Вакансии

Заказчик — крупный российский ритейлер. Проект связан с масштабной миграцией инфраструктуры и приложений в Yandex Cloud: перенос Kubernetes-приложений со старых версий Kubernetes, миграция виртуальных машин и баз данных, а также перевод CI/CD-процессов с Bamboo на GitLab CI. Работа ведётся в команде заказчика под руководством проектного менеджера. Обязательные требования — Не менее 3 лет коммерческого опыта в направлениях DevOps, SRE или Platform Engineering. — Практический опыт работы с сервисами Yandex Cloud: Compute Cloud, VPC, Managed Service for Kubernetes, Object Storage, а также с managed-сервисами баз данных. — Уверенное владение Kubernetes и Helm. — Опыт адаптации приложений — перенос решений со старых версий Kubernetes на актуальные. — Навыки работы с Terraform либо OpenTofu, в том числе с готовыми IaC-модулями. — Знание особенностей устаревания (deprecation) API Kubernetes, включая типовые сложности при миграции с Kubernetes 1.11. — Опыт разработки и поддержки CI/CD-пайплайнов в GitLab. — Опыт переноса CI/CD-процессов из Bamboo или схожих систем. — Практические навыки Linux-администрирования, настройки виртуальных машин и сетевых параметров. — Опыт миграции баз данных — в частности, PostgreSQL, MySQL либо других СУБД, задействованных в проекте. — Способность следовать установленным шаблонам и инженерным стандартам, а также фиксировать изменения в документации. — Готовность к работе в команде заказчика под руководством проектного менеджера. Дополнительные требования — Практический опыт работы с Yandex Managed Service для PostgreSQL, MySQL, Redis и Kafka. — Навыки применения GitOps-инструментов Argo CD, FluxCD. — Опыт использования Container Registry. — Владение Helmfile и Kustomize. — Опыт переноса legacy-приложений и миграции устаревших Kubernetes-кластеров. — Участие в крупных миграционных проектах с параллельными потоками работ. Задачи на проекте Подготовка к миграции — Изучение существующих шаблонов развёртывания: Terraform-модулей, Kubernetes-манифестов, Helm-чартов, GitLab CI-шаблонов и эксплуатационных инструкций. — Техническая инвентаризация переносимого приложения или компонента: контейнеры, зависимости, конфигурация, секреты, хранилища, БД, сетевые взаимодействия. — Оценка технической готовности компонентов к переносу и выявление отклонений от типовых шаблонов. — Согласование выявленных технических блокеров и нестандартных решений с представителями заказчика. Миграция Kubernetes-приложений — Подготовка приложений, работающих в Kubernetes 1.11, к развёртыванию в целевом Kubernetes-кластере Yandex Cloud. — Адаптация манифестов, Helm-чартов и иных deployment-конфигураций под актуальную версию Kubernetes и принятые на проекте шаблоны. — Устранение использования устаревших Kubernetes API и несовместимых параметров конфигурации. — Настройка параметров приложений: ConfigMap, Secret, Ingress, Service, PersistentVolumeClaim, resource limits/requests, probes и других необходимых сущностей. — Выполнение развёртывания и технической проверки работоспособности в согласованных окружениях. — Подготовка технических процедур отката в рамках принятого процесса релизов. — Переключение сервисов в новое окружение. Перенос ВМ и сервисных компонентов — Перенос прикладных компонентов с on-premise ВМ в Yandex Cloud с использованием существующих шаблонов и подходов проекта. — Развёртывание и настройка целевых ВМ, если компонент не переводится в managed-сервис. — Перенос баз данных и сервисных компонентов в определённые заказчиком managed-сервисы Yandex Cloud либо на целевые ВМ. — Миграция данных по утверждённой процедуре. — Техническая валидация: доступность сервиса, сетевые соединения, корректность конфигурации, целостность данных и запуск приложений. Трансформация с Bamboo на GitLab CI — Анализ действующих Bamboo-планов конкретных переносимых приложений. — Перенос логики сборки, тестирования, упаковки и деплоя в GitLab CI. — Использование существующих на проекте GitLab CI-шаблонов и общих компонентов пайплайнов. — Настройка передачи артефактов, кэширования, переменных окружения и правил запуска jobs в соответствии с принятыми стандартами проекта. — Настройка деплоя в согласованные окружения и механизма отката, предусмотренного действующим процессом. — Проверка пайплайнов на тестовом и целевом окружениях. Документирование и передача результатов — Ведение технической документации по каждому перенесённому компоненту. — Фиксация отклонений от шаблонных решений, принятых workaround'ов и известных ограничений. — Подготовка инструкций по запуску миграции, валидации, деплою и откату. — Участие в технических статус-встречах, предоставление актуального статуса и информации о блокерах проектному менеджеру заказчика.

Location: United States WHAT YOU’LL DO • Utilize first principle methods and design tools to develop new aircraft products • Own development of primary and secondary aircraft structural parts and assemblies (metallic and composite) from preliminary design through prototype manufacturing • Perform complex modeling and finite element analysis at the detailed component level, major assembly level, and aircraft level (analysis simulations to include strength, buckling, damage tolerance, and delamination) • Apply design for manufacturing concepts to create solutions that are cost effective and easy to manufacture at rate • Conduct trade studies and perform design and analysis research of complex engineering concepts to determine an optimal solution for weight, performance, manufacturability, cost, and/or schedule • Collaborate in a multidisciplinary environment to solve complex, open-ended problems with an emphasis on schedule and cost objectives • Coordinate work with mechanical systems, systems integration, aerodynamics, manufacturing, project engineering, and other team members • Onsite engineering support at manufacturing and integration sites REQUIRED QUALIFICATIONS • Bachelor's in Aerospace Engineering, Mechanical Engineering, or equivalent experience • 5+ years of experience in aerospace structures design, analysis, or related roles • Proficiency in CAD software and experience with engineering data analysis • Proven expertise in structural modeling and simulation tools (e.g., ANSYS, NASTRAN, or equivalent) • Strong understanding of material properties, stress analysis, fatigue assessment, load paths, design practices, and hand calculations • Strong technical knowledge in core engineering principles, fundamental mechanics of composite materials, design, analysis, testing, and fabrication • Excellent problem-solving and communication skills • Self-driven with a strong sense of autonomy and adaptability in a dynamic environment • Eligible to obtain and maintain an active U.S. Secret security clearance QUALIFICATIONS • Experience with clean sheet aircraft configuration • Siemens NX proficiency • FEMAP proficiency • Experience with fast paced prototype design and manufacture of uncrewed aircraft • Experience with high temperature materials selection • Broad experience across a range of aircraft programs • Hands-on experience with manufacturing • Practical aircraft knowledge (pilots license, A&P, etc.)

