Location: South Metro Animal Emergency Care - Apple Valley, Minnesota
Overnight Lead Licensed Veterinary Technician (LVT) – Emergency & Critical Care
South Metro Animal Emergency Care | Apple Valley, MN
💰 COMPETITIVE PAY + BENEFITS
$34–$38/hour
, based on experience
+$6/hour overnight differential
(8 PM–8 AM)
+$2/hour weekend differential
$2,500 sign-on bonus
PTO, medical, dental, vision, 401(k), life and AD&D insurance, EAP, supplemental insurance options, and eligibility for performance-based bonuses
🩺 READY TO LEAD? READY TO MAKE AN IMPACT?
This is more than an overnight technician position. It's an opportunity to lead, mentor, inspire, and help shape the future of a 24/7 Emergency Veterinary team!
South Metro Animal Emergency Care (SMAEC) is a growing, 24/7, AAHA-accredited emergency hospital seeking an experienced, motivated, and confident
Licensed Veterinary Technician (LVT)
to step into a leadership role within our Emergency and Critical Care department.
We're looking for someone who isn't afraid to take charge, enjoys developing others, thrives in a fast-paced environment, and understands what it takes to build a strong, cohesive overnight team.
Our technicians are valued medical professionals with a real voice in patient care, treatment decisions, and hospital flow. You'll work directly with DVMs in a collaborative, technician-forward environment with strong staffing support—typically
2 credentialed technicians and 2 veterinary assistants per doctor.
WHAT MAKES THIS OPPORTUNITY EXCITING?
Lead with purpose:
Take ownership of overnight clinical operations and serve as a key leader for the team.
Build a great team:
Mentor, coach, develop, and empower technicians and assistants to reach their full potential.
Make a clinical impact:
Work alongside emergency veterinarians to provide exceptional care for critical and emergency patients.
Partner with leadership:
Work closely with the Hospital Leadership Team and Medical Director to align clinical goals, improve hospital operations, strengthen team performance, and drive continued growth within the Emergency Department.
Have a voice:
Collaborate with hospital leadership on department initiatives, workflow improvements, team development, and clinical excellence.
Drive accountability:
Help establish consistency, communication, teamwork, and high clinical standards across overnight operations.
WHAT YOU'LL DO DAY TO DAY
Our cases include toxins, foreign bodies, urinary obstructions, respiratory emergencies, trauma, surgical emergencies, and hospitalized or critical patients.
Your responsibilities will include:
Leading and supporting overnight clinical operations while maintaining high standards of patient care.
Performing initial triage and collaborating directly with DVMs to prioritize patient needs.
Reviewing treatment plans with clients and answering questions with empathy and confidence.
Placing IV catheters, NG tubes, central lines, and PICC lines.
Applying splints and bandages.
Running and monitoring anesthesia for surgical procedures.
Performing and overseeing treatments for hospitalized patients.
Monitoring and advocating for patients throughout their stay.
Mentoring teammates and supporting a collaborative, accountable team.
Partnering with hospital leadership to improve workflows, communication, and overall department performance.
WHO ARE WE LOOKING FOR?
Someone who:
Holds a current Licensed Veterinary Technician (LVT) credential.
Has a strong background in veterinary emergency and critical care.
Is confident in their technical skills and clinical decision-making.
Is a natural leader who leads by example.
Has a passion for mentoring and developing others.
Can confidently navigate challenging situations and make sound decisions.
Understands that great leadership means supporting, motivating, and holding a team accountable.
Values collaboration and wants to be an active partner in hospital leadership.
Is ready to take ownership and make a difference.
❤️ WHY SOUTH METRO?
Technician-forward culture that values your knowledge, experience, and clinical skills.
Strong technician-to-doctor ratios and meaningful autonomy.
Hands-on emergency medicine experience and opportunities to expand your skills.
Supportive leadership and teammates who help one another.
A collaborative environment where your voice matters.
8-, 10-, or 12-hour shifts, with swing and overnight options.
🐾 OUR CORE VALUES
Respect • Wow Service • Learning • Fun • Communication • Doing the Right Thing
We're not just looking for someone to fill an overnight schedule. We're looking for a leader who wants to build something great.
If you're ready to take the next step in your veterinary career, influence the direction of a team, partner with hospital leadership, and make a lasting impact in emergency medicine, we want to meet you!
Step into leadership. Build your team. Shape the future.
READY TO JOIN OUR TEAM?
For more information about our hospital, visit
smaec.com
.
To apply, contact Christine Strassburg at
christine.strassburg@lakefieldvet.com
or apply at
careers.lakefieldvet.com
.
#LI-CE
Compensation Range
$34
—
$38 USD
leadSouth Metro Animal Emergency Care - Apple Valley, Minnesota
Location: Paris, Remote
Workplace: remote
Our Security and IT team keeps the 360Learning platform secure, compliant and auditable for the 1,500 organisations that learn on it every day. As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time.
360Learning runs its learning platform on Azure and Kubernetes, certified ISO 27001:2022 and SOC 2 Type II. Over the past two years the technical security workload has grown on every front: a larger and more regulated customer base sending their own scans and security assessments, a wider detection and response scope, more infrastructure to keep hardened and auditable, and a growing backlog of security engineering projects that never reach the top of the queue.
We are creating this position to add real technical capacity on the infrastructure side of security, and to move part of our security posture from manual effort to automated guardrails. You will be the bridge between security and platform engineering: deep enough in infrastructure to fix things yourself, and close enough to security operations to know what to look for.
“Ours is a small, senior team with a broad scope: information security, compliance, infrastructure governance and internal tooling, with dual audit accountability on ISO 27001:2022 and SOC 2 Type II. That means direct impact and no layers between you and the decision. Roughly half of this role is greenfield build work you will own end to end.” Guillaume Seigneuret, CISO and Hiring Coach.
Within 1 month, you will:
Complete our onboarding and learn how we work through our own platform and our Convexity culture
Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer
Meet the DevOps, platform engineering and IT teams you will work with daily
Shadow alert triage and one customer security assessment end to end
Within 3 months, you will:
Be autonomous on our AKS and Azure environment and handle infrastructure related alerts end to end
Have shipped at least one concrete hardening or automation improvement in production
Own the infrastructure scope of vulnerability management, from triage to remediation follow up
Within 6 months, you will:
Have the honeypot live and producing high fidelity alerts
Have measurably widened SIEM connector coverage, with documented log sources and retention
Run infrastructure vulnerability remediation on a predictable cycle with SLA reporting
Within 12 months, you will:
Manage detection content as code, with reviewed and tested rules and documented runbooks
Have largely automated audit evidence on the infrastructure scope
Have eliminated long lived credentials on the critical paths, so engineering teams ship on secure defaults they did not have to think about
The Skill Set:
5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands on infrastructure practice
Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security
Solid cloud experience, ideally Azure. Strong AWS or Google Cloud experience with a genuine interest in converting works too
Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines
Scripting and automation: Python or Go, plus shell. Comfortable reading and writing code, and opening pull requests on repositories owned by other teams
Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources
Fluent English (US/UK) / B2 level or equivalent (FR).
Enthusiasm for our working environment explained here:
https://bit.ly/Convexity360L
What we offer:
Compensation:
Package includes base salary, a variable component and equity 📈
Benefits/Perks
: Work From Home stipend, RTT, lunch vouchers, medical insurance, gym subscription, 1 month parental leave for the second parent.
Balance:
Flexible hours, full remote work possible anywhere in France 🏠
Diversity, Equity, and Inclusion
: We have 6 active ERGs including
Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity.
Each group has at least one executive team member serving as a member of the group, bringing greater awareness to each group’s activities and providing a quick path to impact 🤝
Corporate Social Responsibility
: Review our CSR Charter: 360learning.com/blog/corporate-social-responsibility-charter 🌎🌏🌍
Culture:
A framework that will help you make an impact - envision our way of working and our Convexity Culture:
https://bit.ly/Convexity360L
& find out more about the teams, product and processes
https://bit.ly/42H1ggC
🚀👩🏻💻🏆
Interview Process:
Phone Screen with our Talent Acquisition Manager
Discovery Meeting with our Head of Security
Live exercise with our Head of Security and our Head of Devops: investigation of an incident scenario, or review of an insecure infrastructure configuration
Clarification Meeting with the Security Engineer and a DevOps engineer
Culture Fit Meeting with our VP of Engineering
Offer!
Who We Are
360Learning enables companies to upskill from within by turning their experts into champions for employee, customer, and partner growth. With our LMS for collaborative learning, Learning & Development teams can accelerate upskilling with the help of internal experts instead of slow top-down training. 360Learning is the easiest way to onboard and upskill employees, train customer-facing teams, and enable customers and partners–all from one place.
360Learning powers the future of work at 1,700 organizations. Founded in 2013, 360Learning has raised $240 million with 400+ team members across North America and EMEA.
Learning Includes Everyone.
In concert with our culture, 360Learning believes learning includes everyone and that means embracing the strengths of diversity, connectedness, and inclusion. Through conscientious efforts, our global footprint celebrates cultures, perspectives, and experiences from all over the world to support our platform that is built for all regardless of race, ethnicity, gender identity or expression, sexual orientation, religion, age, neurodiversity, disability status, citizenship, veteran status or any other aspect which makes an individual unique or protected by laws and regulations in the locations where we operate. Thus, 360Learning is proud to be an equal opportunity workplace, and we commit to continue this throughout our processes for recruitment, compensation, benefits, performance, promotion, and all other conditions and terms of employment. We want to learn from and with you!
Location: Yerevan, Armenia
Description
Incident Management
is meant to reinstate normal service operations as fast as possible and mitigate the negative impact on business operations, thus making sure that the agreed levels of service quality are maintained. The goal is to effectively manage the lifecycle of all incidents and to restore IT services for users or customers as quickly as possible when an interruption takes place.
