Вакансии

Location: Warsaw, Poland; Madrid, Spain; Tbilisi, Georgia; Sofia, Bulgaria; Yerevan, Armenia; Podgorica, Montenegro CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: https://cloudlinux.com/ Imunify360 is CloudLinux's security suite for Linux web servers: real-time and background malware scanning, automated cleanup, a WAF, runtime PHP protection (Proactive Defense), a database malware scanner, and IP reputation. It runs on hosting providers' shared, VPS, and dedicated servers, so new web-malware campaigns land on our fleet early. We sit on one of the largest labeled corpora of live web-server malware in the industry: files, verdicts, cleanup outcomes, and analyst decisions collected from production hosting servers every day. It already drives our signatures, heuristics, and ML models, and there is far more to get out of it. We are looking for a Senior ML Engineer who will turn that data into detection that ships — classifiers, LLM-assisted triage and generated signatures — and keep exploring new ML/LLM methods against it, measured by the product's false-negative and false-positive rates, not by notebook accuracy. Our dataset focuses on web malware — PHP, JavaScript, HTML phishing kits, infected WordPress and Joomla plugins and themes, database injections — with the context around each file. What you'll work with: Malware samples from production servers, with verdicts and analyst decisions Years of signatures and detection rules Customer-reported false negatives and false positives Runtime behavior of code on live sites Web-attack traffic File metadata and how files spread across servers Cleanup outcomes, including what came back What you will do: The goal is 10x more malware detected at the same or lower false-positive rate. Hand-written rules and faster pipelines will not get there; models trained on our data might. Decide which files on a server deserve a closer look, within tight CPU and memory budgets Tell malicious code from benign at fleet scale and a sensible cost per file Generate detection signatures automatically from new campaigns Catch malware that only looks malicious in context, such as phishing pages and script injections Route each file to the right detection engine Make cleanup precise so sites stay clean afterwards Prove each model improves detection before it ships How we work: You get an experimentation track, GPUs, and a direct line to leadership; in return, you bring numbers, not opinions. Remote-first, async across UTC−5 to UTC+8. Decisions are written down (ADR-Lite) and public by default. Hardware follows evidence: Each training direction starts with dedicated GPUs on our own bare metal; leadership has committed to fund more when the case is made with data. Agentic engineering: Claude and Codex are the default tools, wired to GitLab, Jenkins, Redash, Jira, and Slite through MCP servers. We look at how engineers work with agents — context, specificity, review quality — not only at output. Close to ground truth: You work daily with malware analysts, detection and infrastructure engineers, and the rest of our ML team. Ship gates: No model or build goes out if it raises false positives or false negatives on our past-error sets. Blameless post-mortems within 24 hours. What you'll deliver: You own the path from raw samples to a model in production, and the numbers that prove it helped. First month: A first model trained on production data and measured against today's engines — suspicious-file triage or a metadata model. The evaluation harness in place: splits by time and campaign so families don't leak, and a regression set from past FPs and FNs. By month 3: Several models in production: some in shadow mode building evidence, some live and producing real detections, all gated on the past-error regression set. A training setup that keeps its GPUs busy. A written proposal (ADR) for the detection cascade, with cost per file and hardware needs. By month 12: Models are a main source of new detections, reported as share of new detections and FN-rate trend. Retraining on fresh analyst and FN labels on a fixed cadence. Generated signatures inside the analyst workflow. Two or three parallel training directions that other engineers can run with your tooling. Requirements What you bring: 5+ years building ML systems that ran in production, including 2+ in an adversarial domain: security, abuse, fraud, or spam. Y ou have trained and fine-tuned transformer models yourself — data preparation, tokenizing code, LoRA/QLoRA or full fine-tunes, distillation, quantization — not only called hosted APIs. Classic ML depth: gradient boosting, linear models on sparse features, calibration, class imbalance, and judgement on when these beat an LLM. Evaluation discipline: leakage-free splits by time and family, precision at a fixed false-positive budget, regression sets, and an honest account of why production will differ from offline. Inference cost engineering: you have measured throughput and latency and made a model fit a CPU or memory budget (ONNX, llama.cpp, vLLM, int8/int4). Strong Python, PyTorch and the Hugging Face stack; SQL on large analytical tables (ClickHouse or similar). Familiarity with PHP or JavaScript , or willingness to pick it up working with our malware analysts. You use AI coding agents daily and can show how. English at upper-Intermediate (B2) level or higher , with particularly strong written communication for async work. It is a strong plus if you have: Web malware, webshells, phishing kits or WordPress security experience. Models over code: AST or token features, code LLMs, graph models on program structure. Malware clustering and similarity analysis. Multi-GPU training on your own bare metal; MLflow or Weights & Biases; dataset versioning. Go or Rust, for on-server inference. Published work or talks on ML for security. Benefits What's in it for you? A focus on professional development. Interesting and challenging projects. Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. Compensation for private medical insurance. Co-working and gym/sports reimbursement. Budget for education. The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: Warsaw, Poland; Sofia, Bulgaria; Podgorica, Montenegro; Tbilisi, Georgia; Yerevan, Armenia; Madrid, Spain CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: https://cloudlinux.com/ CloudLinux Inc. develops the Imunify family of security products , designed to protect hosting environments from a wide range of cyber threats. One of these solutions is Imunify Email , an email security product that protects hosting servers against spam, phishing, and other email-based threats. Imunify Email filters mail on about 5,000 hosting servers. Today the filter is rspamd with rules and a scoring model we train in-house. We are replacing it with a transformer we trained ourselves that runs on the customer's own CPU in under 100 MB and already beats rspamd at every operating point we measured. We are looking for a Senior Machine Learning Engineer to join our team and work alongside the engineer currently responsible for both the existing spam-filtering pipeline and the new ML model. Together, you will drive the development, improvement, and production rollout of our email security technology. What you will do: Train, evaluate, and release spam-detection models: build the corpus, pick the threshold, read the precision/recall report, decide ship or retrain. Build the production side of the new engine in Go: the inference service, the mail-filter integration, the tokenizer, the streaming message parser. Fix detection quality end to end, from a customer's "this phishing got through" to a rule, a corpus fix, or a retrain, with the false-positive cost weighed against the catch. Keep the corpus tooling and training infrastructure running. Review and approve classifier, rule, and model changes, so no release waits on one person. Answer partner engineers who ask why a message scored the way it did. Write specs, handbooks, and post-mortems. That is how this team transfers knowledge. Your first six months: Month 1: you ship a rule-model release on your own. Month 3: your first piece of the new engine is merged and running on staging. Month 6: a model release goes out while the principal engineer is away. Requirements What you bring: 5+ years of shipping detection or classification systems where false positives have a cost you had to defend: anti-spam, anti-phishing, anti-malware, fraud, abuse. You have taken at least one ML classifier to production yourself: corpus construction, threshold selection, error analysis. Hands-on transformer training in PyTorch: tokenizers, masked-language pre-training, fine-tuning, ONNX export, CPU inference measurement. Linux, shell, and Python on shared servers and a shared GPU. Daily usage of AI coding agents and tools. English at upper-Intermediate (B2) level or higher , with particularly strong written communication skills for technical documentation, specifications, and code reviews. Your specs and merge-request descriptions count as much as your code. It is a strong plus if you have: Email internals: SMTP, MIME, transfer encodings, SPF / DKIM / DMARC, how Exim, Postfix, and Dovecot handle mail to a filter. Experience in creating embedded models Go or Rust for systems code: parsers, streaming, memory budgets, concurrency. rspamd or SpamAssassin internals: rules, composites, Lua plugins, mass-check scoring. Multi-million-sample corpora, labelling pipelines, annotator tooling. Small models for constrained hardware: quantization, distillation, latency budgets. LLM-based labelers or validators for scaling annotation. Hosting panels: cPanel, Plesk, DirectAdmin. Benefits What's in it for you? A focus on professional development. Interesting and challenging projects. Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. Compensation for private medical insurance. Co-working and gym/sports reimbursement. Budget for education. The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: Warsaw, Poland; Prague, Czechia; Sofia, Bulgaria; Bucharest, Romania; Madrid, Spain; Tbilisi, Georgia CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: cloudlinux.com Imunify360 Security Suite is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention. We are looking for a Lead Security Engineer - Vulnerability Response to join our Web Protection Team. The challenge ahead When a critical vulnerability in a popular web application or WordPress plugin goes public, attackers start exploiting it within hours. Most site owners can't patch that fast. We want our customers protected before the first attack reaches them, and we want them to know it. That's the challenge we're hiring for: AI-driven vulnerability response. Build and run a pipeline that detects new high and critical vulnerabilities, generates WAF rules with AI assistance, validates them, and ships them to production in a short window. Protection plus public announcement, both automated. The same pipeline that ships the rule also produces the public advisory. Every critical vulnerability we cover is announced soon after the rule ships, so customers and the market see that Imunify closed it first. Build on what works. An AI-assisted pipeline already runs for our WordPress protection plugin. The first big project is to extend this approach to ModSecurity/Coraza WAF rules. Speed without breaking sites. On shared hosting, a rule that blocks legitimate traffic is a customer incident. Fast and precise both matter. Make it measurable. Time-to-protection, coverage of critical vulnerabilities, and false-positive rate are the numbers this role owns. About the role You will own the vulnerability response pipeline end to end and be its main builder. You combine deep web application security expertise with strong automation skills, and you think about the product: what customers need, what to measure, what to build next. You'll lead a small team of security analysts and work closely with automation, QA, and marketing. What you'll do Design and build the AI-driven pipeline from disclosure to announcement: vulnerability intake, triage, rule drafting, testing, release, and the public advisory. Lead the extension of our existing WordPress-plugin pipeline to ModSecurity/Coraza rules. Write and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities. Build test harnesses that check rules against exploits and real traffic before release. Lead and mentor security analysts: set priorities, review their work, remove blockers. Define and track time-to-protection, coverage, and false-positive rate, and improve them. Automate advisory generation as part of the pipeline, and agree the format and review flow with marketing. Requirements What we're looking for: 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar. Deep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal, file upload, deserialization) and how to detect them in HTTP traffic. Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar) and regular expressions. Able to read PHP code and understand a vulnerability from an advisory or a patch diff. Strong Python: you've built automation pipelines that run in production. CI/CD and automated testing. Hands-on daily use of AI/LLM tools; you know where to trust them and how to verify their output. Proven track record of leading a technical project end to end. Product mindset: you reason about customer impact, not only technical correctness. Upper-intermediate English or better. Nice to have: WordPress ecosystem security: plugin vulnerabilities, vulnerability feeds (Wordfence, Patchstack, WPScan), CVE credits or bug bounty. Coraza or other WAF engines. Exploit analysis or threat intelligence background. Linux server administration, hosting industry. Personal skills: Strong ownership: you take a goal, not a task list. See the whole process and find the bottleneck, not only fix individual issues. Communicate clearly and raise risks early. Calm under pressure: critical vulnerabilities don't wait for working hours. Comfortable making decisions with incomplete information. Benefits What's in it for you? A focus on professional development. Interesting and challenging projects. Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. Compensation for private medical insurance. Co-working and gym/sports reimbursement. Budget for education. The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: Armenia; Georgia; Poland; Estonia; Azerbaijan; Romania Intetics Inc. , a global technology company providing custom software application development, distributed professional teams, software product quality assessment, and “all-things-digital” solutions, is seeking a highly skilled and experienced Senior PHP Engineer to join our dynamic team. The client is a leading company specializing in advanced cybersecurity solutions. They provide comprehensive security measures designed to protect sensitive data and systems from cyber threats. Their offerings include vulnerability management, threat intelligence, incident response, and compliance management. With cutting-edge technology and a team of experts, they ensure robust protection for organizations across various industries, helping clients stay ahead of evolving cyber threats and maintain a secure digital environment. Responsibilities Take end-to-end ownership of QA for a new .NET-based product as the sole QA engineer. Define and implement the testing strategy, test plans, quality standards, and release readiness criteria. Select appropriate automation tools and build a maintainable test automation framework from scratch. Design, implement, and maintain automated tests covering critical functionality, integrations, and end-to-end workflows. Perform manual and exploratory testing to validate new features and identify issues beyond automated coverage. Integrate automated tests into CI/CD pipelines and ensure reliable, actionable test results. Collaborate with developers and product stakeholders to clarify requirements, identify edge cases, and improve testability early in development. Investigate defects, document reproducible findings, and verify fixes. Drive release quality by assessing test coverage, communicating risks, and providing clear release readiness recommendations. Requirements Proven experience in a Senior QA or QA Automation role, with the ability to independently own the full QA lifecycle. Experience establishing QA processes and building test automation frameworks from scratch. Strong hands-on programming skills in at least one language used for test automation; no specific language is required. Solid understanding of test design techniques, risk-based testing, and selecting appropriate levels of test coverage. Experience testing APIs, backend services, and integrations. Ability to combine automated, manual, and exploratory testing effectively. Experience integrating automated testing into CI/CD pipelines and working with Git. Strong troubleshooting skills, including working with logs, test data, and databases. Ability to select tools pragmatically, prioritize testing activities, and work independently in a new project with evolving requirements. Clear communication skills and the ability to explain quality risks to technical and non-technical stakeholders. Nice to Have Experience testing .NET-based applications or programming in C#. Previous experience as the sole QA engineer on a product. Experience with performance, load, or security testing. Experience with containerized test environments and Docker.

Location: Dubai, United Arab Emirates M1 CONSTRUCTION L.L.C is seeking a qualified Structural Engineer to join our engineering team. The successful candidate will be responsible for assisting in the design, analysis, and supervision of structural elements in construction projects to ensure safety, reliability, and compliance with industry standards. Key Responsibilities: Assist in structural design calculations and prepare design drawings for various projects. Review and interpret engineering documents, plans, and specifications. Collaborate closely with architects, contractors, and project managers to ensure integrated project execution. Conduct site visits to monitor construction activities and ensure compliance with design specifications. Support preparation of technical reports and project documentation. Assist in resolving any technical issues related to structural engineering during construction. Requirements Bachelor’s Degree in Civil or Structural Engineering. Minimum 3 years of experience in structural engineering roles, preferably within the UAE construction industry. Knowledge of local building codes, regulations, and standards. Proficiency in structural analysis and design software such as STAAD Pro, ETABS, or equivalent. Strong skills in AutoCAD and other drafting tools. Good communication and teamwork abilities. Benefits - Visa provided - Health Insurance provided - Competitive salary

Location: Dubai, United Arab Emirates We are seeking a proficient Mechanical Design Engineer to join our engineering team. The candidate will be responsible for designing, developing, and optimising mechanical systems and components for various construction projects, ensuring compliance with industry standards and project specifications. Key Responsibilities: Develop detailed mechanical designs, drawings, and specifications for HVAC, plumbing, and other mechanical systems. Use CAD and BIM software (AutoCAD, Revit, SolidWorks) to prepare layouts and 3D models. Collaborate with multidisciplinary teams to integrate mechanical designs with architectural and structural layouts. Conduct engineering calculations and simulations to verify design viability and performance. Review and revise designs based on project requirements, codes, and client feedback. Ensure all designs comply with local regulations and industry standards. Coordinate with contractors, and suppliers to support project execution. Participate in site visits to monitor installation and resolve design-related issues. Requirements Bachelor’s degree in Mechanical Engineering or related field. Minimum 5 years of experience in mechanical design engineering, preferably in the construction industry. Proficiency in CAD and BIM software such as AutoCAD, Revit, and SolidWorks. Strong knowledge of mechanical systems including HVAC, plumbing, and fire protection. Familiarity with local building codes and regulations. Excellent analytical, problem-solving, and communication skills. Ability to work collaboratively in multidisciplinary teams and manage multiple tasks effectively. Previous experience with a consultant. Benefits Competitive salary. Official UAE employment status. Comprehensive medical insurance coverage.