Location: Remote, Global Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth. We are seeking a platform engineer to join our Edge & Networking squad. This team owns everything that happens at the network perimeter: API gateway, routing, load balancing, DNS, and secure global traffic distribution. You'll design, build, and operate systems that are both robust and highly automated — enabling us to to scale reliably while maintaining low latency and high availability across our global infrastructure. You will work closely with other infrastructure and product teams to ensure seamless integration, observability, and performance of our edge services. WHAT YOU’LL BE RESPONSIBLE FOR: - Help build and maintain the Supabase Cloud offering; - Design and implement Supabase’s global edge router platform; - Build programmable, API-driven routing logic to dynamically steer customer traffic; - Work with DNS, WAF, IP networking, TLS termination, CDN integrations, and global load balancing; - Implement advanced observability: relevant metric and log capturing, latency measurements, traffic shaping, routing health, and failure mitigation. - Optimize routing performance to minimize latency and improve reliability across cloud regions. - Collaborate cross-functionally with other teams to integrate networking solutions into the entire Supabase stack; - Improve our system architecture to reduce costs while balancing security, reliability, and performance; - Design CI/CD systems to speed up deployments with proper change and release management processes; - Participate in on-call rotations, incident response, and post-incident reviews for edge-related issues; - Resolve escalated support issues, while also identifying and resolving systemic issues across the platform. YOU MIGHT BE A FIT IF YOU HAVE: - 5+ years experience in SRE/DevOps/Cloud Infrastructure; - 4+ years experience building and operating high-scale networking or edge infrastructure; - Strong experience with HTTP, TCP/IP, TLS certificate management, CDN internals, load balancing, and global routing; - Proficiency with traffic proxies / routers (e.g., Envoy, NGINX, HAProxy, Traefik, or building your own); - Experience designing systems for high availability, failover, and real-time observability; - Strong software engineering skills (Go); - Strong debugging and troubleshooting skills across distributed systems; - Knowledge of IPv6, BGP, Anycast, or advanced routing protocols; - Experience in managing large deployments on AWS, GCP, Azure, or similar; - Comfortable with cloud networking primitives (AWS, GCP, Azure, or similar); - Experience with Infrastructure as Code tools (Pulumi preferred, Terraform/CDK etc also acceptable); - Experience with being part of on-call rotations for large production systems. WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.

Location: New York City Office Workplace: OnSite Company Description Today, when you go to your doctor and get referred to a specialist, your doctor sends out a referral and tells you, “They’ll be in touch soon.” So you wait. And wait. Sometimes days, weeks, or even months. Why? Because too often providers are overwhelmed with the painstakingly tedious work required to get paid by insurance companies. Powered by proprietary models, Tennr handles the complex paperwork that gets patients through the door and providers paid, helping operators get patients the right care, at the right time, in the right setting. Role Description You’ll join Tennr’s Infrastructure team as a Site Reliability Engineer, focused on the systems that keep us reliable, observable, and secure. This is a hands-on role with real room to grow: you’ll roll out our on-call tooling, wire observability into the product, and own the lifecycle of the credentials, certificates, and keys that protect patient data. It’s a great fit for someone a few years into their career who wants to grow into deep SRE ownership — with strong mentorship, real problems to solve from day one, and a direct line to the reliability and security of a platform that handles PHI. Responsibilities - Continue the PagerDuty rollout across engineering teams, helping them define escalation policies, schedules, and runbooks so on-call is calm and clear. - Build in-app Datadog instrumentation — metrics, traces, and alerts — working from the observability standards Infrastructure sets. - Manage credential storage and rotation across our environments. - Manage certificate issuance, renewal, and rotation. - Manage encryption key lifecycle and rotation, keeping PHI protected end to end. Candidate Qualifications - 2–4 years in SRE, infrastructure, systems, or a strong adjacent engineering background. - Familiarity with PagerDuty or a comparable on-call and incident-response tool. - Hands-on with Datadog or another observability platform, or eager to go deep on it. - Working understanding of secrets, certificate, and key management (e.g. AWS Secrets Manager / KMS / ACM, HashiCorp Vault). - Careful and methodical with anything touching security and rotation — you sweat the details. - Eager to grow into broader SRE ownership, and energized by working in a regulated healthcare (HIPAA / PHI) environment. Why Tennr? - Drive Impact: one of our company values is Cowboy, meaning you set the pace. You won’t just talk about things, you’ll get them done. And feel the impact. - Develop Operational Expertise: learn the inner workings of scaling systems, tools, and infrastructure. - Innovate with Purpose: we’re not just doing this for fun (although we do have a lot of fun). At Tennr, you’ll join a high-caliber team maniacally focused on reducing patient delays across the U.S. healthcare system. - Build Relationships: collaborate and connect with like-minded, driven individuals in our Hudson Square office 4 days/week. - Free lunch! Plus a pantry full of snacks. Benefits - Beautiful new office at 345 Hudson Street - Unlimited PTO - 100% paid employee health benefit options - Employer-funded 401(k) match - Competitive parental leave

Location: Remote, Global ABOUT SUPABASE Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth. ABOUT THE ROLE We're looking for an Engineering Manager to lead the Billing team at Supabase. Billing owns the monetization and revenue systems that turn platform usage into accurate customer charges and finance-ready revenue data. The team’s scope includes plans, subscriptions, usage-based billing, invoices, payments, credits, coupons, taxation, dunning, collections, pricing mechanics, entitlements, marketplace and partner billing paths, and integrations with providers such as Stripe and Orb. Billing sits at the intersection of engineering, product, finance, data, support, and partnerships. The systems are revenue-critical and trust-critical: they must remain correct, predictable, supportable, observable, and extensible as Supabase grows and introduces new products, pricing models, and partner channels. This is a people, delivery, and technical leadership role. We don’t expect managers to contribute production code directly, but we do expect you to participate in architecture and design discussions, challenge plans with sound technical reasoning, and set a high bar for correctness, reliability, and operational maturity. WHAT YOU'LL BE RESPONSIBLE FOR Team & People - Build a healthy, high-trust team culture in a remote-first, globally distributed environment. - Run 1:1s, performance management, career development, and onboarding for your direct reports. - Coach engineers working across backend application code, data pipelines, external integrations, and operational workflows. - Build durable ownership across the team so critical billing knowledge, access, and incident response do not depend on one person. - Handle people administration, including leave and time off, for your team. Hiring - Own the hiring plan for the Billing team and act as Hiring Manager and first-round interviewer for roles on the team. - Partner with Talent Acquisition to source, interview, and close strong candidates with the right mix of billing-domain depth and engineering judgment. - Contribute to headcount planning, org design, and the evolution of engineering leadership at Supabase. Delivery, Roadmap & Partnerships - Own the Billing roadmap and project management in Linear, driving accountability, clear milestones, and predictable delivery. - Balance new pricing and product capabilities with investments in system correctness, resilience, supportability, and technical debt. - Manage workflow intake and Slack triage, deciding what should be routed, prioritized, sequenced, or pushed back on. - Own weekly updates and keep stakeholders aligned without creating unnecessary overhead. - Surface risks, dependencies, tradeoffs, and revenue or customer-impact concerns early and clearly to leadership. Incident Commander - Train as an Incident Commander and lead coordination, resolution, customer-impact assessment, and post-incident follow-up. - Lead blameless post-incident reviews. YOU MIGHT BE A GOOD FIT IF YOU - Have 5+ years of engineering background, with enough depth to be credible with engineers building complex systems. - Have 3+ years managing remote engineering teams. - Have managed a billing engineering team at a cloud, SaaS, or developer tools company. Experience with developer tools or databases is a strong preference, but we'll consider any sufficiently technical background where you can demonstrate the ability to ramp on a new domain. - Have managed remote, globally distributed teams that work asynchronously across disparate time zones. - Are technical enough to be credible with strong engineers, but genuinely passionate about people management. This is the work you want to do, not a track you're settling for. - Build psychological safety and a feedback culture: you give feedback often and in the moment, ask for it back, and create space for the team to do the same. - Operate as a multiplier. Focused on helping individuals achieve more than they could alone, not on being the best technical voice in the room. - Coach rather than direct. Remove blockers, connect people to context and resources, and trust your engineers to own how the work gets done. - Have a real track record of performance management and can speak to specific examples of difficult conversations and how you navigated them. - Are comfortable with ambiguity and capable of building structure where there isn't much. - Communicate clearly and write well. You're default async, default written, set context proactively, and surface risks early. - Are collaborative, low-ego, and adaptable. You thrive working with high-autonomy, senior ICs who have strong technical opinions and don't need to