Now we welcome an
Incident Management Specialist
to join our bright team of devoted and creative Digitainers. If you are enthusiastic to improve knowledge on gaming industry, come up with innovative ideas and obtain new skills for a lifetime, then, you might be the person we are looking for.
The job is shift based and includes morning, afternoon, evening and night shifts.
Responsibilities
Receive and process incident tickets and service requests from company staff and worldwide partners
As receiving the Incident ticket and service request implement initial Review, criteria-based edition, issue reproduction, priority definition, first level troubleshooting and bug checking, afterwards, support with all necessary tools and credentials, assign the ticket to the responsible team/department
Keep tense contact with the responsible teams/specialists, require updates regarding the Incident resolution process, based on procedures follow Service and operation level agreements
Keep the contact with front line, management, partners all around the world organizing multilingual notification (English, Russian) process regarding incident tickets and service requests resolution process
Handle full information transfer regarding maintenance works by company providers, deliver corresponding information to the management and partners
Prepare daily/weekly/monthly reports as requested, analyze and organize presentations for separate departments, management based on specific requirements
Keep up to date with all company products and maintain high level of knowledge about in-house software, procedures, instantly upgrade the skills regarding the changes in products and services
Undertake Service Desk, Change management and Release management limited responsibilities in non-working hours
Promote teamwork and knowledge sharing, be actively engaged in Knowledge base creation process, continuous update and sharing with team members and company staff
Other duties as assigned by the immediate supervisor
Requirements
Undergraduate Degree in IT / Management will be a plus
Ability to competently keep verbal and written communication in Armenian, English and Russian with partners / other personnel
Good knowledge of MS Office
Experience in the iGaming industry is a plus
Knowledge of Atlassian Jira or other similar software will be considered as a plus
Ability to work with shifts is a must
Reporting and analytical skills
Hardworking, initiative and flexible personality with the ability to prioritize and multi-task
Location: Aalborg, Denmark
Join the global community that enhances and elevates the experience of the most prestigious luxury brands in the world! CXG, a leading customer experience agency servicing premium and luxury brands, is looking for mission-based Customer Experience Evaluators who are existing luxury brand customers.
As a Freelance Luxury Brand Evaluator, you can perform several evaluations per month and provide your valuable feedback via a questionnaire. Your assignments will be as diverse as our luxury clients and industries, ranging from fashion and high-end jewelry to cosmetics, luxury watches, automotives, and more. Your evaluations may involve visiting a store, returning a purchase, buying a product online, or making an appointment with a store.
Please note:
applicants should not have worked for luxury retail brands to ensure the integrity and objectivity of the evaluations.
Your feedback can influence brand strategies and help shape a brand's strategy, making this an opportunity for you to have a meaningful impact on the luxury market.
Responsibilities:
Conduct discreet evaluations of your favorite luxury brands in-store, online, or sometimes both.
Provide objective feedback about your experiences.
Choose assignments that align with your profile and interests.
Complete questionnaires after each evaluation.
Comply with all given project objectives and special requirements from the luxury brand we represent
How to Apply:
To become an evaluator with us, follow these simple steps:
Register on
live.cxg.com
and receive an email with your credentials.
Log into our platform and tell us more about yourself. Once this is done, our team will verify your profile and contact you.
Check the ‘welcome package’ and pass the general certification.
You’re now ready! You are now available for assignments and can browse and apply for any opportunities that interest you.
About CXG:
CXG is a global customer experience agency servicing premium and luxury brands. Our 12 offices around the world are able to service 70 countries. We are a team of 220+ customer experience experts and a network of over 80,000 evaluators worldwide. Learn more about what we do at
www.cxg.com
.
Enjoy the flexibility of working from our mobile application where you can search and apply for missions, take certifications, submit surveys, and much more, all on the go.
Contact us for more information!
Requirements
Must be 21 years or older.
Existing client of premium and luxury brands.
Not contractually engaged with any retail brands, to maintain integrity.
Punctual, organized, detail-oriented, reliable.
Observant, passionate about customer experience.
No prior experience needed, we look for honest feedback from real customers.
Location: United States
How We Build
Babylist is in the middle of a fundamental shift in how software gets made, and we are not tiptoeing into it. We are rebuilding our engineering culture around a simple belief: AI changes everything. How teams are structured, how decisions get made, how fast ideas become working software. Our engineers own problems end to end, working directly with product, design, and business partners with short feedback loops and real stakeholder access. We ship, learn, and iterate fast. When something is not working, we throw it out and start over — project failure and personal failure are not the same thing here. AI tools are as natural to our workflow as an IDE or version control. We are not exploring this, we are living it. Our engineers use AI to explore tradeoffs, pressure-test designs, and move from problem to solution in hours instead of days. They generate code with AI so they can stay focused on the decisions that actually require human judgment — not the routine ones. More velocity means more time for craft: better test coverage, stronger architecture, and deeper customer understanding. We hold ourselves to a higher quality bar because of AI, not in spite of it. We are building this playbook in real time, and we are looking for people who want to build it with us. If you have already changed how you work because of AI — or you are ready to — and you care more about shipping something great than following a prescribed process, we should talk.
Our Tech Stack
Ruby on Rails
AWS
Sidekiq
MySQL
Redis
What the Role Is
Babylist's Platform team is the foundation every engineering team builds on — and this role is at the center of keeping it reliable, fast, scalable, and secure. As a Staff SRE, you'll own the infrastructure and reliability practices that support 9 million+ users and the engineers who build for them. You'll bring strong software engineering skills and experience building security into production systems, turning that experience into code, automation, and secure defaults. You'll evolve our AWS infrastructure, CI systems, and developer tooling as Babylist grows across e-commerce, registry, health, media, and mobile. You'll share the team's core SRE responsibilities and bring particular depth in security engineering, leading security improvements alongside reliability, developer experience, and platform initiatives.
Who You Are
Strong software engineering skills
— you've shipped and operated production-quality tools or services, with tests, code review, and maintainable interfaces
Experience building security into production systems
— you've personally designed, implemented, and operated controls for access, workload identity, secrets, or network isolation
Deep hands-on Terraform expertise
— you own IaC, not just contribute to it
Proven AWS experience
at scale — EKS, RDS, cloud networking, DNS, CDNs, load balancers — you know the gotchas
Experienced operating Kubernetes in production
— you've debugged the hard stuff, not just deployed the easy stuff
Comfortable designing and improving CI/CD systems
— CircleCI, GitHub Actions, or similar; you care about developer velocity, not just pipeline uptime
Strong observability instincts
— Datadog, Sentry, PagerDuty, Cronitor — you build alerting that's actionable, not noisy
Experienced with on-call and incident management
— you've run the post-mortems and actually changed things afterward
Comfortable supporting developers across local, staging, and production
— you're a resource, not a gatekeeper
You naturally reach for AI in your work — at Babylist, every team uses AI daily. You're already using it to move faster and improve your output, and you stay curious about what's coming next.
How You Will Make An Impact
Infrastructure ownership
— manage and evolve our AWS environment using Terraform, keeping EKS clusters, databases, and core services current, performant, and secure
Software and automation
— ship tested tools and services with runbooks and self-service workflows that other engineers can adopt and operate
Secure infrastructure defaults
— build versioned, tested Terraform modules for least-privilege access, secrets, and workload isolation, with automated checks for configuration drift
CI/CD reliability
— keep delivery fast and dependable across Engineering, integrating dependency and container scanning, secret detection, and short-lived deployment credentials
Developer support
— be the person engineers turn to when environments break; unblock them fast across local, staging, and production
Monitoring & alerting standards
— define service-level objectives (SLOs) and actionable alerting with engineering teams, using incident trends to prioritize reliability improvements
Recovery readiness
— validate backups, restore procedures, and failover paths through regular recovery tests
Incident response
— lead or support incident response, drive post-incident reviews, and close the loop so the same thing doesn't happen twice
Platform strategy
— shape our long-term infrastructure roadmap and lead cross-team initiatives from design through rollout, adoption, and ongoing operation, mentoring engineers along the way
Why This Role
Platform is the team every engineering team depends on — your work has outsized leverage across the entire product org, not just one area
The infrastructure is solid and actively evolving — you'll shape how reliability and security are built into the platform as it grows
This is a staff-level role with real cross-team visibility — you'll influence how Babylist engineers build and ship, not just keep the lights on
You'll work on systems that support millions of families at a high-stakes life moment — the scale is real and the product context makes the reliability work matter
About Compensation
We use a market-based approach to compensation. The starting salary range for this role is:
$226,673 to $271,991 + target 20% annual bonus and competitive equity
Your starting salary will be based on your location, experience, and qualifications, with increases over time tied to performance, role growth, and internal pay equity.
Who We Are
Babylist is the leading platform for expecting and new families. More than 10 million people shop with Babylist every year, making it the go-to destination for seamless purchasing, guidance, and expert recommendations. As a modern, AI-forward tech company, Babylist has expanded from a universal registry into a full ecosystem — the Babylist Shop, Babylist Health, Babylist Money, NYC and LA showrooms, branded content, and more — generating $750M in revenue in 2025. Building the generational brand in baby, Babylist is reshaping the $235B kids and baby market and helping parents feel confident, connected, and cared for at every step.
Our Ways of Working
Babylist is remote-first with team members across the U.S. and Canada who move fast, think smart, and use AI as part of how they work every day — not as an experiment, as an expectation. We come together twice a year to build the relationships behind the work, and we hire people who are genuinely excited about what's possible and prove it through how they show up.