Location: Bessé-sur-Braye, Pays de la Loire Workplace: OnSite ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. THE MISSION You will work every day on the racks that power one of France's largest AI clusters. Mistral's compute footprint is our single largest investment and the foundation of our AI research and engineering. We're hiring Data Center Hardware Engineers to keep our GPU/CPU clusters healthy, safe and growing — hands-on, in the data center, at the intersection of high-performance computing and physical infrastructure. You'll join a small, senior team working at a scale few engineers get to experience: GPU-dense racks (H100/H200-class and next-generation platforms), high-speed interconnects, liquid-cooled systems — with new sites under development in France and beyond. Hardware here is not someone else's problem. As part of a small on-site team, you carry responsibility for it end to end. Location: On-site at one of our data center in Bessé-sur-Braye, Pays de la Loire. WHAT YOU'LL DO - Diagnose & repair server and cluster hardware: CPUs, memory, drives, NICs, GPUs, PSUs, and interconnect problems (switches, cables, transceivers; Ethernet/InfiniBand). - Intervene safely — power-off/lockout, ESD discipline, pre/post-work checklists, tidy and safe work areas. - Capture everything — photos, serials, test results; open, update and close tickets with notes the next engineer can act on. - Manage parts — receive, label and track inventory; run RMAs and coordinate with vendors. - Help us get better — feed recurring anomalies into monitoring, alerts and SOPs; contribute small scripts (Python/Bash) if you have those skills. - Be a good teammate — clear status updates, honest handovers, and respect for the people depending on the cluster. ABOUT YOU - Hands-on comfort in data centers or server hardware — you can (or will quickly learn to) work cleanly in racks: rails, cabling, labeling, mounting. - Disciplined and meticulous: checklists aren't bureaucracy to you, they're craftsmanship. - Practical electrical basics: power-off procedures, PPE, short-circuit risk awareness. - Basic Linux (boot checks, logs) — scripting is a plus, not a requirement. - Physically able to work in racks (lift, mount, maneuver) in a data center environment. - Comfortable in a 24/7 operation, including a rotating on-call with emergency response expectations. - Driver's licence (B) for travel between our sites. EVEN IF YOU DON'T MATCH EVERY CRITERION Many of our best hardware engineers came from research labs, telecoms, IT services or the military. If you are rigorous, curious and genuinely motivated by hardware at scale, we would be glad to hear from you — we assess demonstrated scope rather than keyword matching. NICE TO HAVE - HPC/AI/cloud production experience at scale; large-fleet server install and maintenance. - Networking fundamentals (Ethernet/InfiniBand) beyond basics. - Vendor/RMA tooling, ticketing (Jira/ServiceNow), inventory systems. - Python/Bash automation for checks, capture, inventory or reporting.   WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: San Francisco; New York City Workplace: OnSite The charter of Perplexity’s Core Experience team is to create a cohesive, intuitive, and delightful user experience by integrating cutting-edge AI capabilities and research into a unified system. The Core Experience team works closely with product design teams to ship a world-class web app that’s used by millions of people every day. We imagine and build the interfaces through which people experience the promise of AI. We are seeking a talented engineer with an uncompromising dedication to the craft of frontend web development. You’ll help us to define the future of human-agent collaboration: establishing intuitive mental-models, patterns, and state-representation. You’ll work closely with design to prototype, architect, and engineer novel interfaces for interacting with AI collaborators. WHAT YOU’LL DO - Build and ship polished, high-craft, intuitive web interfaces - Constantly improve high-visibility surfaces like agent chat threads, artifact editing, and message composition - Partner directly with design to turn visionary ideas into production implementations - Solve complex problems across architecture, state-management, animation, and performance-optimization - Collaborate with capabilities and research teams to synthesize the latest research into coherent production experiences - Support other product teams by designing reusable libraries and SDKs to maintain a high quality-bar across all surfaces of the product WHAT WE’RE LOOKING FOR - Strong proficiency in modern web technologies: React, TypeScript, CSS, etc. - Exceptional taste: relentless attention to detail, from aesthetics to performance to code-quality - Comfortable owning projects end-to-end, working at high velocity in an ambiguous environment where the industry changes by the day - Keen product sensibilities: being able to reason about what will work, what won’t, and articulate why - Customer obsession: always thinking about how what you’re building will touch the person on the other side of the screen

Location: New York, New York, United States About the Role The ideal candidate for this role is a strong cloud architect who excels at both big-picture thinking as well as hands-on technical work.  With very strong AWS, Kubernetes and web infrastructure skillsets, they will be working on projects building or improving our core compute, core network and edge infrastructure. They also play a critical role in helping the iCapital platform scale and doing so with an automation-first mentality. The engineer will work with application and platform teams to onboard services, establish connectivity, troubleshoot traffic flows, and maintain consistent networking patterns across environments. Responsibilities Design and continually improve Kubernetes architecture, also helping operationally manage cluster lifecycle. Work on projects integrating new self-hosted and SaaS services, in some cases understanding and working with developers to help design software architecture Manage Transit Gateway, Network Firewall and external connectivity.  Own architectural guidance for edge and traffic management, including CDN, DNS, and TLS strategies (e.g., Akamai, Cloudflare). Produce and maintain reference architectures, design documents, and architectural guardrails Partner with engineering, security, and product teams to ensure platform standards are practical, well understood, and broadly adopted. Qualifications 8+ years of experience in platform, cloud, or infrastructure engineering roles, with demonstrated architectural responsibility.  Must have strong hands-on experience designing and operating Kubernetes platforms in production environments, including a strong understanding of autoscaling strategies, node provisioning, and security on EKS. Deep understanding of AWS infrastructure, including networking, security primitives, and managed services.  This includes expertise in cloud networking architecture patterns, including VPC design, routing, and planning for scale. Strong understanding of ingress/egress, TGW design and private connectivity. Comfortable operating as a senior individual contributor with influence across multiple teams as a leader. Very Strong written and verbal communication skills, with the ability to explain architectural decisions to both technical and nontechnical audiences. Preferred Qualifications Expertise in Kong or other API Gateways at a deep level Experience directly managing Akamai in a production environment Strong understanding of application design principles Some experience with EKS standards such as Bottlerocket, Karpenter, Auto-mode A software engineering background is helpful, and some experience with Python expected. Certifications (AWS / Kubernetes) are a plus but not required. Benefits The base salary range for this role is $150,000 to $190,000 depending on level. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Location: Brazil About the Role Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors. Industry Insight Freight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust. About Alvys Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar. Our Principles Engineering Principles Build for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding. Extreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results. Technology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow. Simplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load. Radical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth. Engineering Culture Move Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity. Own the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last. Partner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one. Pragmatism Over Purism. Perfect security doesn't exist, but reduced risk does. We choose fixes that scale, are maintainable, and address real threats, not theoretical ones. People Over Heroics. We don't reward burnout or always-on behavior. Sustainability is a feature, not a luxury. If someone needs to slow down, unplug, or take care of life outside work, that's expected. Responsibilities Cloud security architecture Design and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access. Make these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them. Build secure defaults into our infrastructure modules so new resources start out compliant. Vulnerability management and pipeline security Help run our vulnerability management program, driving remediation within defined SLAs. Extend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing. Tune and improve the automation we already use to process security findings. Penetration testing Manage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting. Help mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs. Infrastructure for security, IT, and AI tooling Deploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one. Build telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity. Working with others Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work. Write clear runbooks and documentation, and produce evidence for our SOC 2 program. Tech Stack Cloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID) Infrastructure as code: Terraform CI/CD: GitHub Actions and Azure DevOps pipelines Containers: Docker, Kubernetes, Azure Container Registry Observability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana Security: Aikido, Cloudflare AI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot Application code: .NET/C#, TypeScript, Angular, React Minimum Qualifications Fluent in English, spoken and written. 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering. Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management. Production experience with infrastructure as code, preferably Terraform. Experience building and maintaining CI/CD pipelines. Working knowledge of containers and Kubernetes. Scripting skills in Python, PowerShell, or Bash. Understanding of common security risks in cloud and web applications, and how to fix them. Ability to explain technical risk clearly to engineers and non-engineers. Preferred Qualifications Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities. Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing. Experience coordinating penetration tests or working with external security firms. Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus). Familiarity with SOC 2, ISO 27001, or CIS Benchmarks. Interest in AI tooling and how to deploy and monitor it safely. Security certifications such as AZ-500, Security+, or similar are a plus. Background in logistics or transportation is a bonus.

Location: Mexico About the Role Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors. Industry Insight Freight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust. About Alvys Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar. Our Principles Engineering Principles Build for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding. Extreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results. Technology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow. Simplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load. Radical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth. Engineering Culture Move Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity. Own the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last. Partner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one. Pragmatism Over Purism. Perfect security doesn't exist, but reduced risk does. We choose fixes that scale, are maintainable, and address real threats, not theoretical ones. People Over Heroics. We don't reward burnout or always-on behavior. Sustainability is a feature, not a luxury. If someone needs to slow down, unplug, or take care of life outside work, that's expected. Responsibilities Cloud security architecture Design and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access. Make these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them. Build secure defaults into our infrastructure modules so new resources start out compliant. Vulnerability management and pipeline security Help run our vulnerability management program, driving remediation within defined SLAs. Extend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing. Tune and improve the automation we already use to process security findings. Penetration testing Manage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting. Help mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs. Infrastructure for security, IT, and AI tooling Deploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one. Build telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity. Working with others Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work. Write clear runbooks and documentation, and produce evidence for our SOC 2 program. Tech Stack Cloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID) Infrastructure as code: Terraform CI/CD: GitHub Actions and Azure DevOps pipelines Containers: Docker, Kubernetes, Azure Container Registry Observability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana Security: Aikido, Cloudflare AI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot Application code: .NET/C#, TypeScript, Angular, React Minimum Qualifications Fluent in English, spoken and written. 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering. Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management. Production experience with infrastructure as code, preferably Terraform. Experience building and maintaining CI/CD pipelines. Working knowledge of containers and Kubernetes. Scripting skills in Python, PowerShell, or Bash. Understanding of common security risks in cloud and web applications, and how to fix them. Ability to explain technical risk clearly to engineers and non-engineers. Preferred Qualifications Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities. Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing. Experience coordinating penetration tests or working with external security firms. Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus). Familiarity with SOC 2, ISO 27001, or CIS Benchmarks. Interest in AI tooling and how to deploy and monitor it safely. Security certifications such as AZ-500, Security+, or similar are a plus. Background in logistics or transportation is a bonus.

