Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations
Hybrid | Austin, San Francisco
About the Role
Cloudflare's Senior Forward Deployed Infrastructure Engineers work where Cloudflare's infrastructure meets customer impact.
As a Forward Deployed Infrastructure Engineer, you will be embedded with one of Cloudflare's most strategic customers, collaborating to ensure modern cloud compute capacity is available, reliable, and ready when needed. You will guide new capacity from delivery to production, partnering with Cloudflare's data center and hardware teams to ensure systems pass validation, come online smoothly, and uphold Cloudflare's high standards.
You will serve as a bridge connecting Cloudflare's infrastructure, hardware, and data center teams with the customer's engineering organization. You'll ensure teams work from a shared vision, clear operational roadblocks, and feed real-world insights back into how Cloudflare builds and evolves its platform.
This role is ideal for engineers who want to:
Stay deeply technical and hands-on with real production infrastructure.
Guide outcomes from hardware delivery through running workloads.
Shape how Cloudflare delivers compute capacity at scale.
Build long-term, trust-based partnerships with world-class engineering teams.
Responsibilities
Capacity Onboarding & Delivery:
Lead bringing new compute capacity online for the customer, collaborating on planning, provisioning, validation, and handover to production. Drive turn-ups that are predictable, efficient, and repeatable.
Hardware & Spec Validation:
Partner with teams to ensure delivered systems meet agreed specifications. Define acceptance criteria and validation workflows, including burn-in, benchmarking, and health checks across compute, storage, and networking. Work alongside on-site data center teams to execute checks and resolve issues.
Standards & Operational Readiness:
Champion Cloudflare's build, configuration, security, and observability standards prior to capacity launch. Ensure comprehensive monitoring, alerting, and runbooks are established for all production systems.
Cross-Team Alignment:
Act as the central point of collaboration between Cloudflare's infrastructure, hardware engineering, data center operations, supply chain, and network teams, alongside the customer's engineering group.
Technical Accountability:
Serve as the primary technical point of contact for the customer's infrastructure, guiding account strategy and technical direction for supporting Cloudflare resources.
Reliability & Incident Response:
Engage in operational rhythms with the customer and Cloudflare, including standups, capacity reviews, change management, and incident response. Facilitate blameless root-cause analysis and post-incident improvements
.
Automation & Tooling:
Develop production-quality automation and tooling for provisioning, validation, and fleet management to continually improve rollout efficiency.
Capacity Planning & Forecasting:
Partner with the customer to understand future demand, forecast capacity needs, and proactively identify constraints.
Feedback Loop & Product Influence:
Surface real-world operational issues and platform opportunities with Cloudflare's Infrastructure, Hardware, and Product teams to inform future roadmaps.
Strategic Relationship Management:
Cultivate trusted technical relationships with senior stakeholders (Staff+ engineers, Directors, and VPs) across both organizations.
On-Site Presence:
Spend time regularly on-site at customer offices to foster close communication and partnership with their engineering teams.
Desirable Skills, Knowledge, and Experience
At Cloudflare, we know that great candidates come from diverse backgrounds with non-linear paths. You don’t need to tick every single box to be right for this role. If you are excited about building a better Internet and ready to make an impact, please apply.
Infrastructure & SRE Background:
Solid experience in infrastructure engineering, SRE, or production engineering, with a track record of running and scaling large-scale production systems.
Capacity & Fleet Operations:
Practical experience bringing server capacity online, encompassing provisioning, imaging, configuration management, and fleet-scale lifecycle management.
Hardware Fluency:
Familiarity with server hardware, firmware, BMC/IPMI/Redfish, and diagnostics. Ability to set validation standards, triage issues remotely, and partner with on-site technicians. Experience with GPUs or specialized accelerators is a plus.
Linux & Networking:
Strong understanding of Linux systems and core networking principles (TCP/IP, BGP, DNS, load balancing, and data center topologies).