Why You Will Love Working At Babylist
Our Culture
We work with focus and intention, then step away to recharge
We believe in exceptional management, and we invest in the tools and the time to connect with colleagues
We build products that positively impact millions of people's lives
AI is part of how we work, not a side experiment. You'll have leading tools like Claude and ChatGPT from day one, with no waiting on access, so the busywork gets handled and your judgment goes where it counts
Growth & Development
Competitive pay and meaningful opportunities for career advancement
We believe technology and data can solve hard problems
We're committed to career progression and performance-based advancement
Benefits
Company-paid medical, dental, and vision insurance
Retirement savings plan with company matching and flexible spending accounts
Generous paid parental leave and PTO
Winter Wonder Week: the whole company takes a paid week off at the end of the year, whether or not you celebrate anything, so everyone's out at once and comes back refreshed
Remote work stipend to set up your office
Perks for physical, mental, and emotional health, parenting, childcare, and financial planning
Important Notices
Recorded Interviews.
Babylist uses an interview recording tool to record and transcribe interviews for evaluation purposes in accordance with applicable privacy laws. By participating in an interview, you consent to this recording and transcription.
Interview Integrity.
AI is part of how we work at Babylist. We expect you to use it too. Your application and interviews should still reflect you and your own thinking. We'll tell you when AI is encouraged. Misrepresentation at any stage may result in removal from consideration for this and future roles.
How We Review Applications
We use AI throughout our hiring process to help review, screen, and assess applications. These tools support our team's review; they do not replace it, and every hiring decision is made by a person.
Connections at Babylist.
If you have a family member or close personal relationship with a current Babylist employee, please let your recruiter know. This helps us keep our process fair and transparent for everyone.
Protect Yourself from Scams.
All official outreach comes from the Babylist Talent Team via @babylist.com email addresses only. We will never ask for payment or personal financial information. If you receive outreach via WhatsApp, Telegram, or a non-Babylist email, it's not us. Verify open roles at babylist.com/careers.
Location: Oakland, CA, United States
Help Strengthen Democracy Through Civic Technology
WeVote
is a nonpartisan, nonprofit civic technology organization powered by more than 250 volunteers across the United States. Our mission is to help voters make informed decisions through accessible, technology-driven voter education tools.
We are seeking an experienced
Financial Controller
to help oversee and strengthen our financial operations. This is an excellent opportunity for a finance professional who wants to apply their expertise to a meaningful cause while collaborating with a high-impact national volunteer team.
Time Commitment:
3-5+ hours per week
Location:
Remote (U.S.)
Type:
Volunteer Role
Fraud & Phishing Warning
Please apply directly through the WeVote volunteer application portal:
https://wevote.applytojob.com/apply
For your security, do not submit applications through third-party job boards or unofficial websites. Applications are only accepted through our official volunteer applicant tracking system.
About WeVote
WeVote is a nonpartisan, nonprofit organization that leverages technology to increase voter participation and civic engagement. As a Fast Forward-supported nonprofit technology organization, we develop tools that help voters access reliable election information and make confident voting decisions.
Learn more at
www.WeVote.US
.
What You'll Do
As a Volunteer Financial Controller, you will help ensure financial accuracy, transparency, and sustainability across the organization by:
Preparing monthly, quarterly, and annual financial reports, including income statements, balance sheets, and cash flow statements
Overseeing accounts payable, accounts receivable, reconciliations, expense tracking, and general ledger activities
Supporting annual budgeting, forecasting, and financial planning processes
Monitoring cash flow, liquidity, and working capital requirements
Helping improve financial systems, reporting tools, and process automation
Developing financial dashboards, metrics, and reporting packages for leadership and board stakeholders
Supporting nonprofit financial compliance and tax filing requirements
Recommending financial controls, policies, and best practices to strengthen operational effectiveness
What We're Looking For
Required Qualifications
Professional experience in accounting, finance, controllership, or financial management
Strong understanding of financial reporting, budgeting, and forecasting
Experience with accounting systems and financial software platforms
Excellent analytical, organizational, and communication skills
Ability to work independently in a remote, collaborative environment
Commitment to WeVote's mission of strengthening civic participation and voter engagement
Availability of at least 3 hours per week during core collaboration hours (Monday-Friday, 8:00 AM-6:00 PM ET)
Preferred Qualifications
CPA, CMA, MBA, or equivalent financial credentials
Experience with nonprofit accounting or nonprofit financial management
Experience presenting financial information to executive leadership or boards of directors
Knowledge of internal controls, audits, and financial compliance practices
Why Volunteer With WeVote?
Make a direct impact on voter engagement and democratic participation
Apply your professional expertise to a meaningful national mission
Collaborate with talented volunteers across technology, operations, communications, and civic engagement
Expand your leadership experience and professional network
Gain exposure to nonprofit leadership and governance
* Fraud and phishing warning *
Please apply directly via our volunteering portal/ATS at https://wevote.applytojob.com/apply. Do not apply via any other job portals, aggregators, or sites, as your information may not be secure, or the role may no longer be accepting applications. Thank you!!
Location: Remote - Americas
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role:
We are seeking an AI Security Engineer to own the technical security controls for how Alpaca uses AI. The scope includes identity for AI agents and automations, security requirements for AI tools and integrations, guardrails, and security logging. You will also assist in developing AI-powered security tooling.
You will keep those controls consistent as AI adoption grows, and you will work with the teams building with AI so security is part of the design.
This role reports to the Enterprise Security Architect and works closely with AI Enablement, Engineering, DevOps, GRC, and the wider Security team.
The Security Team is 100% distributed and remote.
Things You Get To Do:
The core responsibilities of the AI Security Engineer are focused on AI access controls, secure AI platforms, guardrails, visibility into AI usage, and AI-powered security tooling.
AI Identity and Access Controls:
Agent Identity:
Define how AI agents, bots, and automations authenticate, what they can access, and how their actions are attributed and audited.
Tool Access:
Own security requirements for AI tool integrations, including least-privilege access and credential handling.
AI Assistant Controls:
Define and enforce security settings for approved AI tools, including data handling and access policy.
Least Privilege:
Limit each agent and integration to the access it needs, and review that access when the integration changes.
Secure AI Platform, Tooling, and Response:
Security Requirements:
Define security requirements for internal AI applications, including identity, data handling, secrets, and review of new integrations.
Guardrails:
Design and implement guardrails for AI applications and agents.
Design Reviews:
Review new AI applications and integrations for security risks, and give builders clear, practical requirements.
Security Tooling:
Assist Security Operations in developing AI-powered tooling that supports detection, investigation, and response work.
Safe Use in Security:
Apply the same identity, data handling, and logging requirements to security team AI tools as to the rest of the company.
Telemetry Requirements:
Define the security logging AI systems must produce, and work with Security Operations on detection.
Approved Use:
Maintain visibility into AI tool usage and confirm it follows approved configurations.
Incident Support:
Lead the AI-specific aspects of security incidents, such as agent misuse or data exposure through AI tools.
On-Call:
Participate in the Security Operations on-call rotation after onboarding and cross-training.
Governance:
Standards:
Turn AI security standards into technical controls.
GRC Partnership:
Partner with GRC on AI governance and provide technical evidence for control design.
Who You Are (Must-Haves):
Excited about Alpaca’s mission and what we’re building
2+ years of experience in security engineering, application security, or cloud security roles
Hands-on experience securing LLM applications, AI agents, or AI developer tools
Understanding of AI-specific risks, such as prompt injection, data leakage, excessive agency, and insecure tool use (for example, the OWASP Top 10 for LLM Applications)
Experience with identity and access controls for services and non-human identities, including OAuth, service accounts, and secrets management
Programming experience in Python or another general-purpose language
Experience with CI/CD security checks and cloud-native deployments
Experience with security operations or incident response
Strong written and verbal communication skills, especially when explaining risk to non-security builders
Comfortable working cross-functionally and making pragmatic security decisions
Willing to participate in an on-call rotation
Experience building AI-assisted workflows for security operations
Experience building security telemetry for AI systems
Who You Might Be
(
Nice-to-Haves):
Experience securing financial, trading, or other highly regulated platforms
Experience securing enterprise AI coding tools and AI integrations
Experience with policy-as-code and Kubernetes
Familiarity with AI governance frameworks, such as the NIST AI Risk Management Framework or ISO 42001
Ability to balance security rigor with operational efficiency and business needs
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
Validates Acute Inpatient coded charts to ensure the diagnostic information leading to the assignment can be substantiated by the documentation in the Medical Record.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Location: Austin, San Francisco or New York
About the role
Cloudflare is hiring a Data Center Architect to define and deliver the physical infrastructure behind high-density compute and GPU deployments across our global network. You'll own 3 connected domains: the liquid cooling chain, the low-voltage connectivity layer, and the MV/LV electrical architecture that powers both.
This is a senior individual-contributor role spanning architecture, detailed design, technical qualification, design governance, commissioning, and operational readiness. You're Cloudflare's owner-side technical lead in these domains: the person who connects what our hardware needs with what colocation providers, equipment manufacturers, and delivery partners can actually build.
Scope runs from a single rack in commercial colocation to multi-megawatt compute deployments. You'll design power, cooling, and cabling as one system so they don't fight each other at the rack, in the white space, or during maintenance.
If your background is only HVAC design, only cold-plate research, or only utility-scale generation, this role will be wider than you expect. We need someone who can hold the electrical, cooling, and cabling layers together.
About the team
We work with engineering, capacity planning, network strategy, supply chain, and operations to grow Cloudflare's data center and PoP footprint. With colocation providers, hardware suppliers, and delivery partners worldwide, we turn infrastructure requirements into deployments that come online faster, cost less, and work the first time.
What you'll do
Architecture and reference designs
Own the physical-infrastructure architecture.