be the smartest person in the room. RELEVANT BILLING DOMAIN & TECHNICAL EXPERTISE You should bring experience across most of the following areas: - Subscription lifecycle and monetization mechanics: plans and packaging, billing cycles, upgrades and downgrades, proration, upfront and in-arrears charges, add-ons, credits, coupons, discounts, refunds, taxes, dunning, collections, disputes, and chargebacks. - Usage-based billing at scale: converting raw product and infrastructure telemetry into billable usage; defining meters and dimensions; applying quotas and pricing; handling late-arriving data; and supporting deterministic reruns, backfills, and reconciliation. - Payments and billing-provider integrations: production experience with Stripe, Orb, or comparable providers, including APIs, webhooks, invoice lifecycle, payment failures, event ingestion, sync engines, rate limits, provider SLAs, and graceful degradation during outages. - Entitlements and pricing enforcement: separating feature access from charging, managing plan defaults and customer-specific overrides, and designing auditable controls that keep product behaviour consistent with commercial agreements. - Cross-functional billing operations: working effectively with Finance, Data, Product, Support, Sales/RevOps, and Partnerships on revenue reporting, customer support, fraud and payment risk, marketplace billing, and new pricing launches. WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Professional Services Technical Architect, Security at GitLab, you'll lead the design and implementation of secure enterprise solutions for Professional Services clients across AMER. You'll assess complex security architectures, guide security tool and CI/CD migrations, including legacy tools such as Jenkins, and implement GitLab security capabilities to help customers meet compliance frameworks such as NIST 800-53, ISO 27001, and SOC 2. This role requires depth in secure reference architecture design across cloud security, identity management, vulnerability management, and deployment choices such as GitLab SaaS and Self-Managed, as well as the judgment to translate that depth for engineering and executive audiences. Working closely with Professional Services Engineers, Engagement Managers, and Program Managers, you'll provide technical leadership throughout the Professional Services engagement lifecycle, from pre-sales security scoping through delivery and enablement. What you'll do Design and lead secure GitLab solution implementations for Professional Services client engagements, including security risk assessments and threat modeling. Advise customers on GitLab SaaS, Self-Managed, and Dedicated architecture choices in light of their security and compliance requirements. Lead technical discovery to understand customer security, compliance, and infrastructure needs, and use that insight to guide implementation plans and deliverables. Lead migrations from legacy source code management and continuous integration and continuous delivery (CI/CD) tooling, including application security tools such as Snyk, Checkmarx, Veracode, SonarQube, and GitGuardian, to GitLab CI/CD and GitLab security scanners. Support Professional Services Engagement Managers with security-related statements of work (SOWs), sales scoping, and pre-sales planning. Coordinate security implementation work across cross-functional teams and share customer needs with GitLab Product teams to inform security features and roadmap decisions. Mentor Professional Services and partner consultants, and create security-focused delivery kits, documentation, training materials, case studies, and enablement sessions. Partner with Training, Support, Customer Success, and Professional Services Program Managers to plan and deliver engagements. What you'll bring Technical expertise Experience delivering secure enterprise architectures across application security, cloud security, secure cloud infrastructure, and DevSecOps practices. Experience migrating source code management and continuous integration and continuous delivery (CI/CD) platforms with security controls. Experience advising on GitLab SaaS, Self-Managed, and Dedicated deployment tradeoffs for security and compliance needs. Hands-on experience with configuration management and infrastructure as code tooling, including Ansible and Terraform. Experience integrating security controls into CI/CD pipelines. Deep knowledge of GitLab security scanning capabilities, including Advanced Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Dependency Scanning, Secret Detection, and Container Scanning. Experience migrating application security tooling, including Snyk, Checkmarx, Veracode, SonarQube, and GitGuardian, to GitLab Security Scanners. Experience planning and executing security tool migrations, mapping findings between platforms, managing dismissed and accepted risk findings, and building migration validation frameworks. Security and compliance Knowledge of security frameworks and standards, including ISO 27001, NIST 800-53, SOC 2, GDPR, and FedRAMP. Understanding of current security threats, including supply chain security, generative artificial intelligence (AI) and large language model (LLM) security risks, and zero-trust architecture. Working knowledge of the OWASP Top 10 for LLM Applications and how these risks apply to AI-assisted development tools such as GitLab Duo. Ability to communicate technical concepts, tradeoffs, and recommendations to technical and non-technical stakeholders. Ability to work independently and collaboratively in an all-remote, asynchronous environment. Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $164,880 — $277,560 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. We're hiring a Frontend Developer to join our Developer and AI user interface team, where you'll build the controls and workflows that give developers and security teams visibility over how machine workloads, CI/CD pipelines, and AI agents access credentials at runtime. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: - 2+ years of experience in frontend software development; strong TypeScript fundamentals and experience with React or a comparable component-based framework - Experience contributing to features end-to-end, from API contract through component implementation and unit tests - Experience building complex form flows, including multi-step wizards, validation, error states, and async operations with sequential API calls and robust failure handling - You care deeply about code quality and visual craft. You sweat the details, review work critically, and hold a high bar for what ships - Working knowledge of accessibility fundamentals including keyboard navigation, ARIA, and screen reader considerations - Familiarity with i18n workflows, including static string extraction and integration with a localization system - Comfortable working iteratively. That means managing ambiguity, communicating progress clearly, and coordinating with cross-functional teams throughout the development cycle Bonus points for: - Experience with Electron or other desktop-targeted web runtimes - Working knowledge of GraphQL — writing queries and mutations, managing fetch/refetch behavior with Apollo Client What you can expect: - Build UI for a developer-facing secrets management product, including CI/CD integrations, workload identity flows, and environment configuration - Contribute to the auth prompt and autofill experience that users interact with every day across desktop and web surfaces - Build new product surfaces including multi-step setup wizards, list/detail pages, and admin policy controls, implementing from Figma designs through to production-ready components - Ship features incrementally, working collaboratively from scoping through launch, with visibility controls and policy checks shaping what different users see - Follow established design system guidelines and contribute to component patterns, with component tests required alongside every feature as part of the PR process - Collaborate with product, design, and infrastructure partners throughout the full development lifecycle, from planning and estimation through launch and iteration - Review code and share knowledge with teammates, contributing to a team culture of high standards and constructive feedback - Contribute to and maintain documentation on code processes, systems, and decisions to support team knowledge and scalability - Participate in a rotating on-call schedule shared across the team USA-based roles only: The annual base salary for this role is between $123,000 USD and $172,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $111,000 CAD and $155,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: United States Mattermost is the leading collaborative workflow platform for defense, intelligence, security, and critical infrastructure. Trusted by the U.S. Department of War and Fortune 500s, our platform runs on-premises and in private clouds, delivering secure messaging, file sharing, workflow automation, audio/screenshare, and project management—all with full data and operational control. Mattermost powers high-stakes workflows across mission planning, real-time, real-world operations, DevSecOps, incident response, and cyber defense—enabling secure collaboration from tactical edge and DDIL environments to enterprise HQ. Teams operate across web, desktop, and mobile, with embedded interoperability for Microsoft Teams, Outlook, and Microsoft 365. To learn more, visit www.mattermost.com Mattermost is seeking a Senior Technical Account Manager (TAM) to serve as a trusted technical advisor to our U.S. Federal and enterprise customers . In this role, you will ensure the successful deployment, integration, and secure operation of the Mattermost platform in mission-critical and high-security environments . You will combine expertise in infrastructure, cybersecurity, and DevSecOps with strong customer engagement and project leadership skills. As a strategic partner, you will bridge engineering, product, and customer teams , driving secure, compliant, and scalable implementations that enable organizations to collaborate with confidence. An active U.S. government Secret or TS/SCI clearance is a significant advantage for this position. We also welcome technically strong candidates who meet the eligibility requirements to obtain a clearance. Key Responsibilities Own Technical Customer Success Serve as the primary technical advisor for strategic U.S. Federal and defense customers. Build trusted relationships with technical leaders, system administrators, security teams, and executive stakeholders. Drive successful onboarding, adoption, platform