Automation & Development:
Proficiency in languages such as Go, Python, or Rust, along with experience using infrastructure-as-code and configuration management tools (e.g., Terraform, Ansible, Salt).
Production Ownership:
Experience supporting mission-critical services, including on-call rotations, incident response, SLO management, and reliability engineering.
Observability:
Familiarity with monitoring, metrics, and logging frameworks (e.g., Prometheus, Grafana, ClickHouse) to maintain system health proactively.
Containers & Orchestration:
Exposure to Kubernetes or similar platforms and workload scheduling on newly provisioned capacity.
AI-Augmented Workflows:
Interest or experience in leveraging modern AI tools to streamline automation, debugging, and documentation.
Program-Level Coordination:
Demonstrated ability to coordinate complex, multi-team delivery efforts across regions and time zones with clear communication and alignment.
Proactive Problem-Solving:
A self-motivated approach to identifying bottlenecks—whether technical or procedural—and collaborating with partners to implement durable fixes.
Stakeholder Communication:
Ability to engage comfortably in strategic technical discussions with executive-level stakeholders, translating infrastructure context into business outcomes.
Bonus Points
Prior experience at a hyperscaler, cloud provider, or large-scale data center environment.
Familiarity with Cloudflare's platform and network architecture.
Experience in customer-embedded or partner-facing technical infrastructure roles.
A history of sharing knowledge, such as technical writing, internal mentorship, open-source contributions, or community presentations.
Compensation
Compensation may be adjusted depending on work location.
For Bay Area based hires: Estimated annual salary of $194,000 - $266,000.
Equity
This role is eligible to participate in Cloudflare’s equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health & Welfare Benefits
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Financial Benefits
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Time Off
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
seniorСША; On-Site Presence:; Demonstrated ability to coordinate complex, multi-team delivery efforts across regions and time zones with clear communication and alignment
Location: Hybrid - San Francisco, New York City, Austin
About Vercel:
Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
About the role:
We are looking for an IT Systems Engineer to build and secure the identity and access management (IAM) and mobile device management (MDM) systems for employees who build agents and internal tools every day. You will design access and device policies that let them ship quickly without exposing company data, and automate the work with scripts, API integrations, and AI tooling alongside our IT and Security engineers. This is a hybrid role based in San Francisco, New York City, or Austin, with three days a week in the office.
What you’ll do:
Configure Okta, including application integrations, single sign-on (SSO), multi-factor authentication (MFA), groups, access policies, and automated provisioning
Build onboarding, role-change, and offboarding automation that keeps employee access current
Configure and maintain MDM for device enrollment, software deployment, patching, encryption, and compliance controls
Build scripts, API integrations, and automation across Okta, MDM, Google Workspace, Slack, and IT service management systems, using AI to write and troubleshoot code and reviewing its output before it ships
Partner with Security on least-privilege access that lets employees connect agents and internal tools to company systems safely, along with device security standards and access reviews, and serve as the escalation point for complex identity and device issues
What you need:
7+ years of hands-on IT systems engineering experience, with deep expertise in either IAM or MDM and working knowledge of the other
Administered Okta and integrated applications using Security Assertion Markup Language (SAML), OpenID Connect (OIDC), and System for Cross-domain Identity Management (SCIM)
Configured and operated an MDM platform such as Jamf, Kandji/Iru, or Intune
Wrote automation in Python or Bash against APIs, and used AI to build and troubleshoot it, reviewing generated code before deploying
Bonus if you:
Managed Okta or other IT systems as code with Terraform, including version-controlled configurations, code review, and configuration drift management
Supported AWS identity and access configurations
Built or hosted a project on Vercel
Benefits:
Competitive salary and meaningful equity
Comprehensive health, dental, and vision coverage
Generous paid time off and parental leave
Professional development stipend
Daily lunch and commuter benefits (SF office)
Compensation & Benefits:
Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $180,000.00 - $288,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
Disclosures:
Privacy:
Please review our
Job Applicant Privacy Policy
for more information on how we handle your data.