Build reference designs for power, liquid cooling, and connectivity for AI and high-density compute, including how they interface at rack, row, and site level. Maintain the standards, templates, and libraries that deployment, operations, and partner teams build from.
Translate hardware and capacity needs into engineering requirements.
Turn heat loads, electrical loads, port counts, network topologies, and growth plans into power, cooling, and connectivity requirements and into site and rack qualification criteria.
Qualify sites and facility interfaces.
Assess provider power and cooling availability, utility and backup capacity, water supply and return conditions, hydraulic capacity, upstream heat rejection, expansion headroom, maintenance constraints, and contractual boundaries. Give go/no-go recommendations with the risks written down.
Electrical power architecture (MV/LV)
Lead MV and LV electrical architecture:
single-line diagrams, power distribution, switchgear and UPS topology, busway and PDU design, grounding and bonding.
Design physical power infrastructure,
AC and DC, including power conversion, backup generation, energy storage, and distribution, with attention to fault levels, selectivity, and maintainability.
Validate designs with modeling:
load-flow, short-circuit, arc-flash, and selectivity studies, checked against measured performance where possible.
Define digital power requirements
for monitoring, metering, protection coordination, and control. Work with controls and operations teams on alarm thresholds, trend retention, remote monitoring, and BMS/SCADA integration.
Fold emerging standards
(NEC, NFPA, UL, OCP power and rack specs) into forward-looking electrical designs.
Liquid cooling
Own the liquid-cooling architecture and roadmap.
Develop repeatable direct-to-chip designs and evaluate liquid-to-liquid, liquid-to-air, rear-door, and other approaches against deployment needs.
Design and validate the hydraulic system.
Flow and pressure-drop calculations, pipe sizing, pump selection, balancing, and control requirements. Validate at partial load, during expansion and maintenance, and in failure scenarios, not just at nameplate.
Specify equipment and rack integration.
Qualify CDUs, heat exchangers, pumps, manifolds, hoses, quick-disconnects, valves, and instrumentation. Coordinate rack access, piping routes, service clearances, and installation sequencing with the electrical, cabling, hardware, and structural disciplines.
Own coolant integrity and serviceability.
Set manufacturer-aligned requirements for fluid quality, material compatibility, cleanliness, filtration, corrosion control, condensation prevention, and leak detection. Make isolation, fluid handling, component replacement, and servicing safe and maintainable.
Low-voltage connectivity and structured cabling
Own the physical-layer architecture.
Reference designs for rack, row, cage, and site connectivity: copper and fiber distribution, patch-panel placement, cross-connect demarcations, diverse routes, and reserved expansion capacity.
Engineer fiber and copper connectivity.
Specify media, connectors, trunks, cassettes, and patching for equipment reach and performance. Validate optical loss budgets, connector counts, polarity, breakouts, bend radius, and compatibility across hardware generations.
Produce buildable designs.
Pathway layouts, fiber schedules, port-to-port patching plans, cable-length schedules, bills of materials, and installation specs.
Connect to colocation and carrier infrastructure.
Qualify meet-me-room access, provider pathways, cross-connect options, demarcation points, and route diversity. Define handoffs with data center providers, carriers, ISPs, and Cloudflare's network strategy team.
Integration, controls, and resilience
Coordinate white-space interfaces.
Layouts that account for rack access, airflow, liquid-cooling pipes and manifolds, power segregation, pathway capacity, and expansion. Coordinate supports, bonding, grounding, and firestopping with the responsible disciplines and providers.
Design for resilience and controlled failure.
Evaluate redundancy, shared failure dependencies, cooling and power interruptions, and thermal ride-through. Agree protective responses with hardware and operations teams for pump or CDU failure, loss of facility cooling, leaks, sensor faults, control failures, and power events.
Define controls and operational visibility:
temperatures, pressures, flows, power metering, leak alarms, equipment status, and capacity telemetry.
Governance, delivery, and acceptance
Be Cloudflare's owner-side design authority.
Own basis-of-design documents, single-line diagrams, P&IDs, cabling and equipment schedules, interface requirements, scopes, responsibility matrices, review gates, and acceptance criteria. Review partner designs and contractor submittals, resolve RFIs and technical disputes, and drive deviations to documented closure.
Lead delivery and live-site changes.
Guide contractors and remote hands through new deployments, expansions, migrations, and remediation. Work with deployment and operations on installation sequencing, methods of procedure, change controls, and rollback plans that protect running services.
Lead commissioning and acceptance.
Define factory and site acceptance tests across electrical, cooling, and connectivity: cleanliness and leak-test evidence, flow balancing, loaded performance tests, failure-mode testing, and copper and fiber certification (fiber inspection and cleaning, insertion-loss testing, OTDR where appropriate). Track deficiencies and verify corrective work before sign-off.
Keep the physical source of truth accurate.
Define labeling and connectivity-record standards. Make sure as-builts, power and cooling records, patching schedules, cross-connect inventories, and test records reconcile with Cloudflare's infrastructure inventory and DCIM.
Oversee handover:
deficiency closure, operator training, maintenance procedures, spares, and turnover documentation before production.
Cost, efficiency, and standards
Support sourcing.
RFPs, technical bid evaluation, technical negotiations, supplier qualification, and lifecycle cost analysis. Partner with supply chain on prefabricated assemblies, preterminated cabling, rack integration, lead times, and alternatives that cut field labor without cutting quality.
Reduce energy and water use.
Evaluate phased deployment, consumption, and retrofit options.
Evolve standards from evidence.
Investigate incidents and recurring installation defects with network and operations teams. Feed commissioning and operating results back into designs, standards, and quality checks.
What you'll bring
8+ years in data center mechanical, electrical, or physical-layer infrastructure, critical-facility cooling, or structured cabling, including architecture or technical design leadership.
Bachelor's in Electrical or Mechanical Engineering or a related field, or equivalent practical experience.
Delivered liquid-cooled compute infrastructure from requirements through commissioning or production handover. Conventional HVAC experience alone doesn't qualify.
Create and review electrical single-line diagrams and schematics, with hands-on MV/LV system design including protection, selectivity, and grounding.
Strong command of thermodynamics, heat transfer, fluid mechanics, hydraulic calculations, pump and heat-exchanger selection, and cooling performance under variable conditions.
Practical experience with CDUs, facility and technology cooling loops, rack distribution, coolant compatibility, leak detection, and the interfaces between liquid-cooled hardware and facility systems.
Strong knowledge of copper Ethernet, single-mode and multimode fiber, patching systems, LC and MPO/MTP connectivity, optical loss budgets, polarity, cable management, and the applicable test methods.
Experience in colocation environments: cross-connect delivery, diverse physical paths, and the practical constraints of building inside third-party facilities.
Able to write and critically review basis-of-design documents, P&IDs, electrical and mechanical specifications, equipment selections, operating sequences, and test plans.
Working knowledge of NEC, NFPA, UL, mechanical and plumbing codes, TIA and ISO/IEC structured-cabling standards, relevant ASHRAE data center guidance, and manufacturer operating requirements, and the ability to apply them with qualified local engineering partners.
Experience evaluating resilience and maintainability, participating in commissioning, and resolving system-level problems across equipment and organizational boundaries.
Experience directing design consultants, contractors, installation partners, or remote hands, with clear ownership of technical decisions and acceptance outcomes.
Clear written and verbal communication across disciplines and time zones, and able to run several projects with limited oversight.
Legally authorized to work in the United States on a continuing and permanent basis without company sponsorship. [Confirm wording with recruiting.]
Bonus points
PE, Chartered Engineer, or equivalent registration in electrical or mechanical engineering.
BICSI RCDD, DCDC, or a comparable credential.
High-density GPU platforms, OCP rack, power, and cooling interfaces, or qualification across multiple hardware and cooling suppliers.
Hydraulic and electrical modeling tools (AFT Fathom, PIPE-FLO, ETAP, SKM), thermal or CFD modeling, and validating models against measured performance.
High-density optical distribution, parallel optics, preterminated assemblies, and cabling transitions across successive network generations.
Modular or prefabricated power or cooling infrastructure, live-site retrofits, DCIM platforms, automated connectivity or telemetry analysis, or lifecycle energy and water performance.
Familiarity with Cloudflare-relevant network environments: optical transport, ISP interconnection, out-of-band management, and liquid-cooled rack integration.
Travel
Travel for site assessments, vendor reviews, factory testing, commissioning, and deployment support, including international travel.
What success looks like
Sites are qualified against real hardware requirements. Power, cooling, and connectivity responsibilities are unambiguous. Systems prove their electrical, thermal, and connectivity performance, including failure behavior, before handover. Operations has the monitoring, procedures, training, and spares to run them.
Why Cloudflare
Your work shapes how Cloudflare deploys physical infrastructure across a global network, from long-term architectural choices to getting the next cage online.
Strong candidates take different paths. If your experience shows the core capabilities but doesn't match every line above, apply anyway.
Compensation
Compensation may be adjusted depending on work location.
For San Francisco Bay Area based hires: Estimated annual salary of $165,000 - $205,000.
For New York based hires: Estimated annual salary of $158,000 - $195,000.
Equity
This role is eligible to participate in Cloudflare's equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health & Welfare Benefits
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Financial Benefits
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Time Off
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Intellias
Meet your recruiter
Olha Yakuba
olha.yakuba@intellias.com
https://www.linkedin.com...
Vacancy details
DevOps Engineering
DevOps Engineer (AWS)
Principal
Bulgaria, Croatia, India, Poland, Portugal, Spain, Ukraine
Remote
APPLY NOW
REFER A FRIEND
We are looking for a Senior Identity & Access Management Engineer to design and implement secure identity propagation and authorization patterns across AI agent ecosystems. The role focuses on runtime identity, On-Behalf-Of (OBO) token exchange, identity federation, and secure agent-to-tool communication using AWS Bedrock AgentCore and modern enterprise identity platforms.