optimization, and long-term customer value. Develop technical success plans aligned with customer missions, operational requirements, and business objectives. Solve Complex Technical Challenges Guide customers through deployments, upgrades, integrations, and troubleshooting across on-premises, cloud, hybrid, and air-gapped environments. Work hands-on with Linux infrastructure, networking, containers, authentication systems, and deployment configurations. Troubleshoot complex technical issues, partnering with Engineering and Support to drive resolution. Help customers improve platform reliability, security, performance, and scalability. Bring a Forward-Deployed Engineering Mindset Work directly with customers, including on-site engagements when needed, to understand and address complex operational requirements. Translate customer challenges into practical technical solutions, configurations, integrations, or automation. Develop reusable scripts, technical playbooks, and deployment best practices. Operate independently in complex environments while collaborating closely with internal technical teams. Bring field insights and customer requirements back to Product and Engineering to influence platform improvements. Drive Adoption and Customer Value Identify opportunities to expand Mattermost adoption across teams, workflows, and mission-critical use cases. Conduct technical reviews, health assessments, and proactive optimization sessions. Help customers maximize their investment through platform integrations, workflow automation, and operational best practices. Required Qualifications Experience in a technical customer-facing role such as Technical Account Manager, Solutions Engineer, Customer Engineer, Technical Consultant, Support Engineer, or Forward Deployed Engineer. Strong hands-on technical experience with Linux, networking, infrastructure troubleshooting, and enterprise software deployments. Familiarity with containers, cloud infrastructure, or modern application deployment environments. Ability to diagnose complex technical problems and collaborate across teams to deliver solutions. Strong communication skills, including the ability to explain technical concepts to both engineering teams and business stakeholders. Experience supporting enterprise, government, defense, or other complex customer environments. A proactive, customer-focused mindset with a strong sense of ownership and accountability. Eligibility to obtain and maintain a U.S. government security clearance, along with the ability to meet applicable U.S. export-control requirements. What Will Set You Apart Security Clearance and Federal Experience Active Secret, Top Secret, or TS/SCI clearance — highly desirable and a significant advantage. Experience supporting DoD, Intelligence Community, federal civilian agencies, or defense contractors. Familiarity with secure or regulated environments, including FedRAMP, NIST 800-53, STIGs, and government security requirements. Forward-Deployed and Technical Engineering Experience Experience working directly within customer environments to deploy, integrate, troubleshoot, or customize technical solutions. Hands-on experience with Docker, Kubernetes, CI/CD pipelines, and infrastructure automation. Scripting or development experience using Python, Go, Bash, or similar languages. Experience supporting disconnected, degraded, intermittent, or limited-bandwidth (DDIL) environments. Experience integrating enterprise identity, monitoring, security, or DevSecOps systems. Familiarity with mobile device management technologies such as Intune or Workspace ONE. Why Join Mattermost? Mission-critical impact: Support organizations operating in some of the world's most demanding security environments. Technical ownership: Go beyond reactive support to influence customer architectures, deployment strategies, and platform adoption. Direct engineering collaboration: Work closely with Product and Engineering to solve meaningful technical challenges. Growth opportunities: Expand your expertise in secure infrastructure, federal technology, and forward-deployed engineering practices. Remote-first flexibility: Work remotely in the United States, with opportunities for direct customer engagement and on-site collaboration. Target Salary Range: $125,000 - $165,000 USD plus commission Mattermost takes a market-based approach to pay and pay may vary depending on your location. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future. Mattermost offers a remote-first work environment with medical, dental, and vision coverage. You’ll also receive unlimited PTO plus company holidays, a work from home stipend, an annual learning and development budget for conferences, certifications, and courses, paid parental leave for all parents, and a 401(k) plan. U.S. Eligibility & Compliance This role may require obtaining and maintaining a U.S. government security clearance. Candidates must meet federal eligibility requirements to be considered. For more information visit Security Clearances — United States Department of State Applicants must meet eligibility requirements for access to export-controlled information as defined by U.S. export control laws, including EAR and ITAR. For more information visit the Bureau of Industry and Security and the Directorate of Defense Trade Controls . Mattermost is an EEO Employer, we are a remote-first, open-source company. We are continually working to expand our hiring in more countries and regions, ensuring compliance with local laws and regulations, which takes time. Mattermost values your unique perspective—we welcome all applicants. We encourage individuals from all backgrounds to apply and are committed to assessing candidates based on their skills and qualifications. We do not tolerate discrimination against staff or applicants based on race, religion, national origin, age, disability, pregnancy status, veteran status, or other personal characteristics. If you require accommodations during the interview process, please let us know—we’re happy to assist.

Задачи: — администрировать и сопровождать систему IDM — разрабатывать и выстраивать архитектуру интеграции IDM-системы с корпоративными системами банка — разрабатывать коннекторы для подключения корпоративных систем банка к IDM — формализовывать требования к интеграции корпоративных информационных систем банка с IDM-системой — анализировать проблемы и исправлять ошибки в работе — взаимодействовать с интеграторами и формировать запросы на изменение и развитие IDM-системы — автоматизировать процессы управления доступом к информационным системам и ресурсам Требования: — опыт построения CI/CD пайплайнов для поставки артефактов IDM (коннекторов, правил, конфигураций) с использованием GitLab CI / Jenkins / GitHub Actions — умение автоматизировать инфраструктуру как код (IaC): Terraform, Ansible (или аналоги) для поддержки стендов разработки, тестирования и productive-сред IDM — опыт внедрения мониторинга, логирования и алертинга для IDM-компонентов (Prometheus + Grafana, ELK/OpenSearch, Loki) — знание инструментов управления секретами и конфиденциальными данными (Hashicorp Vault, AWS Secrets Manager) — умение настраивать резервное копирование, восстановление и отказоустойчивость IDM-решений (DRP, кластеризация, репликация каталогов) — практика работы с Git и системами хранения артефактов (Nexus, Artifactory) для версионирования коннекторов и скриптов

Задачи: — Проектирование и эксплуатация AWS-инфраструктуры: развёртывание и сопровождение VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53. — Настройка AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing. — Обеспечение высокой доступности (HA), backup/restore, disaster recovery и принципов production-инфраструктуры. — Создание и сопровождение AWS-инфраструктуры как кода с помощью Terraform. — Строительство и эксплуатация Kubernetes в AWS (EKS), работа с основными Kubernetes-сущностями: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount. — Использование Helm для управления приложениями. — Настройка Ingress Controller, Load Balancer и TLS/certificates. — Понимание Kubernetes storage и обеспечение работы stateful-приложений. — Работа с Docker: сборка образов, registry, troubleshooting контейнеров. — Построение CI/CD-процессов, желательно на GitLab CI. — Автоматизация развёртывания приложений и зависимых сервисов. — Интеграция инфраструктурных изменений в пайплайны и поддержка воспроизводимости окружений. — Настройка мониторинга на базе Prometheus + Grafana: метрики и алерты. — Организация централизованного сбора и анализа логов: Loki/ELK/OpenSearch. — Диагностика сетевых и системных проблем в Linux. — Обеспечение стабильности production-среды, реагирование на инциденты и устранение их причин. — Управление secrets: AWS Secrets Manager / Vault/OpenBao / External Secrets. — Настройка RBAC/IAM и соблюдение принципа least privilege. — Обеспечение безопасного взаимодействия сервисов и доступа к инфраструктуре. — Поддержка PostgreSQL, Redis, RabbitMQ/Kafka на уровне инфраструктуры и интеграции с приложениями. — Обеспечение backup/restore и отказоустойчивости stateful-сервисов. — Помощь командам в развёртывании и сопровождении зависимых сервисов в Kubernetes. Требования: — Уверенный опыт работы с AWS: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53. — Хорошее понимание AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing. — Практический опыт построения и эксплуатации Kubernetes в AWS (EKS). — Знание основных Kubernetes-сущностей: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount. — Опыт работы с Helm. — Опыт настройки Ingress Controller, Load Balancer и TLS/certificates. — Опыт работы с Docker: сборка образов, registry, troubleshooting контейнеров. — Понимание Kubernetes storage и работы stateful-приложений. — Опыт работы с Terraform для создания и сопровождения AWS-инфраструктуры как кода. — Опыт построения CI/CD, желательно GitLab CI. — Опыт работы с PostgreSQL, Redis, RabbitMQ/Kafka на уровне инфраструктуры и интеграции с приложениями. — Понимание HA, backup/restore, disaster recovery и принципов production-инфраструктуры. — Опыт настройки мониторинга: Prometheus + Grafana, настройка метрик и алертов. — Опыт организации централизованного сбора и анализа логов: Loki/ELK/OpenSearch. — Опыт управления secrets: AWS Secrets Manager / Vault/OpenBao / External Secrets. — Навыки Linux administration и диагностики сетевых и системных проблем. — Опыт настройки RBAC/IAM и соблюдения принципа least privilege. — Практический опыт проектирования AWS-сети, поднятия EKS, развёртывания приложений и зависимых сервисов, организации ingress/DNS/TLS, CI/CD, monitoring/logging, backup и передачи production-ready инфраструктуры в эксплуатацию.