Equal Opportunity:
Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
Location: Remote, Canada; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Senior CX Platform Engineer, you'll help GitLab's Customer Experience (CX) teams hand real work to artificial intelligence (AI). You'll use Claude Code and GitLab Duo Agent Platform as your default development tools, designing agentic workflows and Model Context Protocol (MCP) servers with production testing, security, and shared ownership. This is a software engineering role, not ticket-taking internal IT, AI evangelism disconnected from shipped code, or customer-billable Professional Services delivery.
What you'll do
Use Claude Code, GitLab Duo, and other coding agents as your primary development environment for planning, implementation, refactoring, testing, reviews, and documentation. Run multiple agents in parallel on well-scoped tasks, critically review their output, and own every line that reaches production.
Build and maintain the team's agent harness, including shared AGENTS.md conventions, skills, slash commands, hooks, subagent definitions, and continuous integration checks. Measure and share what works, publish reusable patterns, and retire those that don't.
Ship agents and multi-step workflows for account research, success planning, scoping, status reporting, and customer onboarding. Package them as skills and plugins for non-engineers using Claude, Claude in Slack, and GitLab Duo Agent Platform.
Build MCP servers and connectors for governed access to GitLab, Salesforce, Gainsight, Kantata, Thought Industries, Gong, Snowflake, and other enterprise systems. Add evaluations, tracing, and human-in-the-loop checkpoints to keep internal and customer-facing agents measurable, auditable, and safe with customer data.
Evolve the CX Application Platform's gateway, Amazon Web Services (AWS) infrastructure, including Elastic Container Service (ECS), Relational Database Service (RDS), and Lambda, Terraform configuration, application scaffold, and deployment path. Own applications such as PS Compass, Congregate, and GitLab University and its integrations, documenting build-versus-buy and consolidate-or-sunset decisions.
Ship production-quality Python and TypeScript through GitLab continuous integration and continuous delivery (CI/CD), with tests, observability, security review, and runbooks. Design every application for handoff, with documentation, monitoring, and shared ownership.
Prototype with Customer Success, Digital Success, Professional Services, Education Services, and Training in days, not quarters. Help CX team members bring their own applications to production, and turn field learning into reusable reference implementations, development paths, and enablement.
Contribute upstream to GitLab and share product feedback with Product and Engineering. Mentor engineers and non-engineers on agentic development and raise the team's code review bar.
What you'll bring
Experience building and operating production software, owning multi-quarter work from ambiguity to production, choosing reusable platform solutions over one-off customization where appropriate, and designing for handoff.
Daily, hands-on use of coding agents such as Claude Code, Cursor, Codex, GitLab Duo, or similar on production work. You can show how they've changed what you ship and how you maintain quality.
Experience building with large language models (LLMs) beyond chat, including tool use, MCP servers, agent loops, context and retrieval design, prompt and workflow design, and evaluations.
Strong Python skills with FastAPI or Flask and TypeScript skills with Vue or React, including application programming interface (API) design, authentication, authorization, and secure handling of customer and business data.
Hands-on experience with AWS ECS, RDS, and Lambda, Terraform, Docker, and applications running behind single sign-on (SSO), such as Okta.
Experience integrating enterprise systems through Representational State Transfer (REST) and GraphQL APIs, and fluency with Git, merge requests, and CI/CD.
Experience translating non-engineering stakeholders' workflows into technical plans and writing clear asynchronous design documents, decision records, and enablement materials. You align with GitLab's values and are willing to use GitLab for your own work.
Optional experience includes agent harness customization; the GitLab Development Kit, Duo Agent Platform custom agents and flows, or AI Catalog publishing; enterprise agent governance and data controls; customer success, professional services, or learning platforms such as Salesforce, Gainsight, Kantata, or Thought Industries; professional services economics and customer success metrics; Snowflake or similar warehouses; and technical writing, talks, or open source contributions on agentic development.