You will be responsible for ensuring that agents, tools, and downstream APIs operate with properly scoped identities and permissions, enabling secure delegation, authorization enforcement, and credential isolation throughout the agent invocation lifecycle.
This position requires deep hands-on experience with OAuth 2.0, OIDC, JWT validation, token exchange workflows, and enterprise identity federation. Experience with workload identity brokering, agent authorization models, and policy-based access control is highly desirable.
What project we have for you
Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications.
Intellia’s mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform.
The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices.
What you will do
Design and implement secure identity propagation across agent → tool → API interaction chains.
Build and support On-Behalf-Of (OBO) token exchange flows and scoped delegation mechanisms.
Integrate AWS Bedrock AgentCore Identity capabilities into agent runtime workflows.
Implement OAuth 2.0, OpenID Connect (OIDC), and JWT-based authentication and authorization patterns.
Develop identity federation integrations with enterprise identity providers such as Microsoft Entra ID, Okta, or Amazon Cognito.
Configure gateway-level outbound authorization and per-target credential management, ensuring sensitive credentials are never exposed to calling agents.
Build secure token issuance, validation, exchange, rotation, and lifecycle management processes.
Design and implement workload identity brokering and agent identity mapping mechanisms.
Implement identity-aware authorization controls using Cedar policies, claims mapping, and fine-grained access enforcement.
Collaborate with platform, security, and runtime teams to align identity controls with enterprise security standards.
Support secure agent-to-agent (A2A) and agent-to-tool invocation authorization patterns.
Participate in security reviews, threat modeling, and architecture discussions related to AI agent platforms.
Define and enforce best practices for runtime identity, federated access, delegated authorization, and credential protection.
What you need for this
Skills:
• AWS Bedrock AgentCore Identity or similar technology (inbound auth, outbound auth, token vault)
• On-Behalf-Of (OBO) token exchange and scoped identity propagation across agent → tool → API chains
• JWT / OAuth 2.0 / OIDC (claims, scopes, audience/issuer validation, short-lived scoped tokens)
• Identity federation and MS Entra Agent ID integration or similar technology (workload identity brokering)
• Gateway outbound authorization and per-target credential management (secrets never exposed to the calling agent)
• AgentCore Runtime integration of identity into the agent invocation lifecycle
• Cedar / MS Entra claims mapping for identity-aware authorization (coordination with Runtime Controls)
Experience:
• 5+ years cloud security or identity engineering
• Hands-on OAuth 2.0 / OIDC / JWT implementation (token issuance, validation, exchange)
• On-Behalf-Of / token-exchange flows in production (RFC 8693 or equivalent)
• Enterprise identity federation with MS Entra, Okta, or Cognito
• Secure credential/secret management and token lifecycle (rotation, vaulting)
Nice to have:
• AWS Bedrock AgentCore Identity early adopter or equivalent
• AWS AgentCore Gateway outbound-auth integration
• MCP / A2A tool-invocation auth patterns
• AgentCore Policy (Cedar) or AWS Verified Permissions exposure
What it’s like to work at Intellias
At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth.
We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law.
We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.
Location: Remote
About Osano
Osano is an innovative B-Corporation built around a simple belief: privacy is a fundamental right. Since day one, we’ve been focused on giving modern enterprises the ability to innovate quickly, stay competitive, and earn customer trust by respecting data privacy and complying with consent guidelines. Our products help organizations operate confidently in a rapidly evolving regulatory and technological landscape.
About the Role
We’re looking for an
Account Executive
to join our
Sales
team. This person will play a pivotal role in driving new business growth by connecting organizations with Osano’s privacy and compliance solutions.
This position is ideal for someone competitive, consultative, and energized by solving complex business challenges. You enjoy building authentic relationships, running disciplined sales cycles, and owning your pipeline from first conversation to closed-won. You thrive in a fast-moving, high-growth environment and are motivated by both impact and income.
Responsibilities
Own the full sales cycle from discovery through close
Sell Osano’s consent management, data mapping, data discovery, vendor monitoring, and privacy program solutions
Identify and engage marketing, compliance, legal, and data security stakeholders
Uncover prospect goals, challenges, decision-makers, and budget parameters
Deliver compelling presentations, product demos, and tailored proposals
Negotiate pricing and contractual agreements
Meet or exceed individual quota and contribute to overall revenue team success
Maintain accurate pipeline management and revenue forecasting
Partner cross-functionally with Sales Development, Marketing, Product, and Customer Success
Stay current on privacy regulations, industry trends, and Osano’s evolving product offerings
Travel occasionally (<15%) for strategic opportunities as needed
About You
You’re curious, self-directed, and motivated to learn quickly.
You’re comfortable navigating ambiguity and creating clarity for others.
You’re excited about privacy, responsible AI, and building trustworthy technology.
You are willing to relentlessly pursue the best, most responsible ways to leverage AI—without overselling its capabilities or ignoring its limitations.
Why Us
A well-defined career path that’s not just “climbing the ladder” - learn different competencies, skills, and concepts as you progress and get recognized for it.
Supportive leadership and peers - from sales engineering and product marketing to sales development and demand generation - you’re never in this alone.
You’ll be stepping into a space that’s on fire – the privacy and regulatory landscape is only growing with a ton of opportunity in front of us.
You’ll become a privacy expert, including the opportunity to receive your Certified Information Privacy credential.
You’ll be representing a product that makes prospects say, “This is so awesome” when you demo it.
Benefits
Competitive compensation + ownership interest for early stake in our success!
Unlimited paid time off with a requirement to take at least two weeks off per year.
We're continuously a Best Place for Working Parents and offer paid parental leave for all new parents + believe that family, however you define it, comes first.
Osano sponsors individual premiums for base plans at 100% and dependent premiums at 50% for Medical, Dental, and Vision Insurance via Aetna.
A fully, permanently remote company so you can work from anywhere in the U.S.
Receive a MacBook + $600 to craft your home workspace
Annual company trip designed to foster connection, creativity, and fun together!
Mental health benefits with free memberships to mindfulness + talk therapy services
A Bit More About Osano
Osano is a leading data privacy platform that helps organizations quickly and confidently comply with laws like GDPR, CCPA, and other global privacy regulations. From consent management to vendor risk monitoring, Osano makes complex privacy tasks refreshingly simple, so companies can focus on what they do best, while we handle the rest.
We’re backed by top-tier investors including Baird Capital, Jump Capital, and LiveOak, and we’re scaling fast with a multi-year runway and ambitious growth plans. We’ve also been recognized as a Great Place to Work for four years running, with 97% of employees saying Osano is a great place to work.
As we grow, we're looking for individuals who lean into modern technologies and smarter systems to drive efficiency, clarity, and speed; both in our product and in how we operate. If you're excited by the idea of helping build a high-growth, privacy-first company that embraces thoughtful automation, emerging tech, and intentional collaboration, we’d love to hear from you.
Osano is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, genetic information, disability, veteran status, or any other characteristic protected by applicable law.
Location: Remote
About Osano
Osano is an innovative B-Corporation built around a simple belief: privacy is a fundamental right. Since day one, we’ve been focused on giving modern enterprises the ability to innovate quickly, stay competitive, and earn customer trust by respecting data privacy and complying with consent guidelines. Our products help organizations operate confidently in a rapidly evolving regulatory and technological landscape.
About the Role
Osano is looking for a
Performance Marketing Manager
to own and optimize our digital marketing programs, drive qualified pipeline, and maximize the return on our marketing investments.
This is a hands-on individual contributor role for someone who thrives at the intersection of strategy, execution, and analytics. You'll take ownership of our paid media programs, from campaign development and audience targeting to budget management, experimentation, and performance optimization.
We're looking for someone who doesn't just understand performance marketing in theory but has experience getting into the platforms, building campaigns, analyzing results, and making adjustments that drive measurable business outcomes.
You'll work closely with Marketing, Sales, Product Marketing, Content, and Revenue Operations to ensure our digital marketing investments are reaching the right audiences, generating qualified opportunities, and contributing to revenue growth.
What You'll Do
Own and execute Osano's paid media strategy
across Google Ads, Microsoft/Bing Ads, LinkedIn Ads, and emerging advertising channels, including YouTube, Reddit, and AI-driven platforms.
Manage paid campaigns directly within advertising platforms, including campaign setup, keyword research, audience targeting, bidding strategies, budget allocation, and ongoing optimization.
Develop and execute performance marketing programs designed to generate qualified leads, increase conversions, and contribute to sales pipeline and revenue.
Monitor and optimize key performance indicators, including cost per lead (CPL), cost per acquisition (CPA), conversion rates, return on ad spend (ROAS), and pipeline contribution.
Manage paid media budgets, continuously evaluating channel performance and reallocating spend to maximize marketing efficiency and return on investment.
Build and execute A/B tests across ad creative, messaging, landing pages, audiences, and conversion paths to improve campaign effectiveness.
Partner with Product Marketing and Content to develop compelling advertising messages, creative assets, and landing pages tailored to target audiences.
Analyze website traffic, landing page performance, and conversion funnels to identify opportunities for improvement.
Work closely with Revenue Operations to ensure accurate campaign tracking, lead attribution, CRM integration, and performance reporting.
Leverage HubSpot, Salesforce, Google Analytics, and other marketing tools to measure campaign effectiveness and understand how marketing investments influence pipeline.
Develop audience segmentation and retargeting strategies to engage high-value prospects throughout the buyer journey.
