how we prioritize, triage and automate support. You’ll work with evolving processes rather than a fixed playbook, take initiative with limited guidance and speak up with ideas and concerns. ✨ WHAT'S NEXT? Here's what our process will look like: - A screening interview with our People Team - 30 minutes - Interview with Support team member (technical interview) - 45 minutes - Technical Exercise - Meeting Hiring Manager + Support Team - 45-60 minutes - Meeting our CEO - 30 minutes - Offer *This process is not set in stone, we might add steps to the process as we go along, like a work sample. We will make sure to keep you posted! 👥 Join GitBook at a pivotal time as we evolve our product and team. This is a chance to shape our product, craft, and culture https://www.gitbook.com/about#open-roles.

— Техническая поддержка команды и студентов. — Работа с доступами, заказами, рассылками и сегментами.

Разрабатывать кластеризованный on-premise build ClickHouse для собственной cloud-инфраструктуры. Внедрять, масштабировать и поддерживать ClickHouse-кластеры в production.

• Обробка технічних кейсів (бани, обмеження, збої). • Супровід верифікацій і whitelist.

• Цель - обеспечить стабильную работу, администрирование и развитие используемых в компании внешних систем (Контур, ЕГАИС, Честный Знак, Меркурий и др.), включая поддержку пользователей, управление инцидентами, внедрение изменений и непрерывное улучшение процессов. • Опыт сопровождения/администрирования внешних B2B-систем или интеграционных сервисов.

Задачи: — Владение программой управления инцидентами конфиденциальности от начала до конца, включая рабочие процессы уведомлений, пути эскалации, документацию процессов, обучение ответственных и возможности автоматизации. — Руководство реагированием на инциденты конфиденциальности в роли DRI и Incident Commander, координация между отделами Privacy, Privacy Legal, CSIRT, Product, Engineering и Communications для анализа, устранения и последующих действий. — Поддержание готовности к вызову для поддержки триажа инцидентов конфиденциальности, классификации серьезности и срочных эскалаций, обеспечение правильной оценки и маршрутизации инцидентов. — Проведение ретроспектив по инцидентам конфиденциальности, отслеживание элементов устранения и пробелов в контроле, предоставление метрик и отчетности по тенденциям, статусу устранения и состоянию процессов. — Построение и поддержание прочных межфункциональных и межгеографических отношений с заинтересованными сторонами для улучшения готовности, качества реагирования и ответственности бизнеса. — Поддержка более широких инициатив Privacy в периоды низкой загрузки, включая межфункциональные усилия, разработку инструментов и проекты автоматизации. Требования: — Опыт работы 3+ года в области конфиденциальности, безопасности, реагирования на инциденты, технологических рисков или смежных операционных рисков, включая опыт руководства или поддержки рабочих процессов инцидентов, вопросов или рисков с необходимостью структурированного анализа, документации и межфункциональной координации. — Сильные навыки управления инцидентами с опытом коммуникации рисков конфиденциальности и результатов инцидентов как технической, так и нетехнической аудитории, включая подготовку письменных анализов инцидентов, документации ретроспектив и резюме для руководства. — Подтвержденный опыт проведения технических расследований в облачных архитектурах с практическими навыками в SQL, Python и инструментах анализа данных (Postgres, MongoDB, Airflow, Looker, Snowflake). — Опыт создания автоматизации для сокращения ручных операций и повышения эффективности реагирования на инциденты. — Знание нормативных актов и рамок конфиденциальности (GDPR, CCPA, PIPEDA, ePrivacy, DPIAs/PIAs, ROPA, права субъектов данных), контролей конфиденциальности и управления вопросами конфиденциальности. — Ответственное использование и создание генеративного ИИ с сохранением человеческого контроля для обеспечения готовых к бизнесу результатов и повышения эффективности рабочих процессов, снижения затрат и улучшения качества. Условия: — Полная занятость. — Удалённая работа с обязательными квартальными очными сессиями (surges). — Годовой базовый оклад от $135,320 до $159,200 USD, возможны акции, бонусы и социальные льготы (медицинская страховка, стоматология, зрение, 401(k)). — Кандидаты могут подать максимум 3 заявки за 6 месяцев. — Компания является работодателем с равными возможностями.

You'll resolve billing questions from start to finish, dig into the technical issues that sit underneath them, and keep our Stripe records accurate to the cent. It's part customer support, part billing operations, and part detective work.

The Cloud Engineer designs, secures, and supports mission-critical cloud infrastructure that enables reliable services for users worldwide. The successful candidate demonstrates strong technical judgment, operational discipline, and the ability to apply practical solutions to complex cloud engineering challenges.