Задачи: — Подготовка деплой-пакетов и конфигураций, создание и поддержка Helm-чартов, Kubernetes-манифестов, стандартизация конфигураций; управление секретами, сертификатами и переменными окружения — Управление инфраструктурой как код (IaC): разработка и поддержка Terraform-модулей, Ansible-ролей для развертывания и настройки инфраструктуры (bare-metal, cloud, виртуализация) — Администрирование платформ оркестрации: установка, настройка и эксплуатация Kubernetes-кластеров (в том числе управление узлами, сетевыми политиками, storage, обновлениями) — Настройка наблюдаемости (observability): реализация сбора метрик, логирования и трассировки; настройка мониторинга (Prometheus/Victoria Metrics), алертинга (Alertmanager), визуализации (Grafana); обеспечение выполнения SLO/SLA — Обеспечение безопасности инфраструктуры: контроль доступа (RBAC, network policies), управление секретами, настройка политик безопасности подов, сканирование уязвимостей образов и конфигураций; участие в DevSecOps-практиках — Подготовка эксплуатационной документации и реагирование на инциденты: разработка runbook, процедур восстановления, участие в устранении инцидентов и постмортемах; поддержка готовности сервисов к продуктивной эксплуатации — Оптимизация ресурсов и надежности: мониторинг утилизации ресурсов, планирование емкости, оптимизация затрат (cost management) для облачных и on-prem решений; поддержка регулярных релизов и обновлений — Взаимодействие с командами разработки: консультирование по DevOps-практикам, совместная работа над архитектурой приложений, внедрение стандартов и инструментов, повышение культуры автоматизации — Участие в архитектурных решениях и планировании: оценка новых технологий, проектирование инфраструктуры, участие в формировании требований к доступности и производительности, декомпозиция технических задач Требования: — Опыт разработки и поддержки CI/CD пайплайнов (Jenkins, GitLab CI) — Уверенное владение Kubernetes: развертывание, настройка, управление кластерами, работа с Helm, операторами, сетевыми политиками — Практический опыт с Infrastructure as Code (Terraform, Ansible) — автоматизация развертывания инфраструктуры и конфигураций — Знание принципов observability: настройка Prometheus/Victoria Metrics, Grafana, Loki/ELK, Alertmanager, трассировка — Опыт работы с системами управления секретами (Hashicorp Vault, Kubernetes Secrets, внешние хранилища) и сертификатами — Понимание подходов DevSecOps: управление доступом, network policies, сканирование уязвимостей (SAST/DAST), работа с инструментами безопасности — Знание Git, работа с ветвлением, стратегии управления релизами Желательные навыки: — Опыт внедрения прогрессивных стратегий доставки (canary, blue-green, A/B) с использованием Argo Rollouts, Istio, Flagger — Знание SQL/NoSQL баз данных (PostgreSQL, MongoDB) на уровне администрирования и оптимизации — Опыт работы с Kafka (настройка, мониторинг, управление топиками) — Навыки написания runbook и документации, участие в постмортемах

Требования: — опыт работы с Kubernetes (развёртывание приложений, работа с Pod, Deployment, Service, ConfigMap, Secret); — базовые знания Linux (работа в командной строке, основы администрирования, понимание процессов и прав доступа); — понимание принципов контейнеризации (Docker: сборка образов, запуск контейнеров, работа с реестрами); — базовые знания систем контроля версий (Git: ветвление, слияние, пул‑реквесты); — знакомство с CI/CD (понимание этапов пайплайна, базовые навыки настройки); — знание одного или нескольких скриптовых языков (Bash, Python) для автоматизации; — понимание сетевых основ (TCP/IP, HTTP, DNS, порты, фаерволы); — базовое понимание принципов работы IaC (terraform, ansible) Условия: — Удаленный формат — Белая заработная плата, оформление согласно Трудовому кодексу РФ; — Комфортный старт: 3 месяца плавного погружения под присмотром HR; — Поддержку: IT-отсрочку и консультации HR/юристов; — Прозрачные процессы и открытую коммуникацию; — Работу на лучшем оборудовании без логирования времени, с фокусом на доверии и результате; — ДМС: медицинское страхование за счет компании; — Развитие: индивидуальный план обучения, посещение конференций и митапов, поддержка в развитии карьеры; — Личный бренд: возможность выступать на конференциях, митапах, публикация статей; — Бенефиты: ежеквартальное обновление корпоративных скидок; — Движ: организация вечеринок оффлайн и онлайн, предоставление мерча, проведение конкурсов и челленджей.