We welcome interest from candidates with varying levels of experience; you don't need to meet every nice-to-have to apply.
About the team
CX Platform Engineering builds and runs CX Applications for Customer Success, Digital Success, Professional Services, Education Services, and Training. We own the CX Application Platform's gateway and infrastructure alongside our application portfolio: GitLab University, the Foundational Onboarding Agent in GitLab Duo Agent Platform, Congregate, PS Compass, and Customer Wins. We build the first version with the people doing the work, turn what we learn into a reusable pattern, then hand it off so it runs without us. We reward leverage, not heroics, and don't leave tools dependent on one person.
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$139,200
—
$235,200 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Remote (United States)
Thank you for considering Tailscale. If this job description resonates with you, please apply.
Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications.
We encourage you to help us break that statistic!
About Tailscale
Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.
About the Role
We are hiring a Senior Solutions Engineer to partner with Account Executives on enterprise accounts. You will own the technical side of the sales cycle—qualifying use cases, leading discovery and architecture, running demos and proofs-of-concept, and supporting early adoption and expansion. You will act as a trusted advisor to networking, security, platform, and IT stakeholders.
This is a senior individual-contributor role that blends deep networking and security expertise with consultative selling. You will co-own pipeline outcomes, help close and expand enterprise deals, and feed real customer requirements back into product and go-to-market.
This role is a strong fit for a senior SE who wants to stay close to the technology, work enterprise deals from qualification through early adoption, and help customers replace complicated networking—and privileged/AI access—with something simpler and more secure.
Key Responsibilities
Partner with Account Executives to identify, qualify, and close new enterprise logos and expansion opportunities, confirming technical fit aligned with business goals.
Lead technical discovery, solution architecture, demos, and proofs-of-concept (POCs) that help customers make confident buying decisions.
Design Tailscale architectures for hybrid, multi-cloud, and on-premises environments, including identity-based access and secure connectivity patterns.
Align Tailscale PAM for identity-aware access with session recording, and Aperture as an AI gateway for LLM/API access.
Translate technical capabilities into clear business value, including security outcomes, operational simplicity, and time-to-value.
Serve as a trusted advisor across multi-stakeholder deals, guiding implementation and collaborating with Customer Success to drive best-practice adoption.
Support security reviews and common enterprise diligence (architecture reviews, questionnaires, and compliance discussions).
Provide structured feedback to Product, Engineering, and GTM teams based on enterprise use cases, blockers, and competitive dynamics.
Assist in building reusable demo environments, solution blueprints, and enablement assets that raise the quality and consistency of enterprise engagements.
Stay current on zero-trust networking, privileged access, identity integrations, cloud networking, and AI access/governance so you can position the full Tailscale portfolio accurately and competitively.
What We Are Looking For
5–7+ years in a customer-facing Solutions Engineer, Sales Engineer, or Solutions Architect role within networking, security, infrastructure, or related enterprise software.
Proven experience co-owning pipeline and influencing quota outcomes with Sales on both new business and expansion.
Deep understanding of zero-trust networking, secure connectivity, and IAM integrations (SSO, SAML, OIDC, SCIM).
Strong networking fundamentals and troubleshooting skills: TCP/IP, DNS, routing, firewalls, NAT traversal, TLS/HTTPS, and related concepts.
Hands-on systems administration and troubleshooting across Linux and at least one of macOS or Windows.
Hands-on architecture experience with AWS, GCP, and/or Azure, including hybrid environments.
Experience managing cloud and network infrastructure using Infrastructure as Code (Terraform preferred for policy/ACL; Pulumi, Ansible, or CloudFormation also relevant).
Excellent communication skills, with the ability to explain complex systems clearly and translate technical features into business value for both practitioners and executives.
Experience running technical evaluations, customized demos, and POCs in enterprise or upper mid-market environments.
Comfort operating in a high-growth, fully distributed environment with a high degree of ownership and competing priorities.
Willingness to travel occasionally (approximately 10–20%) for customer meetings, workshops, and internal collaboration.