-Развивать и сопровождать инфраструктуру на bare metal, виртуальных машинах и Kubernetes. -Автоматизировать сборку, доставку и развёртывание приложений с помощью GitLab CI/CD и Argo CD.

We are onboarding an associate to manage daily order desks, direct messaging, and buyer assistance for our direct-to-consumer store.

• Resolve customer technical issues end-to-end (Helpdesk + Slack) within SLA. • Conduct root cause analysis with Grafana, Datadog (logs, metrics, traces).

We are onboarding an associate to manage daily order desks, direct messaging, and buyer assistance for our direct-to-consumer store.

Location: USA - Remote Workplace: Remote About Us Since 2013, we’ve been building a CRM that gets out of your way and helps your team sell more, faster. Now we’re building AI into every part of it, so Close does the busywork and your team does the selling. No manual data entry, no 10-click workflows. Just communication-first, AI-powered sales software designed to help you succeed and scale. We're bootstrapped and profitable which means we answer to our customers and play by our rules. We're proud of our 130-person, 100% remote team, focused on building Close so that no small, scaling business fails because it can't figure out sales. ABOUT THE ROLE Close is a CRM built around the communication tools sales teams use every day: email, calling, SMS, workflows, reporting, and AI. Underneath that product is a broad technical surface — Python services and a large application backend, a TypeScript and React frontend, public APIs, Docker and Kubernetes, AWS infrastructure, and integrations with providers that handle sensitive customer data. Security work happens across it all today, but the ownership is spread across Engineering, Infrastructure, and Security & Trust. We’re hiring our first dedicated Product Security Engineer to make that work systematic. You’ll report to the Backend Platform team manager within EPD (Engineering, Product, and Design), while working across the entire product and infrastructure surface. You’ll find vulnerabilities, determine which findings matter most, and drive them through remediation. Often you’ll fix the problem yourself. Other times you’ll give the owning team a clear reproduction, a practical path forward, and enough context to prioritize correctly. You’ll analyze code, build proof-of-concepts, test running applications, tune or replace noisy tools, and automate the repetitive parts of vulnerability management. This is not a role where you forward scanner alerts and call the queue managed. Product and application security will be your responsibility. You’ll partner closely with our Infrastructure team on cloud security, access, and secrets, and with our Security & Trust Lead on GRC Engineering https://grc.engineering/, compliance (SOC 2) goals, audits, and corporate security. This role is a new one at Close. You’ll have significant room to decide where better tooling, clearer ownership, and a small amount of code can reduce the most risk. OUR STACK Our backend is primarily Python, with Flask and FastAPI services and TaskTiger https://github.com/closeio/tasktiger and Temporal handling much of our asynchronous work. We expose REST https://developer.close.com/ and GraphQL APIs and store data in MongoDB, PostgreSQL, Elasticsearch, and Redis. Our frontend is a large single-page TypeScript application built primarily with React. We bundle with Vite, target modern browsers, and test with Vitest, React Testing Library, Playwright, and Chromatic. The product updates in near real time and uses technologies including WebSockets and WebRTC. Our mobile application is built with React Native. We build and test Docker images in CI/CD and continuously deploy them to Kubernetes on AWS. Our infrastructure uses managed services including EKS, MSK, and ElastiCache, alongside services running on EC2. Terraform and Ansible automate much of the underlying infrastructure, and our containerized local development environment lets engineers run the full system on their own machines. For this role, our stack extends beyond simply backend or frontend: browser behavior, frontend state, API authorization, asynchronous processing, data access, third-party integrations, containers, and cloud configuration can all be part of the same attack path. We love open sourcing our code and ideas on our GitHub https://github.com/closeio and on The Making of Close https://making.close.com/, our behind-the-scenes Product & Engineering blog. Check out our open source projects like SocketShark https://github.com/closeio/socketshark, TaskTiger https://github.com/closeio/tasktiger, LimitLion https://github.com/closeio/limitlion and ciso8601 https://github.com/closeio/ciso8601. AI is both how we build and what we ship, and that's reshaped what engineering looks like. This is a transformation we’re embracing and find deeply exciting. YOU ARE - An application security engineer who writes code. You can move from reading an unfamiliar code path, to reproducing an exploit, to proposing or shipping a production-quality fix. Strong Python or TypeScript experience would be especially useful; fluency across both backend and frontend systems is even better. - Skilled at finding vulnerabilities conventional scanners may miss. You use modern AI-assisted review pipelines, guided by expert judgment, to uncover subtle flaws in web apps and APIs—from authentication, authorization, and tenant isolation to injection, SSRF, unsafe data flows, and business logic. You can threat-model designs, white-box review code, and test running systems. - Offensive-minded and operationally responsible. You know how to test like an attacker without being careless with customer data or production systems. You can turn a finding into a safe reproduction, assess exploitability and business impact, and retest the eventual fix. - An automation builder. You have worked with some mix of SAST, DAST, software composition analysis, container scanning, secrets scanning, or cloud posture tooling. More importantly, you know how to tune tools, connect them to engineering workflows, and remove noise. - AI-native and accountable. You use coding agents and LLMs to accelerate investigation, code review, and repetitive engineering work, but you verify their output. You think carefully about what happens when agents clone untrusted code, install dependencies, or receive access to credentials. - Able to separate severity from priority. A score is an input, not a foregone