Location: United States About the Role Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors. Industry Insight Freight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust. About Alvys Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar. Our Principles Engineering Principles Build for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding. Extreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results. Technology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow. Simplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load. Radical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth. Engineering Culture Move Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity. Own the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last. Partner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one. Pragmatism Over Purism. Perfect security doesn't exist, but reduced risk does. We choose fixes that scale, are maintainable, and address real threats, not theoretical ones. People Over Heroics. We don't reward burnout or always-on behavior. Sustainability is a feature, not a luxury. If someone needs to slow down, unplug, or take care of life outside work, that's expected. Responsibilities Cloud security architecture Design and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access. Make these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them. Build secure defaults into our infrastructure modules so new resources start out compliant. Vulnerability management and pipeline security Help run our vulnerability management program, driving remediation within defined SLAs. Extend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing. Tune and improve the automation we already use to process security findings. Penetration testing Manage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting. Help mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs. Infrastructure for security, IT, and AI tooling Deploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one. Build telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity. Working with others Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work. Write clear runbooks and documentation, and produce evidence for our SOC 2 program. Tech Stack Cloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID) Infrastructure as code: Terraform CI/CD: GitHub Actions and Azure DevOps pipelines Containers: Docker, Kubernetes, Azure Container Registry Observability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana Security: Aikido, Cloudflare AI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot Application code: .NET/C#, TypeScript, Angular, React Minimum Qualifications Fluent in English, spoken and written. 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering. Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management. Production experience with infrastructure as code, preferably Terraform. Experience building and maintaining CI/CD pipelines. Working knowledge of containers and Kubernetes. Scripting skills in Python, PowerShell, or Bash. Understanding of common security risks in cloud and web applications, and how to fix them. Ability to explain technical risk clearly to engineers and non-engineers. Preferred Qualifications Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities. Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing. Experience coordinating penetration tests or working with external security firms. Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus). Familiarity with SOC 2, ISO 27001, or CIS Benchmarks. Interest in AI tooling and how to deploy and monitor it safely. Security certifications such as AZ-500, Security+, or similar are a plus. Background in logistics or transportation is a bonus. Equal Employment Opportunity Alvys is an equal opportunity employer and as such, we do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other characteristic protected by applicable laws. We are dedicated to growing a diverse team of highly talented people. We’re dedicated to building a workplace where we give each other the strategies, support, and space we each need to thrive—believing in and bringing out the best of everyone. If you require any accommodations during the recruitment process, whether it be alternate forms of material, accessible meeting rooms, etc., please let us know and we will work with you to meet your needs. For information about Alvys's privacy practices, see our Privacy Policy .