Location: San Francisco, CA; New York, NY Workplace: OnSite ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. About the Team The Infrastructure team builds and maintains the systems that power LangChain’s developer platform, including LangGraph Cloud and LangSmith. The team focuses on reliability, scalability, and developer productivity across the stack, working closely with backend, frontend, and platform engineers to ensure services are deployed, tested, and operated with confidence. About the Role We’re hiring a Software Engineer to join the Infrastructure team and own developer productivity across our LangGraph Cloud/Platform and LangSmith products. You’ll work closely with Infrastructure, Backend, and Frontend teams to ship with confidence across Kubernetes-based services, APIs, and UI flows. You’ll also help pioneer quality practices specific to LLM applications, such as prompt regression testing and evaluation suites. Location: In person 5 days/week in San Francisco, CA or New York, NY What You'll Do - Own test strategy end-to-end across APIs, services, UI, data, and infrastructure (Kubernetes, Terraform, Helm) - Stand up ephemeral test environments in Kubernetes for pull requests and release candidates; seed test data and run hermetic test suites - Shift quality earlier in CI/CD pipelines (GitHub Actions) through parallelization, caching, deterministic seeds, flake tracking, and quality gates - Build observability into testing workflows with rich failure artifacts such as logs, traces, and dashboards - Establish performance and reliability baselines for critical paths, including SLIs, SLOs, and regression detection - Partner on incident workflows by reproducing issues, adding targeted regression tests, and improving runbooks and postmortems - Write documentation including test plans, playbooks, and contributor guidelines for writing high-quality tests Example projects you might own - A pull-request ephemeral end-to-end testing harness that deploys a minimal LangSmith stack in CI and runs Playwright and API suites against seeded tenants - A k6 performance scenario that simulates multi-tenant traffic and surfaces p95/p99 latency regressions per release - A flake-budget system that automatically quarantines flaky tests, opens issues with artifacts, and tracks time-to-deflake What You'll Bring - 3+ years of experience as a software engineer or infrastructure engineer - Strong hands-on experience with Python and testing frameworks such as pytest - Experience working with CI/CD systems (GitHub Actions preferred) and improving pipeline performance and reliability - Solid understanding of API testing, mocking/stubbing, and data setup/teardown - Comfort defining quality standards, writing test plans, and driving cross-team execution Nice to Have - Experience with load and performance testing tools such as k6 - Familiarity with observability tooling such as Datadog or OpenTelemetry - Experience testing services running on Kubernetes and containerized environments - Basic infrastructure experience with Helm, Terraform, Kubernetes networking, or secrets management - SQL fluency for validating data (Postgres, ClickHouse, BigQuery) - Familiarity with Go, Node, or React for targeted white-box tests and improving system testability Compensation - Annual salary range: $165,000- $250,000 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Location: Valencia Workplace: OnSite ROLE HIGHLIGHTS: - Job Title: Security Officer - Department: ICEYE Security Spain - Location: Valencia, Spain - Reports to: CEO, ICEYE Spain - Employment type: Permanent - Working type: On-Site - Employment is subject to applicable security screening and clearances WHY THIS ROLE MATTERS:   In this position you will build and own the classified information security posture that lets ICEYE Spain operate within the required classification, coordinating the efforts to achieve and maintain “Reservado Nacional” security clearance, and its NATO and EU equivalents. You are the person who will build the defensible, audit-ready security framework for ICEYE Spain. You will design it, run it, and represent it to the appropriate authority. You are also the trusted advisor that will support the Spain CEO as the first point of contact for Security matters. This is a role for a builder; someone that is confident in defining, maintaining and communicating the security framework that enables ICEYE’s continued growth and meeting our obligations to our customers.   WHO WE ARE ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.   ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.   ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.   Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific. YOUR DAY-TO-DAY RESPONSIBILITIES - Own the roadmap. Define and execute the twelve-month plan to take ICEYE Spain from current state to fully cleared operations at the required national classification levels — including facility security clearance, personnel clearances, IT accreditation, and the operational processes that sit underneath. - Be the appointed security officer. Act as the company's official security officer, representing ICEYE with relevant national authorities. Lead all interactions with the national industrial security / accreditation body and represent ICEYE Spain in front of regulators with credibility and precision. - Build the framework. Partner with the Global Security team to implement policies, SOPs, secure areas, accreditation pathways toward higher classifications and the audit trail that evidences this. - Run the clearance pipeline. Be the person coordinating Personnel Security Clearances across the local organisation in close coordination with Global Security to ensure the business is ahead - Enable the business. Translate security requirements and support appropriate handling of classified information for ICEYE Spain WHAT SUCCESS LOOKS LIKE - Ensure ICEYE Spain holds and maintains a valid Facility Security Clearance and operates accredited environments at the required national level - ICEYE’s local team holds required personnel clearances to participate in our priority programmes. - ICEYE Spain are able to participate in classified procurements and requirements are clearly known and communicated to internal stakeholders - ICEYE Spain team are trained in all appropriate security processes required - You will have built the Audit-ready documentation, local procedures and SOPs, with rehearsed incident-response and Crisis handling measures in place   WHAT WE’RE LOOKING FOR MUST HAVES: - 10+ years experience of working with a variety of security challenges and demands, from IT, to physical security elements. - Real world hands on experience is essential - Deep, hands-on knowledge of the national classified information regime: the governing legislation, regulations, and industrial security manual/handbook, and the practical workings of national security oversight for ICEYE Spain - Track record as a security officer (or directly equivalent) inside a defence, intelligence, aerospace, or critical-infrastructure organisation in Spain. Consulting experience is preferred. - Experience of scaling its classification level is necessary. - Working fluency in NATO and EU classification frameworks (e.g. NATO SECRET, EU SECRET) and how they interlock with national classification levels. - Credibility with national authorities. You have collaborated closely with the relevant National Security, MoD, defence-procurement, and cyber/IT-security authorities in Spain - Currently held Security Clearance is essential - In possession of (or eligible for) Reservado Nacional personal security clearance, and ideally the equivalent EU/ESA/EC Secret) - Strong grasp of IT security accreditation paths for classified systems — the national baseline security standards, approved classified-IT regime, and formal accreditation/approval process for higher classifications such as ISO 9001, NATO/APAQ PECAL - Fluent in English, with native Spanish, with the ability to brief at executive, authority, and working level.   APPLICATION PROCESS - Intro conversation with Talent Acquisition (30 min) - Interview with Country Director of Operations (45 min) - Hiring manager interview with the CEO, ICEYE Spain (45 min) - Technical case: a take-home roadmap exercise. Demonstrate your vision to build from current state to the highest target classification level, including facility, personnel, and IT accreditation — presented and defended in person to a panel (90 min) - Interview with ICEYE’s Chief Security Officer (45 min) - Final conversation with the Global CEO of ICEYE WORKING AT ICEYE At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win. HOW WE WORK (OUR VALUES) Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way. - Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions. - See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others. - Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions. - Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift. - Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins. BENEFITS Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.   OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table. We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help. Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.