Support account-based marketing (ABM) initiatives through targeted digital advertising campaigns.
Explore emerging advertising channels, AI-powered marketing tools, and automation opportunities to improve campaign execution and performance.
Create and maintain performance dashboards that provide clear visibility into campaign results, marketing spend, and pipeline contribution.
Share insights and recommendations with Marketing and Sales leadership, translating performance data into actionable business decisions.
Stay current on digital advertising trends, platform changes, and performance marketing best practices.
What We're Looking For
5+ years of experience
in performance marketing, paid media, digital marketing, growth marketing, or a related field, preferably within B2B SaaS or technology.
Demonstrated success managing and optimizing paid digital advertising campaigns that generate qualified leads, pipeline, and measurable business results.
Strong hands-on experience with Google Ads and LinkedIn Ads is required
, including building, launching, managing, and optimizing campaigns directly within the platforms.
Experience managing paid media budgets and making data-driven decisions to improve campaign efficiency and ROI.
Strong understanding of paid search, paid social, audience targeting, retargeting, conversion tracking, and campaign optimization.
Experience analyzing performance metrics such as CPL, CPA, conversion rates, customer acquisition costs, and marketing-sourced pipeline.
Proficiency with marketing analytics and reporting tools, including Google Analytics 4 (GA4), Google Tag Manager, and advertising platform reporting.
Experience working with marketing automation and CRM platforms such as HubSpot and Salesforce.
Understanding of the B2B SaaS buyer journey, lead generation, attribution, and pipeline development.
Experience developing and executing A/B tests to improve advertising performance, landing page conversions, and campaign effectiveness.
Strong analytical skills with the ability to identify trends, diagnose performance issues, and translate data into actionable recommendations.
Comfortable managing campaigns independently, balancing strategic planning with hands-on execution.
Strong organizational and project management skills with the ability to manage multiple campaigns, budgets, and competing priorities.
Collaborative mindset and experience partnering with Sales, Revenue Operations, Product Marketing, and Content teams.
Curiosity and willingness to experiment with new advertising channels, emerging technologies, and AI-powered marketing tools.
Clear communication skills with the ability to explain campaign performance and recommendations to stakeholders across the organization.
What Success Looks Like
Success in this role isn't measured simply by how much advertising we run or how many leads we generate. It's about building an efficient, scalable performance marketing program that consistently turns marketing investments into meaningful business results.
You'll be successful when you're:
Generating a consistent flow of qualified leads and pipeline through paid marketing channels.
Improving campaign efficiency by reducing acquisition costs and increasing conversion rates.
Demonstrating clear ROI and pipeline contribution from marketing investments.
Building scalable, repeatable paid media programs that support Osano's growth goals.
Using testing, experimentation, and analytics to continuously improve campaign performance.
Providing clear visibility into marketing spend, channel effectiveness, and business outcomes.
Identifying new opportunities to reach high-value audiences and expand our digital marketing presence.
Who You Are
You're a data-driven marketer who loves turning insights into action. You enjoy digging into campaign performance, identifying opportunities, testing new approaches, and seeing the measurable impact of your work.
You're equally comfortable developing a performance marketing strategy and rolling up your sleeves to execute it. You know your way around advertising platforms, understand what drives conversions, and aren't afraid to experiment when something isn't working.
You understand that successful performance marketing isn't about generating the most clicks or leads. It's about reaching the right audiences, creating meaningful engagement, and turning marketing investment into qualified pipeline and revenue.
Most importantly, you're someone who takes ownership. You don't need a large team or agency to execute your ideas. You're energized by building, optimizing, collaborating, and finding
Why Us
A well-defined career path that’s not just “climbing the ladder” - learn different competencies, skills, and concepts as you progress and get recognized for it.
Supportive leadership and peers - from sales engineering and product marketing to sales development and demand generation - you’re never in this alone.
You’ll be stepping into a space that’s on fire – the privacy and regulatory landscape is only growing with a ton of opportunity in front of us.
You’ll become a privacy expert, including the opportunity to receive your Certified Information Privacy credential.
You’ll be representing a product that makes prospects say, “This is so awesome” when you demo it.
Benefits
Competitive compensation + ownership interest for an early stake in our success!
Unlimited paid time off with a requirement to take at least two weeks off per year.
We're continuously a Best Place for Working Parents and offer paid parental leave for all new parents + believe that family, however you define it, comes first.
Osano sponsors individual premiums for base plans at 100% and dependent premiums at 50% for Medical, Dental, and Vision Insurance via Aetna.
A fully, permanently remote company so you can work from anywhere in the U.S.
Receive a MacBook + $600 to craft your home workspace
Annual company trip designed to foster connection, creativity, and fun together!
Mental health benefits with free memberships to mindfulness + talk therapy services
A Bit More About Osano
Osano is a leading data privacy platform that helps organizations quickly and confidently comply with laws like GDPR, CCPA, and other global privacy regulations. From consent management to vendor risk monitoring, Osano makes complex privacy tasks refreshingly simple, so companies can focus on what they do best, while we handle the rest.
We’re backed by top-tier investors including Baird Capital, Jump Capital, and LiveOak, and we’re scaling fast with a multi-year runway and ambitious growth plans. We’ve also been recognized as a Great Place to Work for four years running, with 97% of employees saying Osano is a great place to work.
As we grow, we're looking for individuals who lean into modern technologies and smarter systems to drive efficiency, clarity, and speed; both in our product and in how we operate. If you're excited by the idea of helping build a high-growth, privacy-first company that embraces thoughtful automation, emerging tech, and intentional collaboration, we’d love to hear from you.
Osano is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, genetic information, disability, veteran status, or any other characteristic protected by applicable law.
Location: Berlin; Poland; Portugal; France; United Kingdom; Spain; Germany; Italy; Israel; The Netherlands; Switzerland
Workplace: Remote
ABOUT THE TEAM
The Integrations Ecosystem org builds the drivers, SDKs, connectors and BI integrations that make ClickHouse feel native in any stack. The Language Clients team maintains the official clients for Python, JavaScript, Java, Go, Rust, C++ and C#, plus the ODBC, JDBC and ADBC drivers. We're small, senior and remote across North America and EMEA.
THE ROLE
We're looking for a product-minded engineer to own the ClickHouse .NET client. You'll decide what the client should do by talking to the developers who use it, reading the issues and the telemetry, and listening to the community. Then you'll build it, with deep .NET expertise, and measure whether it worked. Your scope is the SDK and what builds on it: ADO.NET http://ADO.NET, Dapper and Entity Framework Core users, and the tools and integrations that depend on your client.
WHAT YOU'LL DO
- Know who uses the client and what they're trying to do. Define what good looks like (time to first query, error clarity, adoption by key integrations), measure it, and let that drive the roadmap.
- Be the voice of ClickHouse for .NET developers. Speak at .NET conferences and meet-ups, and write the posts, tutorials and samples that developers and AI assistants find when they search for how to use ClickHouse from .NET (SEO and GEO). Answer questions where the community asks them.
- Own the .NET client and its ecosystem: the client, the EF Core provider and ORM integrations, NuGet releases and support. Evolve it without breaking the people who depend on it.
- Review and co-maintain other clients, and take part in cross-client decisions on types, errors and protocol features.
- Bring what .NET and Windows users need to the ODBC driver, since that's how many Windows and BI tools reach ClickHouse. If you write C++, contribute to it directly.
- Bring written proposals about where we invest next. You set direction rather than wait for it.
- Make the client enterprise-ready: TLS and certificate handling, authentication including Microsoft Entra ID, safe credential handling, signed and reproducible packages, and the audit and compliance questions large .NET shops ask before they adopt.
- Shape the client for agents as users: an API, docs and error messages an AI coding agent can use correctly on the first try.
- Extend our AI development platform, with new workflows for maintaining the clients: consistency checks across languages, issue triage, release checks.
ABOUT YOU
- Product-minded. You decide what to build from user evidence, measure whether it worked, and can explain what you chose not to build.
- 5+ years in software, much of it on data-intensive systems: drivers, SDKs, data access, ingestion or analytics.
- Deep C# and .NET expertise: memory management, async and the TPL, Span and pooling, profiling and benchmarking. You reason about throughput and latency down to allocations and bytes on the wire, and you prove it with tests and benchmarks.
- Fluent in C#, and productive in at least one more of our client languages (Python, JavaScript, Java, Go, Rust, C++). You'll review and co-own across clients, not only .NET.
- You've built or substantially extended a library other engineers depend on, and shipped NuGet packages across .NET Framework and modern .NET. You treat breaking changes accordingly.
- Fluent in .NET data access (ADO.NET http://ADO.NET, Dapper, EF Core) and at home in the wider .NET ecosystem: ASP.NET http://ASP.NET Core, Aspire, NuGet.
- Security-minded. You've shipped a library into enterprise environments and know what security, compliance and procurement teams look for in a dependency.
- Enthusiastic about working in public. You've given talks or written technical content, or you're keen to, and you see it as part of the job rather than a distraction from it.
- Thoughtful use of AI development tools, with the judgment to review what comes out.
- Clear writing. Most coordination happens in design docs, PRs and RFCs.
NICE TO HAVE
- ClickHouse, especially its type system, or another OLAP engine.
- C++ and ODBC driver internals.
- Building or maintaining an ADO.NET http://ADO.NET or EF Core provider.
- Open-source contributions to .NET or data infrastructure.
- Experience designing SDKs, docs or error messages with AI coding agents as the consumer.
- Protocol or wire-format work on a database driver or network client.