Location: New York, NY (HQ); San Francisco, CA Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE As a Forward Deployed Engineer, you’ll solve the hardest problems standing between Ramp and the world’s largest and most complex companies — shaping and shipping the product capabilities that unlock our growth upmarket. You'll be part of our Core FDE org, which is an agent-first, high-pace, customer-facing engineering team. On FDE, you will interact directly with customers and deliver solutions end to end — understanding pain points, shaping product decisions, and building agents that autonomously expand Ramp's capabilities. Check out our Engineering Blog https://engineering.ramp.com/ and FDE post https://engineering.ramp.com/post/forward-deployed-engineering for more context on our work!   WHAT YOU’LL DO - Deliver software end to end that meet the needs of our largest customers — understanding user pain points, scoping product specs, and building agents that autonomously implement solutions. - Collaborate closely with Sales, Solutions, Customer Success, and Account Management to close deals, activate customers, and expand the value Ramp provides over time. - Drive the core product engineering roadmap through our embedding model — specializing within a core product area to develop deep domain expertise and make prioritization calls on when to build a custom solution vs. accelerate a broader initiative. WHAT YOU NEED - 3+ years of software engineering experience preferred - Extensive experience building with and for agents - Track record of shipping high-quality products at scale - Comfort and excitement to be customer-facing - Desire to work in a fast-paced environment, continuously grow, and master your craft BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: New York, NY (HQ); San Francisco, CA Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE As a Software Engineer, Enterprise Product, you’ll solve the hardest problems standing between Ramp and the world’s largest and most complex companies — shaping and shipping the product capabilities that unlock our growth upmarket. You'll be part of our Core FDE org, which is an agent-first, high-pace, customer-facing engineering team. On FDE, you will interact directly with customers and deliver solutions end to end — understanding pain points, shaping product decisions, and building agents that autonomously expand Ramp's capabilities. Check out our Engineering Blog https://engineering.ramp.com/ and FDE post https://engineering.ramp.com/post/forward-deployed-engineering for more context on our work!   WHAT YOU’LL DO - Deliver software end to end that meet the needs of our largest customers — understanding user pain points, scoping product specs, and building agents that autonomously implement solutions. - Collaborate closely with Sales, Solutions, Customer Success, and Account Management to close deals, activate customers, and expand the value Ramp provides over time. - Drive the core product engineering roadmap through our embedding model — specializing within a core product area to develop deep domain expertise and make prioritization calls on when to build a custom solution vs. accelerate a broader initiative. WHAT YOU NEED - 3+ years of software engineering experience preferred - Extensive experience building with and for agents - Track record of shipping high-quality products at scale - Comfort and excitement to be customer-facing - Desire to work in a fast-paced environment, continuously grow, and master your craft BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: San Francisco, CA; San Jose, CA; Seattle, WA Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ Docker Forward Deployed Engineers (FDE) embed directly with our most strategic customers to solve important, complex technical problems and turn ambitious ideas into production outcomes. FDEs take on the most challenging technical challenges using existing Docker products and patterns when possible, and work across customer, Docker Product and Engineering teams to realize new approaches when required.   As a Docker FDE, you will work side-by-side with customer engineering teams to deeply understand their goals, problems, constraints, and technical landscape; identify the highest-leverage opportunities; and design, build, and ship solutions with them. You own the technical journey from discovery and architecture through prototyping, implementation and production rollout.   The solutions you build may use existing Docker products, extend Docker into new environments, integrate deeply with customer and third-party systems, or reveal capabilities that Docker should build next. You work closely with Docker Solutions Architects to evolve existing patterns, and Docker Product and Engineering to turn new learnings into reusable patterns and product capabilities.   RESPONSIBILITIES Build in Production with Customers - Embed with customer engineering teams to design, build, and ship solutions from first prototype through stable production rollout. Use existing Docker products and patterns when possible, invent, prototype and validate innovative solutions when necessary. - Deliver working technical artifacts to customers: custom MCP servers with tightly integrated Docker Sandbox environments for coding agents and containerized agents; Docker Compose definitions for multi-agent harnesses and model-backed applications; Hardened Image standardization and migration; New tools that unblock customer progress. - Integrate Docker's AI platform with the customer's existing stack, including identity providers (OIDC/SAML/SSO), secrets management, private and air-gapped registries, Kubernetes, CI/CD pipelines, and observability tooling. - Own technical delivery on your engagements: scope the work, sequence it, make trade-offs between speed and quality, remove blockers early, and contribute directly to code whenever progress depends on it. Make AI Adoption Safe and Governable - Translate customer security, compliance, and platform requirements into concrete plans and see those plans through from ideation to production. - Help customers define controls to enable them to adopt agentic AI to solve their unique business problems without compromising security, compliance, data sovereignty or end-user experience. - Establish quality and performance standards for customers and work closely with Docker Product and Engineering to quickly address issues that fall outside of established thresholds - Partner with customer security and platform teams to get agentic workloads through architecture review, threat modeling, and change control. Partner with Solutions Architecture and the Field - Work closely with Solutions Architects to enable off-the-self solutions when possible and provide technical experience and leadership when a bespoke solution is necessary. - Feed implementation learnings back into reference architectures, SOW templates, and success patterns so that FDE innovations become standard features and implementation patterns. - Support the field with technical depth during proofs of concept, escalations, and expansion conversations when a working build is the fastest path to a customer adoption. Close the Loop with Product and Engineering - As part of Docker Engineering FDEs work closely with Product and Engineering teams to fold FDE innovations, learnings, and design patterns into existing or new products and services. - Work with Customers, Product and Engineering to establish quality and performance thresholds, ensuring customer environments meet them consistently, and responding quickly and decisively when they don’t. - Be the voice of the customer. Deliver data-driven and actionable feedback to Product and Engineering: what works well; what does not; what customers are asking for; and what blocks their adoption and forward progress. FDE experience directly influences the roadmap. Shape the Practice - Define the FDE engagement model, delivery standards, and quality bar, and codify them so that engagements are consistent across customers, regions, and delivery partners. - Mentor and lead other Forward Deployed Engineers, and participate in hiring loops to grow the team. - Act as the senior technical escalation point on the hardest problems impacting your customers. Every incident is an opportunity to improve Docker products and services. - Maintain deep, current knowledge of the agentic AI stack: LLMs, APIs, MCP, coding agents, model and harness evaluation approaches, performance and quality thresholds, deployment patterns. - This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.   