conclusion. You consider reachability, existing controls, customer impact, and attack chains, then explain the risk in language that is legible to an engineer or business owner. - Comfortable working across the business. You’ll collaborate with product engineers, Site Reliability Engineers, Security & Trust Lead, auditors, and external researchers without confusing partnership for pass-off ownership. You will follow findings to closure even when another team is responsible for the fix. - Self-directed in a remote environment. You can take an ambiguous surface (say, secret rotation or dependency remediation) and learn how it works across multiple systems then turn it into a practical plan with measurable progress. You do not need to arrive as the deepest expert in every part of this scope. You do need to be able to investigate an unfamiliar system, determine what matters, and bring the right people with you. YOU WILL The work spans hands-on application security, security automation, vulnerability management, and infrastructure partnership. Depending on where you find the greatest risk and leverage, projects could include: - Build a recurring product security review program. Threat model new features, audit high-risk areas, review code, and build safe proof-of-concepts in isolated development environments. Work across our backend, frontend, APIs, and customer-facing integrations. - Improve application security testing. Combine static analysis, dependency and secrets scanning, dynamic testing in development, and carefully scoped production testing. Use existing tools where they fit and build focused automation where they don’t. - Own vulnerability intake and remediation. Triage findings from HackerOne, scanners, penetration tests, audits, customers, and internal research. Reproduce issues, assess exploitability and impact, track remediation, and verify fixes. Serve as technical lead for our bug bounty program while contract and budget ownership remain elsewhere. - Turn security alerts into useful engineering work. Verify scanner coverage and automate ingestion, deduplication, enrichment, prioritization, and routing—so teams spend less time interpreting alerts and more time fixing important issues. - Make dependency remediation safer and less manual. Improve scanning across our Python and TypeScript codebases, then build workflows to assess upgrades, stage pull requests, run checks, and route work without exposing credentials to untrusted packages or build steps. - Make secrets routinely rotatable. Partner with service owners and Infrastructure to inventory application secrets, add graceful rotation paths, document provider-specific runbooks, and automate rotation where the provider and risk justify it. Expand our use of Vault-backed dynamic credentials and reduce the number of rotations that require a coordinated fire drill. - Strengthen AWS security with Infrastructure. Evaluate and improve automated detection of risky configuration across identity, networking, compute, storage, containers, and registries. Turn findings into secure defaults, just-in-time access patterns, infrastructure guardrails, and actionable remediation—not build a second Infrastructure team. - Support audits and raising the security floor. Partner with Security & Trust on external assessments, provide technical context, and ensure findings are fixed rather than rediscovered. Along the way, create documentation, paved roads, and lightweight training that helps engineers make safer choices without waiting for a security review. - Take a key technical role in security incident response. Partner with Engineering and Infrastructure to coordinate investigation, containment, and remediation. Contribute to root-cause analysis and follow-up improvements, translating lessons learned into stronger controls and reduced recurrence. Tech you’ll touch: Python, TypeScript, React, Flask, FastAPI, GraphQL, Docker, Kubernetes, AWS, Vault, GitHub Actions, MongoDB, PostgreSQL, Redis, Kafka, Elasticsearch and the security tooling you help us choose. BENEFITS - Compensation: Competitive pay plus an organization-wide goal-based bonus - Paid Time Off: ~5 weeks of PTO to start. Plus a 1-week all-company Winter Holiday Break and paid US holidays. You'll earn 2 extra days for every year you're with Close. - 80% Work Option: Work with your manager to choose between a standard 5-day week or a 4-day week at 80% pay - Parental Leave: Paid leave for primary and secondary caregivers - Sabbatical: A 1-month paid sabbatical every 5 years with the team - Healthcare (US residents): Two medical plans with Close covering the majority of your premium, plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability - 401k (US residents): We match your contributions up to 6%, vested immediately OUR VALUES Build a house you want to live in - Examine long-term thinking and action No BS - Practice transparency and honesty, especially when it’s hard Invest in each other - Build successful relationships with your coworkers and customers Discipline equals freedom - Keep your word to yourself and others Strive for greatness - Constantly challenge yourself and others LEARN MORE Listen to our CEO and Founder, Steli Efti, tell the story of Close’s journey in the $0-30m Blueprint https://www.close.com/blueprint.  Watch our culture video https://www.youtube.com/watch?v=maXKi1GN2MI from our 2023 team retreat in Milan. Every year our entire team gathers in person to build connection, foster cross-functional collaboration, and have fun. In 2027, we're headed to Dusseldorf, Germany! Explore our product. Check out a demo https://www.close.com/demo-site! OUR HIRING PROCESS We ask a few role-specific questions as part of our application process. These questions are designed to help us learn more about you from the start, so please answer each one thoughtfully. We see this as an opportunity to get to know you beyond your resume. We use AI tools daily at Close and expect candidates to do the same. In evaluating your application, we aim to get a sense for you - the way you think, how you communicate, the work you've done. Applications that read as fully AI-generated will not be considered. Regardless of fit, you can expect to hear back from our team with an update on the status of your candidacy. If you progress to the interview process, you'll receive a full outline of the role-specific steps in your first touchpoint with us. We do our best to make the hiring process clear and human.