LEARN MORE
- Introducing the (blazing fast!) native TCP client for .NET https://clickhouse.com/blog/introducing-the-blazing-fast-native-tcp-client-for-net: zero-copy columnar reads, 1.5 to 2x faster than HTTP, over 99% fewer GC allocations (Oct 2026)
- What's new in the ClickHouse .NET Driver: the road from 1.0 to 1.3 https://clickhouse.com/blog/whats-new-clickhouse-net-driver-10-to-13 (Aug 2026)
- Meet GroeneAI: our autonomous contributor to ClickHouse https://clickhouse.com/blog/meet-groeneai-our-autonomous-contributor-to-clickhouse (Oct 2026)
- Building a .NET API Gateway with ClickHouse and Aspire https://clickhouse.com/blog/dotnet-api-gateway-aspire (Jun 2026)
- The .NET client on GitHub https://github.com/ClickHouse/clickhouse-cs and its documentation https://clickhouse.com/docs/integrations/csharp
- ClickHouse Workload for Microsoft Fabric, now in public preview https://clickhouse.com/blog/clickhouse-for-microsoft-fabric (Sep 2026)
PERKS
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new eligible team member who joins our company receives equity.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- A USD$500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
CULTURE - WE ALL SHAPE IT
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse.
EQUAL OPPORTUNITY & PRIVACY
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.
Location: Kuala Lumpur, Malaysia
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Key Responsibilities
Cloud Security Architecture and Hardening
Design, implement, and continuously strengthen security architectures across public cloud environments, including AWS, Tencent Cloud, Huawei Cloud, and Alibaba Cloud. Areas of focus include container isolation, Identity and Access Management (IAM), VPC network segmentation, and security policies.
Security Operations and Incident Response
Build and continuously improve cloud security monitoring and operations capabilities, including Security Information and Event Management (SIEM) and Cloud Security Posture Management (CSPM). Detect, investigate, and respond to security incidents, conduct root cause analysis and post-incident reviews, and drive remediation through to closure.
Infrastructure Security and Vulnerability Management
Assess and harden cloud compute instances, containers, cloud services, and supporting infrastructure. Develop and enhance host and cloud vulnerability scanning capabilities, and track remediation to completion.
Identity and Access Management
Design and maintain cloud IAM and Cloud Access Management (CAM) permission frameworks. Establish lifecycle management policies for credentials, including access keys and secret keys (AK/SK), API keys, and access tokens. Enforce least-privilege access and conduct periodic access reviews.
Compliance and Risk Management
Conduct regular security baseline assessments and risk assessments across cloud environments. Produce security compliance reports against industry standards such as CIS Benchmarks, and support internal and external security audits, compliance reviews, and remediation activities.
Security Standards and Technical Enablement
Develop and maintain cloud security policies, technical standards, and best-practice documentation. Provide security guidance, technical support, and training to engineering and operations teams to strengthen the organization’s overall cloud security capabilities.
Qualifications
A solid foundation in Linux systems administration, with a strong understanding of networking protocols such as TCP/IP, DNS, and TLS, as well as common network security principles.
Familiarity with major public cloud platforms, including AWS, Tencent Cloud, and Alibaba Cloud, with hands-on experience in cloud resource management, security configuration, or operations.
An understanding of cloud-native technologies and their security models, with familiarity with Docker, Kubernetes, microservices, serverless architectures, and associated security practices.
Familiarity with public cloud IAM/CAM frameworks, with practical experience in permission model design, account governance, key management, or least-privilege implementation.
An understanding of common cloud security threats and attack paths, including lateral movement, privilege escalation, server-side request forgery (SSRF), and abuse of the Instance Metadata Service (IMDS).
Experience in vulnerability scanning, risk assessment, or security tool integration. Hands-on experience deploying, integrating, and operating Tenable, Orca, or comparable solutions is preferred.
Experience managing north–south and east–west traffic, reducing exposed network boundaries, or designing and implementing zero-trust network architectures is preferred.
Strong security risk awareness, analytical and problem-solving skills, and effective communication and collaboration abilities, with a demonstrated ability to drive cross-functional security initiatives and remediation efforts to completion.
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Location: Cluj-Napoca, Romania; Bucharest, Romania; Bucuresti, Romania; Belgrade, Serbia; Chișinău, Moldova, Republic of; Tiraspol, Moldova, Republic of; Sofia, Bulgaria; Erevan, Armenia; Almaty, Kazakhstan; Astana, Kazakhstan; Budapest, Hungary; Miskolc, Hungary; Bryanston, South Africa; Cape Town, South Africa; Johannesburg, South Africa; Aya Napa, Cyprus; Larnaca, Cyprus; Limassol, Cyprus; Nicosia, Cyprus; Paphos, Cyprus; Paralimni, Cyprus; Amman, Jordan; Alexandria, Egypt; Cairo, Egypt; Lebanon; Dnipro, Ukraine; Kharkiv, Ukraine; Kyiv, Ukraine; Lviv, Ukraine; Sambir, Ukraine; Odesa, Ukraine; Berat, Albania; Batumi, Georgia; Cebu City, Philippines; Ljubljana, Slovenia; Manila, Philippines; Sarajevo, Bosnia and Herzegovina; Singapore; Skopje, North Macedonia; Banská Bystrica, Slovakia; Tbilisi, Georgia; Zagreb, Croatia; Davao City, Philippines; Iloilo City, Philippines; Makati, Philippines; Quezon City, Philippines; Taguig, Philippines; Ahmedabad, India; Pondicherry, India; Delhi, India; Fatorda, India; Hyderabad, India; Bangalore, India; Jakarta, Indonesia; Mumbai, India; Sahibzada Ajit Singh Nagar (Mohali), India; Kuala Lumpur, Malaysia; Bangkok, Thailand; Ho Chi Minh, Vietnam
Workplace: remote
At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a
Detection & Response Engineer
to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.
Key Responsibilities:
Investigate security cases and targeted hunts using CrowdStrike Falcon Next-Gen SIEM and CQL; correlate telemetry, assess scope and impact, document findings, and recommend appropriate actions.
Develop, test, deploy, tune, and maintain detection logic, queries, dashboards, analyst guides, and version-controlled detection content.
Build and maintain Falcon Fusion SOAR workflows for enrichment, evidence capture, routing, escalation, and authorized response.
Validate telemetry coverage and quality; troubleshoot parsing, normalization, mapping, and source-data issues.
Translate validated investigations into platform workflow specifications and co-build scripts, API integrations, workflow components, and prototypes with Product and Engineering.
Test workflows and detections against representative cases; monitor outcomes, exceptions, and production feedback, and document ownership and support handoffs.
Provide technical support, troubleshooting, knowledge transfer, and coaching; coordinate assigned analysis and platform work.
Must have:
5+ years of relevant security experience, including at least 2 years developing, testing, and tuning detection logic, or equivalent demonstrated capability.
Production proficiency with CrowdStrike Falcon Next-Gen SIEM, including CQL, cross-source investigations, detection content, telemetry interpretation, and tuning.
Hands-on Falcon Fusion SOAR workflow experience and practical use of Charlotte AI with evidence verification and awareness of approval boundaries.
Practical Python, REST/Falcon APIs, JSON, authentication, error handling, and secure credential management; familiarity with PowerShell or another relevant scripting language.
Experience with telemetry onboarding, parser/normalization troubleshooting, MITRE ATT&CK, Windows/Linux events, and controlled changes, version control, peer review, and regression testing.
Strong investigation judgment, defensible documentation, communication, and cross-functional collaboration skills.
Nice to have:
Experience converting SOC runbooks or manual analysis into production workflows or internal security platforms.
CrowdStrike resident, responder, partner implementation, or customer-embedded Falcon experience; FalconPy or comparable API tooling.
Experience partnering with Product and Engineering on analyst-facing features, case lifecycle integration, acceptance testing, or iterative delivery.
Managed security services, multi-client or follow-the-sun SOC operations, and ITSM integrations such as ServiceNow or Jira.
Relevant CrowdStrike training or credentials, GIAC invest
Location: Bangalore, India
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Staff Software Engineer on GitLab's Authentication team, you'll be the technical lead for how every user, application, token, and automated agent proves who it is on GitLab.com, Self-Managed, and Dedicated.
We're an OAuth 2.0 and OpenID Connect (OIDC) provider for millions of users. We also accept identity from enterprise identity providers through Security Assertion Markup Language (SAML) and Lightweight Directory Access Protocol (LDAP). Behind that sit more than ten token types and several session methods that grew inside the Ruby on Rails monolith. You'll help us move this work onto GATE, GitLab's new authentication and authorization platform. GATE exchanges external credentials for short-lived tokens at the edge through a Secure Token Service written in Go.You'll set our technical direction, lead the hardest protocol and migration work yourself, and help senior engineers own the rest.
Our projects include:
OAuth across Cells:
Making OAuth clients, grants, and tokens work when users and organizations live in different cells
Global identities:
One user identity that works across organizations and cells
Token consolidation:
Reducing the number of token types and moving token issuance and validation out of the monolith
Identity for artificial intelligence (AI) agents and workloads:
OAuth for Model Context Protocol (MCP) clients, workload identity federation, and service identities with narrow scopes
What you'll do
Own the technical direction for authentication protocols at GitLab, including OAuth 2.0, OIDC, SAML, and token exchange, across the Rails monolith and GATE services.
Write and drive design documents and architecture decision records (ADRs) for multi-quarter work, then break that work into increments that ship behind feature flags.
Lead migrations that must not break existing customers: token formats, client and grant state, and session behavior on GitLab.com, Self-Managed, and Dedicated.
Be hands-on in the most complex parts of the code, in Ruby on Rails and Go, and review the designs and merge requests of other engineers.
Agree interface contracts with the GATE Core, GATE Infra, Authorization, and Tenant Scale (Cells and Organizations) teams, and keep them current as the architecture changes.