Nice to Have
Experience selling or architecting zero-trust, SASE, ZTNA, VPN, PAM, or secure networking solutions.
Familiarity with privileged access patterns: JIT access, session recording, least-privilege to SSH/databases/Kubernetes, and replacing shared credentials.
Familiarity with AI gateways, LLM access governance, MCP/API proxying, or centralized model/provider key management.
Hands-on scripting or automation experience (Python, Bash, Go, or similar) for demos, POCs, or integrations.
Knowledge of the competitive landscape in zero-trust, PAM, and AI access control.
Experience supporting security reviews, architecture diligence, and compliance discussions (SOC 2, HIPAA, PCI) in a pre-sales context.
Previous exposure to Tailscale, WireGuard, or similar mesh-networking technologies.
Experience creating reusable architectures, demo environments, or SE playbooks.
As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.
For this position, our pay ranges reflect target OTE (on target earnings), inclusive of base salary and variable compensation tied to the attainment of quarterly sales targets.
US Pay Range (OTE)
$250,000
—
$300,000 USD
What We Offer
An inclusive, flexible environment where you can be your authentic self.
We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
A competitive total compensation package.
This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
Comprehensive group benefits with no waiting period.
Take advantage of coverage for health, vision, dental, and more for you and your family!
Remote first company
—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
Employer-funded retirement contributions.
Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
Connect with other Tailscalars IRL.
Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
Support for your personal and professional development.
Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
Paid time off and a healthy work-life integration.
Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
A build-your-own home office setup.
You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
Paid parental leave program
. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).
Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.
Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.
Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit
https://tailscale.com/scam-awareness
.
Задачи:
• Проектирование, масштабирование и автоматизация инфраструктуры сред Prod/Stage/Test через IaC (Terraform, Ansible);
• Развитие и поддержка кластеров Kubernetes и Docker;
• Развитие пайплайнов в GitLab CI/CD для ускорения доставки кода;
• Развитие мониторинга, логов и алертинга с использованием Grafana, Loki, Sentry;
• Расследование production-сбоев, разбор причин, повышение отказоустойчивости;
• Внедрение DevOps-стандартов, инфраструктурное ревью, помощь разработчикам.
Требования:
• Опыт от 4 лет в роли DevOps / SRE;
• Уверенные знания Linux, Docker, Kubernetes;
• Практический опыт с GitLab CI, Terraform и Ansible;
• Опыт работы с мониторингом Grafana, Loki, Sentry;
• Умение расследовать инциденты и выстраивать отказоустойчивую архитектуру.
Будет плюсом:
• Опыт в Highload / Fintech проектах;
• Знание практик SRE (SLI/SLO, error budget);
• Знание Python, Go или Bash;
• Опыт менторинга или техлидства.
Условия:
• Официальное оформление по ТК РФ, полностью «белая» зарплата;
• Наличие IT-аккредитации (IT-ипотека, отсрочка);
• ДМС после завершения испытательного срока;
• Возможность напрямую влиять на технические решения и развитие инфраструктуры.