QUALIFICATIONS Required - 10+ years of software engineering experience, including 4+ years in a customer-facing technical role such as Forward Deployed Engineer, Solutions Engineer, Professional Services Engineer, or Software Engineer with consulting or technical founder experience. - Technical leadership across multiple engagements, teams, or domains, with a proven ability to set delivery standards, define repeatable patterns, and influence product direction through field evidence. - Expert production coding skills in Go, Python, or TypeScript, with a track record of shipping and operating software that other people depend on and of leading technical design reviews. - Deep, hands-on Docker expertise: Dockerfiles and multi-stage builds, Docker Compose, image and registry operations, container networking and storage, and container security fundamentals. - Hands-on experience building with LLMs and agents in production, including tool use and function calling, the Model Context Protocol (MCP server and client implementation), prompt and context engineering, and evaluation of agent behavior. - Working knowledge of software supply chain security: SBOMs, image signing and attestation, vulnerability management, minimal and hardened base images, and secure CI/CD. - Experience integrating with enterprise systems: identity providers (Okta, Entra ID, LDAP/Active Directory), federated identity protocols (OIDC, SAML), secrets managers, Kubernetes, and at least one major cloud platform (AWS, Azure, GCP). - Ability to scope and deliver complex work in ambiguous, fast-moving customer environments, making sound trade-offs between scope, speed, and quality. - Excellent communication skills with engineers, security and platform teams, and executive stakeholders, with a low-ego, collaborative approach and the ability to lead through influence rather than authority. - Proven track record of technical mentorship and of raising the bar for the engineers around you. - High agency and comfort operating autonomously in distributed, remote-first teams. - Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience. - Travel to customer sites to build in person with customer teams, estimated at up to 50%. Bonus - Experience with Docker Hardened Images, Docker Scout, MCP Gateway, MCP Toolkit, Docker Sandboxes, or Docker Model Runner. - Experience deploying and operating coding agents (Claude Code, Codex, Gemini CLI, Cursor, or similar) in team or enterprise settings. - Experience with air-gapped, regulated, or compliance-driven environments in financial services, healthcare, government, or similar sectors. - Contributions to open source projects in the container, Kubernetes, or MCP ecosystems. - Prior experience founding or scaling a Forward Deployed Engineering or Professional Services practice. Docker considers visa sponsorship on a case-by-case basis based on business needs.   Compensation & Equity United States: $198K – $319K + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Design and support air-gapped deployment environments for LLM-based systems. Deploy and optimize LLM workloads on GPU infrastructure.

Location: United States - Chicago Office Workplace: Hybrid At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀 This is a once-in-a-lifetime opportunity to join a hyper-growth startup focused on saving people time and making the world more productive!   ClickUp is looking for a Strategic Solutions Engineer to serve as a technical partner to our Sales and Success orgs for bringing in net new customers, expanding existing accounts, and accelerating our revenue growth. The ideal candidate is a strong strategic thinker, skilled presenter, and has enough technical aptitude to figure out solutions for any technical challenges clients experience.   Teamwork is vital to how ClickUp operates and a significant portion of your responsibilities will include working closely with Managers to understand and coordinate team needs. You should be able to work independently with little supervision, and also enjoy a fast paced and collaborative work environment. It is important that you are able to manage a range of tasks and prioritize their responsibilities, and meet deadlines with urgency and optimism.   THE ROLE: - Partner with sales and success to deliver technical presentations that explain our products and integrations for prospective and current clients. - Design, develop, deploy and manage customer-specific proof of value (PoV) projects. - Build custom reports and dynamic dashboards for prospective clients' management teams. - Assist with the functional and technical elements of RFPs. - Stay current on new feature releases and maintain updated demo spaces for sales. - This role will support customers across the North East.   QUALIFICATIONS: - This is a hybrid role based in Chicago, IL with a strong preference for candidates within reasonable travel distance of Chicago. The role requires periodic in-person availability for customer onsite meetings, enterprise deal support, and team working sessions in the midwest market, including occasional co-working days with peers. - Proven experience designing and implementing agentic workflow automation using AI platforms, including autonomous agents for task orchestration, multi-step decisioning, and cross-app integrations to deliver scalable enterprise productivity. - 6+ years in a customer facing role with technology. Ideally pre-sales, but may also be equivalent consulting, implementation, or sales enablement experience. - 2+ years demonstrable success working with commercial or enterprise clients - An understanding of the application deployment processes that enable successful Cloud transformation, change management, and organizational acceptance. - Strong customer-facing skills including the ability to influence technical and executive audiences towards the desired outcome. - Creative problem solver with an eagerness to learn new technologies and sufficient technical background to assist with lightweight custom solutions. - Demonstrated ability in business process mapping and diagramming, with experience in consumption-based selling and value selling to drive customer outcomes and align solutions with business objectives. - Hands-on experience with AI & LLMs, integration platforms (Unito, Workato, Zapier, Integromat), web services, and APIs. - Up to 50% of travel is required for this role. #LI-Remote #LI-JC1   Equal Opportunity Employer ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice. https://clickup.com/careers-terms/candidate-privacy-notice If you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open for further details. Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions. Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com. AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.

Design and deploy autonomous and multi-agent orchestration workflows capable of executing complex, multi-step enterprise processes. Implement structured tool-use frameworks and integrate external APIs and services using protocols such as Model Context Protocol (MCP).