Location: Canada; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ THE ROLE Docker is launching a Professional Services organization to accelerate customer success, reduce time-to-value, and drive enterprise adoption for agentic workloads. As a Principal Solution Architect, you'll play a critical role in building and scaling this function. You will join a team of seasoned experts with deep experience backed by Docker's unmatched reach across Fortune 500 companies. This is a high-visibility role working directly with senior leadership across revenue, product, marketing, and partner organizations. You'll shape service strategy, drive cross-functional alignment, and deliver offerings that accelerate both services revenue and platform expansion. You'll serve as a trusted advisor to our largest and most strategic partners and enterprise customers, providing thought leadership on integrating Docker agentic solutions within enterprise environments. _______________________________________________________________________ RESPONSIBILITIES Build and Scale the Professional Services Practice - Develop and codify repeatable reference architecture patterns across Docker's core use cases including self-hosted and air-gapped deployments, MCP (model context protocol)/AI agent environments, IDP integrations, and secure supply chain workflows so that engagements scale consistently across customers and partners. - Translate reference architectures into customer-facing technical collateral, SOW templates, and success patterns that reduce scoping time and improve delivery consistency. - Collaborate with product, marketing, and revenue teams to integrate services into GTM motions and align delivery to Docker's AI platform roadmap. - Identify offerings that drive product expansion, renewals, and long-term customer value. - Support Partnerships & Alliances in selecting, onboarding, and enabling technical integration partners, system integrators (SIs), and service delivery partners. Drive Strategic Customer Outcomes - Act as a trusted advisor to enterprise customers, helping them adopt modern patterns for containerization, AI workflows, and secure software supply chains. - Lead technical discovery and architecture engagements that span enterprise integration layers - Architect and deliver self-hosted Docker deployments within air-gapped, regulated, and complex enterprise environments including local image registry setup, offline toolchain configuration, and compliance-driven infrastructure design. - Design and Guide customers through implementation of agentic AI toolchains, including MCP server/client architecture, tool orchestration, observability integration and secure deployment patterns aligned to Docker's AI platform. - Position Docker as a strategic and thought leadership partner, influencing long-term technology adoption and investment decisions. - Directly deliver or assign and oversee appropriate delivery partners to execute service engagements and ensure technical objectives are met. Enable Cross-Functional Success - Drive alignment and decision-making across multiple stakeholders and teams without direct reporting lines. - Translate field insights including enterprise integration patterns, IDP/SSO friction points, observability gaps, and AI deployment challenges into actionable product and services strategy, roadmap, and partner capabilities. _______________________________________________________________________ QUALIFICATIONS REQUIRED - 7+ years as a Professional Services Solution Architect, Technical Consultant, or similar role at a SaaS/infrastructure company or consulting firm. - Demonstrated experience architecting and deploying self-hosted and air-gapped deployment architectures: local image registries, offline toolchain configuration, network-isolated Kubernetes clusters, and compliance-driven infrastructure constraints common in regulated industries. - Enterprise integration experience across Identity Providers (Okta, Azure AD, LDAP/Active Directory) and federated identity protocols (OIDC, SAML, SSO), including RBAC design within complex, multi-tenant enterprise environments. - Working knowledge of Model Context Protocol (MCP) and its application to agentic AI toolchains including MCP server/client architecture, tool and resource orchestration, and secure containerized deployment patterns. - Hands-on experience with AI/ML workflows, LLM deployment, and agentic AI architectures in enterprise environments with awareness of Docker's AI platform roadmap including AI agent containerization, model provenance, and AI supply chain security. - Deep understanding of container and software supply chain security: Docker Hardened Images (DHI), Secure Supply Chain (SSC), SBOM generation, image signing and attestation, vulnerability management, and runtime governance. - Excellent facilitation and stakeholder management skills; able to lead executive-level architecture conversations and influence senior stakeholders without formal authority. - Direct experience delivering high-quality services engagements that achieve customer value while meeting revenue and ARR growth targets within a revenue organization. - Recognition by enterprise customers as a strategic technical advisor. BONUS - Experience architecting AI platforms in large enterprise environments LLM deployment pipelines, model provenance, artifact signing, and secure AI supply chain patterns. - Background enabling system integrators, consultancies, or partner ecosystems. - Consulting experience with Fortune 500 clients in highly regulated sectors such as financial services, healthcare, or government. - Led AI security architecture engagements that addressed model provenance, artifact signing, and supply chain integrity for containerized AI workloads including secure MCP server deployment, tool and resource access controls, secrets management within agentic pipelines, and runtime isolation patterns for LLM-based applications. _______________________________________________________________________ WHAT TO EXPECT FIRST 30 DAYS - Onboard to Docker's mission, values, and operating model. - Deeply familiarize yourself with our product portfolio, AI platform roadmap, and strategic customers. - Build strong partnerships with Product, Engineering, and Sales functions. - Plug into the team's rhythm of business (standups, reviews, shadow customer engagements). FIRST 90 DAYS - Scope, define SOWs, delivery, and oversight of customer service engagements. - Participate in the creation of reference architectures for key use cases.. - Participate in initiatives to build out and improve the services department's offerings. ONE-YEAR OUTLOOK - Successful delivery and oversight of customer service engagements. - Contribute materially to the build-out of Docker's service offerings across AI, security, and enterprise integration practices. - Institutionalize continuous improvement by providing field feedback including enterprise integration patterns, deployment blockers, and observability gaps to the product team. Visa sponsorship: Not available for this role. _______________________________________________________________________   COMPENSATION & EQUITY All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location. Canada: CA$238,000– CA$340,000 base United States: $171,500 – $245,00 base ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: Tbilisi, Georgia; Yerevan, Armenia; Belgrade, Serbia; Minsk, Belarus; Almaty, Kazakhstan; Tashkent, Uzbekistan The Vault by Tría Finance is a Swiss and EU-regulated fintech group delivering institutional-grade digital asset infrastructure and services. Bringing together a software vendor and a licensed Crypto Asset Service Provider (CASP), The Vault combines deep domain expertise with a strong foundation of transparency, security, and regulatory compliance. We develop and operate a comprehensive suite of crypto-native solutions, powered by proprietary technology, enabling institutions to execute digital asset strategies across both custodial and non-custodial models. We're building a security-first platform for digital asset operations. Our product is API-driven, highly auditable, and engineered for reliability. We're looking for a Senior Full-Stack Engineer who can own features end-to-end — from clean domain modeling in Go or Node.js to a polished, crisp React UI. Responsibilities: Build end-to-end product features across Go and Node.js/Express backends and React frontend AI-assisted development: use Cursor/Copilot/ClaudeCode (or similar) daily to accelerate delivery, refactoring, and test generation—while verifying outputs and keeping code clean Design backend services using DDD patterns (bounded contexts, aggregates, domain events), clean layering, and pragmatic architecture Implement data models and migrations across PostgreSQL and MongoDB, using GORM, Mongoose, or raw queries where appropriate Build and maintain REST APIs (and webhooks/event-driven workflows where needed) in both Go and Node.js/Express Implement frontend flows in React (TypeScript): dashboards, admin workflows, status lifecycles, audit views Ensure correctness and observability: structured logging, metrics, tracing, and production-ready error handling Contribute to security fundamentals: RBAC, least-privilege access, safe secrets handling, and audit trails Own quality: unit/integration tests, contract tests, and CI pipelines Requirements Must-have 7+ years building production systems with Go and/or the MERN stack (MongoDB, Express, React, Node.js), plus solid React experience Strong backend fundamentals: concurrency, APIs, reliability, debugging Hands-on with DDD (not just buzzwords): can model domains and keep boundaries clean Strong database skills across PostgreSQL and MongoDB: schema/collection design, indexing, query tuning, migrations Experience with GORM and/or Mongoose (or similar ORMs/ODMs) plus comfort dropping to raw SQL or aggregation pipelines when needed Frontend proficiency in React (TypeScript preferred), including state management and form-heavy admin UIs Good testing discipline (Go testing, Jest/Vitest, integration tests; frontend testing basics) REQUIRED: confident daily use of AI coding tools (Cursor/Copilot/etc.) with disciplined verification and secure practices Nice to have Event-driven patterns: outbox, retries, idempotency, background jobs Experience with RBAC/policy engines, audit logs, fintech/compliance workflows Docker/Kubernetes familiarity CI/CD ownership (GitHub Actions/GitLab CI), release workflows Experience with high-security systems (custody, payments, identity) Soft skills Ownership mindset: deliver features end-to-end with high quality Clear communication and ability to work across teams Pragmatic: balances long-term design with shipping Comfortable in ambiguity and fast iteration Benefits Competitive salary; Annual performance bonus; Fully remote position — work from anywhere in the world (team operates on CET); Paid time off, including vacation, sick leave, and public holidays; Multiple projects within the company — the opportunity to discuss different projects during the interview and choose the one that's the best fit for you.