Задачи:
— Проектирование и реализация backend- и frontend-частей веб-приложений и внутренних систем
— Разработка async API и сервисов на Python (Litestar, FastAPI)
— Проектирование моделей данных, схем БД и миграций
— Работа с аналитическими нагрузками: тяжёлые запросы, агрегации, оптимизация под OLAP
— Проработка бизнес-логики и доменных моделей (DDD), слоистая архитектура
— Интеграция сервисов между собой: gRPC, брокеры сообщений, фоновые задачи
— Контейнеризация сервисов и настройка окружений (Docker, GitLab CI)
— Разработка пользовательских интерфейсов на React + TypeScript
— Интеграция фронтенда с backend-API, кодогенерация клиента из OpenAPI, обработка edge-кейсов
— Разработка и поддержка переиспользуемых UI-компонентов
— Участие в проектировании архитектуры приложений и выкатка своего кода в прод
Требования:
— Опыт коммерческой разработки от 3 лет, из них год+ в роли fullstack
— Python 3.12+, полная типизация
— Litestar или FastAPI, Pydantic v2, Dishka
— SQLAlchemy 2.0, Alembic, asyncpg
— PostgreSQL: индексы, план запроса, оконные функции, оптимизация тяжёлых запросов
— Опыт хотя бы с одним аналитическим или поисковым хранилищем: ClickHouse, Elasticsearch, Neo4j
— Слоистая архитектура, DDD
— Git, Docker, GitLab CI (или аналог)
— Фоновые задачи и очереди: taskiq или Celery, NATS, Redis
— React 19, TypeScript, Vite, bun
— TanStack Router, TanStack Query, TanStack Table, Zustand, react-hook-form, zod
— Компонентные библиотеки: Mantine 8 либо Tailwind 4 + Radix/shadcn
— Feature-Sliced Design или другая явная слоистая структура фронтенда
— HTML, CSS, component-based подход
— Системное мышление, внимание к качеству кода, самостоятельность в проработке задачи
Будет плюсом:
— structlog, uv, ruff, pytest с async-тестами
— gRPC (grpclib, betterproto2)
— MinIO / S3
— Интеграция self-hosted LLM через OpenAI-совместимый API, pydantic-ai
— Ansible, Terraform, Grafana
— Biome, кодогенерация API-клиента (@hey-api/openapi-ts)
— motion, ECharts / Recharts, графовые визуализации
— vitest, Playwright
Условия:
— Полная занятость, работа в офисе
— Влияние на архитектуру backend- и frontend-частей продукта
— Собственная инфраструктура on-premise, современный стек без легаси
— Конкурентная заработная плата, обсуждается по итогам собеседования
Location: Λευκωσία, Nicosia, Cyprus
About Wheely
Wheely is redefining premium transportation across major cities in Europe, the US, and the Middle East. We blend cutting-edge technology with the craft of five-star chauffeuring to deliver an experience trusted by more than 100,000 active riders and 1,200 corporate accounts.
We’re a profitable, fast-growing scale-up with $43M raised and over $100M in annual revenue. Having recently launched in New York City, we’re expanding rapidly across the US and EMEA. If you take pride in your craft and want to help shape the next chapter of our growth, we'd love to hear from you.
About The Role
We’re looking for a Backend Engineer to join one of our teams that keeps frameworks lean and focuses on what matters: clean, maintainable code, shipped fast with TDD, DDD, and continuous integration and delivery.
We are a Go shop, and while we’re busy migrating away from our Ruby monolith, our stack includes PostgreSQL, MongoDB, RabbitMQ, Redis, gRPC, and Thrift. Everything runs on AWS and Kubernetes, managed via Terraform.
Our interview process includes a recruiter screen, algorithms and live coding. Senior+ candidates also complete a system design section.
Responsibilities
Write high-quality, performant code primarily in Go.
Implement new microservices while helping us responsibly manage and migrate away from legacy services.
Work closely with product managers, designers, and data scientists to turn abstract requirements into concrete technical designs.
Ensure our systems stay responsive under heavy load, optimising for both latency and reliability.
Requirements
3+ years of experience building and maintaining scalable backend services.
We use Go. If you know it, great. If not, we’ll interview you in your strongest language (Python, C++, Ruby).
In-depth knowledge of relational and NoSQL databases (PostgreSQL, MongoDB, Redis) and experience with message brokers like RabbitMQ or Kafka.
Upper-Intermediate (B2) English proficiency or higher. You should be comfortable debating technical trade-offs with your peers.
What We Offer
Office-based role in Nicosia, four days a week with flexible start and finish times, plus one remote day of your choice
Competitive salary
Employee stock options plan
Private medical and dental insurance
Daily Lunch allowance
Latest-generation MacBook Pro and 4k display
Professional development stipend
Relocation support, including visa sponsorship and allowance
All of your personal information will be collected stored and processed in accordance with
Wheely’s Candidate Privacy Notice
Λευκωσία, Nicosia, Cyprus; Relocation support, including visa sponsorship and allowance
Задачи:
— Оперативное управление и поддержка облачной инфраструктуры BeyondTrust, обеспечение доступности, производительности и стабильности во всех средах.