Treat authentication as a security and availability boundary: threat-model new flows, add rate limits and abuse controls, and lead the technical response to authentication incidents.
Mentor senior and intermediate engineers on the team and raise the protocol and security knowledge of the whole group.
Work asynchronously with engineers in India, Europe, and the Americas, with most decisions made in writing.
Take part in on-call or operational support where your team’s ownership model requires it.
What you'll bring
Significant experience building and running production authentication or identity systems at scale, with technical leadership across teams that moves unclear problems to written decisions and shipped code.
Deep, hands-on knowledge of OAuth 2.0 and OIDC: authorization code with Proof Key for Code Exchange (PKCE), refresh token rotation, token exchange, client registration, scopes, and JSON Web Tokens (JWTs) with signing keys and key rotation.
Working knowledge of SAML 2.0 single sign-on and enterprise identity integration (LDAP, System for Cross-domain Identity Management (SCIM), or similar).
Strong production experience in Ruby on Rails or Go, willingness to work in both, and experience with careful refactors, feature-flagged rollouts, and backward-compatible migrations in large, long-lived codebases.
A security mindset. You think about token theft, replay, revocation, and blast radius before you think about elegance.
Experience with multi-tenant software as a service (SaaS) systems, including data isolation and performance under high request volume.
Clear, concise written English and comfort working in an all-remote, asynchronous company.
Optional experience: authentication libraries (Doorkeeper, Devise, or OmniAuth), passkeys or multi-factor authentication, workload identity, gateways or policy engines, AI agent authentication, or multi-region architectures. Contributions to identity standards or open source identity projects are also welcome.
About the team
The Authentication group is part of the Security Platform stage, alongside Authorization, GATE Core, GATE Infra, Secrets Manager, and other security teams. We own sign-in, single sign-on, OAuth, and personal and service tokens. Our work touches every GitLab customer, and much of it is on the critical path for Cells and for GitLab's AI agent platform.
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: India
ubject Matter Expert - Infrastructure as Code & DevOps Automation
Position Summary
We seek an experienced IT Automation Specialist to lead infrastructure automation initiatives across our enterprise environment. As a subject matter expert, you will design, implement, and maintain scalable automation solutions using industry-leading tools including Terraform, OpenTofu, Ansible, AWX/Tower, and advanced DevOps platforms. This role combines hands-on technical expertise with strategic thinking to drive infrastructure modernization and operational efficiency.
Key Responsibilities
Design and implement Infrastructure as Code (IaC) solutions using Terraform and OpenTofu for cloud and on-premises infrastructure provisioning
Develop and maintain Ansible playbooks and roles for configuration management, application deployment, and system patching across heterogeneous environments
Architect and optimize Ansible Tower/AWX implementations for enterprise-scale automation, including RBAC, credential management, and workflow orchestration
Lead adoption of agentic AI capabilities to automate decision-making processes and reduce manual operational overhead
Establish the best automation practices, standards, and frameworks; conduct code reviews for infrastructure automation projects
Troubleshoot and resolve complex automation issues; provide technical documentation for knowledge transfer to other teams
Integrate automation solutions with CI/CD pipelines, monitoring systems, and ticketing platforms
Document technical architecture, runbooks, and operational procedures for all automation systems
Evaluate and recommend new automation tools and technologies that improve efficiency and reduce operational risk
Collaborate with cross-functional teams (Cloud, Infrastructure, Security) to embed automation across IT operations
Requirements
Required Qualifications
5+ years of IT infrastructure and systems administration experience
Expert-level proficiency with Terraform and/or OpenTofu; demonstrated ability to manage complex infrastructure states
Advanced expertise in Ansible; proven experience in designing and maintaining Ansible Tower or AWX in production environments
Strong Python programming skills; ability to write custom modules, plugins, and automation scripts
Deep understanding of DevOps principles, CI/CD pipelines, and infrastructure-as-code best practices
Experience with public cloud platforms (Azure, GCP) and hybrid/on-premises infrastructure
Knowledge of version control systems (Git) and collaborative development workflows
Strong troubleshooting and problem-solving abilities with demonstrated experience resolving production incidents
Excellent communication skills; ability to translate complex technical concepts for non-technical stakeholders
Bachelor's degree in Computer Science, Information Technology, or equivalent professional experience
Preferred Qualifications
Hands-on experience implementing and managing agentic AI solutions for IT operations automation
Experience with advanced Ansible Tower features (workflows, dynamic inventory, LDAP/SAML integration)
Familiarity with configuration management databases (CMDB) and ServiceNow integrations
Knowledge of GitOps methodologies and tools (ArgoCD, Flux)
Certifications such as HashiCorp Certified Terraform Associate, Ansible Specialist, or equivalent cloud/infrastructure certifications
Open-source project contributions or demonstrated thought leadership in the infrastructure automation community
Technical Skills Matrix
IaC: Terraform, OpenTofu, CloudFormation | Expert
Config Management: Ansible, Ansible Tower, AWX | Expert
Agentic AI: LLM orchestration, AI-driven automation, prompt engineering | Intermediate+
Languages: Python, Bash, Go, HCL, PowerShell | Advanced
Cloud: AWS, Azure, GCP, hybrid infrastructure | Advanced
Languages: Python, Bash, Go, HCL, PowerShell | Advanced
Why This Role Matters
Automation is at the heart of our IT modernization strategy. In this role, you'll drive repeatability, reduce manual toil, and enable self-service capabilities across our infrastructure. You'll work with cutting-edge technologies including emerging agentic AI solutions, and your expertise will directly impact how efficiently we deliver infrastructure services to our clients.
Equal Opportunity Statement
We are an equal opportunity employer committed to fostering an inclusive, supportive workplace free from discrimination. We celebrate diversity and are dedicated to creating an environment where all employees feel valued and respected
Location: Brazil; Argentina; Colombia; Mexico; Chile; Costa Rica
Subject Matter Expert - Infrastructure as Code & DevOps Automation
Position Summary
We seek an experienced IT Automation Specialist to lead infrastructure automation initiatives across our enterprise environment. As a subject matter expert, you will design, implement, and maintain scalable automation solutions using industry-leading tools including Terraform, OpenTofu, Ansible, AWX/Tower, and advanced DevOps platforms. This role combines hands-on technical expertise with strategic thinking to drive infrastructure modernization and operational efficiency.
Key Responsibilities
Design and implement Infrastructure as Code (IaC) solutions using Terraform and OpenTofu for cloud and on-premises infrastructure provisioning
Develop and maintain Ansible playbooks and roles for configuration management, application deployment, and system patching across heterogeneous environments
Architect and optimize Ansible Tower/AWX implementations for enterprise-scale automation, including RBAC, credential management, and workflow orchestration
Lead adoption of agentic AI capabilities to automate decision-making processes and reduce manual operational overhead
Establish the best automation practices, standards, and frameworks; conduct code reviews for infrastructure automation projects
Troubleshoot and resolve complex automation issues; provide technical documentation for knowledge transfer to other teams
Integrate automation solutions with CI/CD pipelines, monitoring systems, and ticketing platforms
Document technical architecture, runbooks, and operational procedures for all automation systems
Evaluate and recommend new automation tools and technologies that improve efficiency and reduce operational risk
Collaborate with cross-functional teams (Cloud, Infrastructure, Security) to embed automation across IT operations
Requirements
Required Qualifications
5+ years of IT infrastructure and systems administration experience
Expert-level proficiency with Terraform and/or OpenTofu; demonstrated ability to manage complex infrastructure states
Advanced expertise in Ansible; proven experience in designing and maintaining Ansible Tower or AWX in production environments
Strong Python programming skills; ability to write custom modules, plugins, and automation scripts
Deep understanding of DevOps principles, CI/CD pipelines, and infrastructure-as-code best practices
Experience with public cloud platforms (Azure, GCP) and hybrid/on-premises infrastructure
Knowledge of version control systems (Git) and collaborative development workflows
Strong troubleshooting and problem-solving abilities with demonstrated experience resolving production incidents
Excellent communication skills; ability to translate complex technical concepts for non-technical stakeholders
Bachelor's degree in Computer Science, Information Technology, or equivalent professional experience
Preferred Qualifications
Hands-on experience implementing and managing agentic AI solutions for IT operations automation
Experience with advanced Ansible Tower features (workflows, dynamic inventory, LDAP/SAML integration)
Familiarity with configuration management databases (CMDB) and ServiceNow integrations
Knowledge of GitOps methodologies and tools (ArgoCD, Flux)
Certifications such as HashiCorp Certified Terraform Associate, Ansible Specialist, or equivalent cloud/infrastructure certifications
Open-source project contributions or demonstrated thought leadership in the infrastructure automation community
Technical Skills Matrix
IaC: Terraform, OpenTofu, CloudFormation | Expert
Config Management: Ansible, Ansible Tower, AWX | Expert
Agentic AI: LLM orchestration, AI-driven automation, prompt engineering | Intermediate+
Languages: Python, Bash, Go, HCL, PowerShell | Advanced
Cloud: AWS, Azure, GCP, hybrid infrastructure | Advanced
Languages: Python, Bash, Go, HCL, PowerShell | Advanced
Why This Role Matters
Automation is at the heart of our IT modernization strategy. In this role, you'll drive repeatability, reduce manual toil, and enable self-service capabilities across our infrastructure. You'll work with cutting-edge technologies including emerging agentic AI solutions, and your expertise will directly impact how efficiently we deliver infrastructure services to our clients.
Equal Opportunity Statement
We are an equal opportunity employer committed to fostering an inclusive, supportive workplace free from discrimination. We celebrate diversity and are dedicated to creating an environment where all employees feel valued and respected
УдалённоseniorParis, Remote
Yerevan, Armenia
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.