Задачи: — Развёртывание и эксплуатация продуктовых систем компании во всех средах: prod, stage, test, qa, demo. — Настройка, развитие и сопровождение CI/CD-пайплайнов для backend-сервисов (.NET), web-frontend, Node.js-сервисов и мобильных приложений (iOS/Android), включая подпись и публикацию в магазины приложений. — Сопровождение self-hosted GitLab, GitLab Runner и Container Registry: обновления, бэкапы, восстановление, производительность, права доступа. — Эксплуатация контейнерной платформы на Docker Swarm: деплой сервисов, конфигурации и секреты, сетевой слой, обратный прокси (Traefik/nginx), TLS-сертификаты. — Обеспечение воспроизводимости и единообразия окружений, контроль отличий между средами. — Автоматизация инфраструктуры как кода (Ansible, Terraform или аналоги), отказ от ручных правок на серверах. — Построение и сопровождение мониторинга, логирования и алертинга (Grafana, Prometheus, Loki, Alertmanager): SLO/SLI для продуктовых систем, дашборды, дежурные уведомления. — Организация резервного копирования и регулярной проверки восстановления для PostgreSQL, MinIO, GitLab и конфигураций. — Эксплуатация инфраструктурных компонентов платформы: PostgreSQL, Kafka, RabbitMQ, MinIO, Keycloak, Redis, включая обновления и миграции. — Работа с облачной инфраструктурой (Yandex Cloud: Cloud Functions, API Gateway, Object Storage, DNS) и GitHub Actions для облачных сервисов. — Внедрение практик безопасности в поставку: SAST/SCA, secret scanning, сканирование образов, управление секретами, ротация ключей, минимизация привилегий. — Подготовка и сопровождение runbook по каждой системе: перезапуск, откат, диагностика, восстановление после сбоя; участие в разборе инцидентов и постмортемах. — Участие в проектировании архитектуры новых цифровых сервисов с точки зрения деплоя, отказоустойчивости, наблюдаемости и стоимости эксплуатации. — Совместная с разработчиками настройка quality gates в CI/CD и стандартов ветвления, релизов и версионирования. Требования: — Высшее образование в области информационных технологий, прикладной математики, программной инженерии, автоматизации, вычислительной техники или смежных технических направлений. — Опыт работы не менее 5 лет в ИТ-инфраструктуре или разработке, из них не менее 3 лет в роли DevOps/SRE-инженера с ответственностью за production. — Дополнительное профильное обучение по разработке ПО, архитектуре, DevOps, cloud, тестированию или ИБ будет преимуществом. — Опыт построения DevOps-практик с нуля в небольшой команде: стандарты, пайплайны, мониторинг, runbook, а не только поддержка готового. — Опыт работы с распределённой по нескольким площадкам инфраструктурой (несколько хостинг-провайдеров плюс публичное облако). — Опыт организации дежурства и реагирования на инциденты, проведения постмортемов. — Опыт проверенного восстановления из бэкапов, а не только их настройки. — Опыт эксплуатации .NET-сервисов в Linux-контейнерах: диагностика производительности, память, health checks, graceful shutdown. — Готовность работать в компактной команде рядом с разработчиками, участвовать в проектировании и code review инфраструктурной части. — Умение документировать системы понятно для коллег и аргументировать технические решения. — Будет преимуществом опыт работы в корпоративной среде с повышенными требованиями к ИБ, traceability и релизному контролю. Условия: — Субсидирование ипотечного кредитования. — Льготные путевки в собственный санаторий. — Ежегодная индексация. — Расширенная ДМС (после испытательного срока). — Корпоративная программа пенсионного обеспечения. — Дополнительные выплаты: поддержка многодетных родителей, выплата при рождении ребенка. — Офис в пешей доступности от станции Сколково. — Корпоративный транспорт от м. Тропарево и от м. Новопеределкино. — График работы: с 8:30 до 17:00, пятница до 16:00.

Location: Remote About us OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research. Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap. We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle. Please note: Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information. The IT & Security Team The Information Security function operates independently under our Legal team and owns everything that keeps the OpenZeppelin organization secure. That means managing our Security, Privacy & IT Program end-to-end: our SOC 2 and ISO 27001 posture, vendor and privacy risk, incident response, our bug bounty programs, and the identity, endpoint, and access systems the whole company depends on. It is also the team our customers meet during security diligence. As our enterprise relationships deepen, increasingly with banks and other regulated institutions, our own program must be as credible as the security we deliver to customers. Today that program is established and audit-ready. The next chapter is turning it into an enterprise-grade security function that stands up to the scrutiny of the most demanding enterprise customers, partners, and regulators, while safely accelerating our adoption of AI across the company. What you'll be doing You will own the strategy, design, and continuous maturation of OpenZeppelin's Information Security Program, and be accountable for managing the team executing it. You can issue-spot security and privacy risks before they materialize, explain the principles behind security and compliance controls to auditors and enterprise security teams, and calibrate our security program proportionate to risk. IT and infrastructure: Oversee identity and access management, provisioning and onboarding/offboarding, end-user security (MDM, endpoint protection, security training), physical security, disaster recovery, business continuity, and data backup, using automation and AI-powered workflows to make IT and security operations scale faster than headcount. Strategy, governance and budget: Set the strategic direction, multi-year roadmap, and risk posture of the Information Security Program; deliver on department OKRs; and own the IT and technology budget, with ultimate responsibility for technology procurement. AI security and governance: Own the secure adoption of AI across the company: evolve our AI governance framework, review and approve AI tools and agentic workflows, and secure our agentic infrastructure (identity, least-privilege tool and data access, secrets handling, monitoring, auditability). Manage frontier model providers as critical vendors, covering security and data-handling diligence, retention and training-use commitments, DPAs and subprocessor flow-downs. Meet emerging obligations such as the EU AI Act, so we can make transparent, defensible commitments to enterprise customers about how our products and internal AI usage handle their data. Compliance, audit and enterprise trust: Own our audit, certification, and attestation strategy and execution (penetration testing, SOC 2 Type 2, ISO/IEC 27001, successor frameworks) alongside internal security audits; run a third-party and vendor risk management program; and serve as the external face of our security program with customer security teams, regulated financial institutions, and auditors. Privacy and data governance: Maintain a comprehensive data map of how data flows into, through, and out of the organization, including flows to model providers and through agentic workflows, with data classification, records of processing, and a vendor/subprocessor inventory. Own privacy compliance in partnership with Legal: GDPR, CCPA/CPRA, DPAs and contractual security commitments, and privacy-by-design reviews of new products and features. Security operations and incident response: Own the incident response program end-to-end, including playbooks, tabletop exercises, post-incident reviews, and breach-notification obligations in partnership with Legal. Manage our bug bounty programs, and partner with development teams to embed security best practices in the SDLC and our software offerings. You have 10+ years of Security and IT experience, including 3+ years leading a IT Security and GRC function (not solely IT operations) in a high-growth tech company, with demonstrated ownership of strategy, not just execution. A demonstrated trajectory toward CISO: you have owned a security program end-to-end, presented to executives or boards, and can articulate the "why" behind every control you have implemented. Experience securing or governing AI/LLM-enabled products or enterprise AI adoption including agentic systems and third-party model-provider risk, with an ability to apply privacy and data-protection laws and practices (e.g., GDPR, CCPA/CPRA) in the AI context. Nice to have 5+ years working in blockchain or a FinTech with an enterprise client base (e.g., financial services), including navigating rigorous third-party security diligence. Logistics: Our interview process takes place on Google Meet or Zoom and tends to consist of the following stages: Recruiter Call (30 minutes) Hiring Manager Call (30 minutes) Team Interview (30 minutes) Leadership Interview (30 minutes) Paid work test (up to 20 hours of paid work) Reference checks Benefits Meet your teammates at company gatherings around the world 😎 Enjoy the flexibility of fully remote work 🌎 Take the time you need with flexible time off 🏝 Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙 Build your ideal home office with up to $500 in equipment support 🪑 Stay covered with medical insurance 🏥 Keep growing with learning and development opportunities 🧠 Get a monthly stipend for your preferred co-working space 💻 At OpenZeppelin , we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us! Use of AI as part of the recruiting process As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s Data Privacy Notice . If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com.