— Проектирование, развертывание и обеспечение безопасности мультиаккаунтных AWS, Azure и GCP сред в соответствии со стандартами организации.
— Проектирование, развертывание и поддержка AWS сетевых решений, включая VPC, Transit Gateway, VPC Peering, PrivateLink, VPC Endpoints и сопутствующие маршрутизацию и сервисы подключения.
— Разработка и поддержка переиспользуемых Terraform модулей, управление удалённым состоянием и конфигурациями с контролем версий для соблюдения стандартов инфраструктуры.
— Создание и поддержка CI/CD пайплайнов с использованием GitHub Actions, включая self-hosted runners, для стабильной и надёжной доставки изменений инфраструктуры и приложений.
— Поиск и устранение инцидентов, применение патчей, проверка процессов резервного копирования и восстановления, оптимизация инфраструктуры по производительности и стоимости.
— Решение проблем с облачной связностью, включая DNS, маршрутизацию, балансировку нагрузки и коммуникацию приложений в мультиаккаунтных средах.
— Обеспечение поддержки вне рабочего времени, разрешение инцидентов, документирование пост-инцидентных обзоров и последующих действий.
— Администрирование федерации идентификаций, аутентификации, авторизации и контроля привилегированного доступа в облачных платформах.
— Интеграция, управление и поддержка сторонних инструментов для доступа к облаку, операций, безопасности и аудита.
— Обеспечение соблюдения стандартов управления, включая управление аккаунтами, тегирование ресурсов, соответствие конфигураций и планирование ёмкости через контролируемые и аудируемые изменения.
— Использование AI-инструментов для разработки переиспользуемой автоматизации, ускоряющей доставку и повышающей продуктивность команды.
— Создание и поддержка архитектурных диаграмм, стандартов Terraform, стандартных операционных процедур, руководств по устранению неполадок и документации по аварийному восстановлению.
Требования:
— Опыт 2+ года в проектировании, обеспечении безопасности и управлении крупными облачными средами AWS, Azure или GCP.
— 2+ года практического опыта с основными сервисами AWS, включая сети, вычисления, хранение, балансировку нагрузки, мониторинг и автоматизацию.
— 2+ года опыта разработки и поддержки Terraform модулей или других решений инфраструктуры как кода.
— 2+ года опыта работы с AWS IAM, включая роли, политики, разрешения и управление доступом.
— Глубокое понимание AWS сетей, включая CIDR, маршрутизацию, DNS, средства безопасности, Transit Gateway и VPC-соединения.
— 2+ года опыта работы с Git, версиями, скриптами, управлением конфигурациями и автоматизированным тестированием инфраструктуры.
— 2+ года опыта создания или поддержки CI/CD пайплайнов с использованием GitHub Actions или аналогичных платформ.
— 2+ года опыта скриптинга на Python (предпочтительно), PowerShell или Bash.
— Сильные навыки устранения неполадок, решения проблем и анализа корневых причин.
— Знакомство с инструментами мониторинга и наблюдаемости облака, такими как CloudWatch, Prometheus или Datadog.
— 2+ года опыта работы в рамках ITSM и процессов управления изменениями.
— Сильные устные и письменные коммуникативные навыки, включая создание и поддержку технической документации.
— Степень бакалавра в области компьютерных наук, информационных систем, компьютерной инженерии или эквивалентный практический опыт.
— Обязательна сертификация AWS Certified Solutions Architect Associate, AWS Certified CloudOps Engineer или эквивалентная.