Location: Remote, Global Workplace: Remote ABOUT SUPABASE Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.   ABOUT THE ROLE We're looking for a Postgres Deployment Engineer to join our team and elevate our PostgreSQL offerings. You'll work hand-in-hand with the PostgreSQL team and play an instrumental role in technical decision-making and refining internal methodologies. The focus of this role is around owning stability and deployment of our products. This role involves ongoing contribution and co-responsibility for builds/deployments via our public supabase/postgres GitHub repository. This repository bundles an array of features/products into docker images and AWS AMIs, giving users the ability to run Supabase on our cloud and locally. This role will function has developed as a bridge between product and infrastructure teams to improve the reliability of product deployments and upgrades. In this role, your primary responsibilities will include: - Packaging software into our supabase/postgres https://github.com/supabase/postgres repo to using either nix language with flakes, or debian packaging depending on our required target - Supporting the expansion of knowledge in Supabase toward our platform release system so that developers can self service more and more over time. - Expanding on our github actions, our team tooling, and our testing/release approaches - Timely PostgreSQL major, minor, and extension upgrades. - Engaging in proactive identification and resolution of production issues in customer deployments. - Contributing to the creation/maintaining of best practices, tools, and tests to ensure enhanced stability and decreased deployment risks over time. What we need This role demands the following pivotal qualities: 1. PostgreSQL Expert: A profound understanding of PostgreSQL and its associated tools. Familiarity with extensions, performance optimization, and best practices is essential. 2. Infrastructure: Proven expertise in infrastructure management, tooling, and optimization. 3. Self-directed & Initiative: At Supabase, we value independence and proactive problem-solving. We anticipate you to be a dynamic self-starter, thriving in asynchronous collaboration across diverse teams. Your knack for spotting areas of improvement and commitment to realizing those enhancements will be key. What you’ll do - Improve the utility and efficiency of our PostgreSQL offerings. - Work with relevant teams to understand the issues around postgres stability, and apply those insights to the build/test/deploy AMI and Docker releases. - Contribute to the enhancement of our public GitHub repositories, especially supabase/postgres https://github.com/supabase/postgres. - Develop and expand tooling and solutions within the Supabase ecosystem. - Engage with customers routinely, ensuring our solutions resonate with their needs. - Address and resolve GitHub and Support issues. Must haves - 3+ years experience with PostgreSQL and its ecosystem. - Knowledge of ansible, Nix package management system (including nix flakes), packer, docker, qemu/kvm, aws, and kubernetes deployments is essential. Need experience with linux and darwin/macos aarch64 targets, as we maintain ability to build for both architectures - Must have experience with conventional and nix-packaged builds of C/C++, Go, javascript, and Rust based projects - Exposure to public cloud platforms and deployment methodologies. - Eagerness to improve and expand our development tools/stack. - Comfortable with regular interactions with customers - Willingness to work on an “integrated” system and approach to packaging. For many reasons, we cannot apply nix packaging to every component in our stack, nor can we just adopt Nixos in production. We have successfully laid the foundation for integrating conventional and Nix-based systems, with carefully validated choices including using flakes, etc. So, you must be willing to work within and help optimize this paradigm toward our platform development. - Must be willing to take on co-responsibility for teaching our engineering team to learn, use and contribute to our Nix-based work, and help troubleshoot and solve issues around the whole platform/postgres stack. Nice to haves - Experience with PostgREST, gotrue/supabase auth, and other Supabase stack components. - Contributions to significant, open-source projects in the PostgreSQL domain. WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.