— Опыт 3+ года в двух или более из следующих областей: AWS Organizations, Control Tower и управление мультиаккаунтами; AWS сети, включая VPC, IPAM, WAF и гибридные архитектуры; администрирование GitHub Actions, self-hosted runners или CI/CD платформ; облачная наблюдаемость, безопасность инфраструктуры или регулируемые среды; внедрение облачных контролей в соответствии с SOC 2, ISO 27001, NIST CSF 2.0 или FedRAMP Moderate; использование AI-инструментов для повышения эффективности разработки и операций.
Условия:
— Удалённая работа из Канады или США.
— Полная занятость.
О компании:
BeyondTrust — мировой лидер в области безопасности идентификации, защищающий пути к привилегиям. Компания предлагает решения для управления всей поверхностью атак на идентификацию и нейтрализации угроз как внешних, так и внутренних. Клиентская база включает 20 000 клиентов, в том числе 75 из Fortune 100.
Задачи:
— Проектирование и разработка интерфейсов и сервисов.
— Разработка инструментов для настройки подключений и датасетов, создания графиков и дашбордов.
— Совместная работа с дизайнерами для создания функционального и понятного UI.
— Разработка сервисов на Node.js, включая API для создания скриншотов графиков и систему для организации почтовых рассылок дашбордов.
— Сопровождение и поддержка сервисов.
— Участие в поддержке инфраструктуры сервисов, настройка CI/CD-процессов, использование Terraform и Kubernetes, масштабирование и ускорение работы, обеспечение стабильности сервисов.
— Вклад в облачные фронтенд-технологии.
— Контрибьюторство в общие для Yandex Cloud фронтенд-технологии и открытую облачную экосистему компонентов и библиотек Gravity.
Требования:
— Несколько лет опыта во фронтенд-разработке.
— Знание JavaScript/TypeScript и библиотек React.
— Интерес к облачным технологиям.
— Будет плюсом знание CI/CD, контейнеризации (Docker) и инфраструктуры.
— Опыт работы с Node.js.
Задачи:
— Поддержка и развитие CI/CD-процессов для серверных и онлайн-систем;
— Автоматизация процессов сборки, тестирования, развертывания и мониторинга;
— Управление конфигурациями и обеспечение стабильности сервисов;
— Контроль доступности, производительности и безопасности систем;
— Взаимодействие с командами разработки и эксплуатации для обеспечения бесперебойной работы сервисов;
— Анализ инцидентов и участие в их оперативном устранении.
Требования:
— Опыт работы на позиции DevOps-инженера от 3 лет;
— Уверенные знания Linux (на уровне администратора);
— Опыт работы с контейнеризацией (Docker, Kubernetes);
— Знание инструментов CI/CD (Jenkins, GitLab CI, ArgoCD и др.);
— Навыки работы с системами мониторинга и логирования (Prometheus, Grafana, ELK, Zabbix и др.);
— Опыт написания скриптов (Bash, Python);
— Знание систем контроля версий (Git);
— Базовое понимание сетевых технологий и принципов безопасности;
— Опыт взаимодействия с базами данных MongoDB (PostgreSQL, Oracle, Redis);
— Опыт работы с инфраструктурным кодом (Terraform, Ansible, Helm);
— Опыт эксплуатации микросервисных архитектур;
— Понимание подходов Observability, High Availability, SRE-практик.
Условия:
— Стабильный и прозрачный доход: размер заработной платы обсуждается по итогам собеседования + квартальная и годовая премия по результатам эффективности работы;
— График работы с 9:00 до 18:00, 5/2;
— Работа в команде с возможностью профессионального и карьерного развития;
— Курсы по запросу и поддержка в карьерном развитии через внутренние программы обучения на корпоративной платформе HCB UpSkill;
— Конструктор льгот OLZHA: кэшбек на здоровье, спорт, путешествия и саморазвитие в рамках утверждённых лимитов;
— Комфортная среда: ультрасовременный и уютный офис HCB HUB с летней террасой, спортивным залом, столовой, кофейней, библиотекой и зонами отдыха;
— Забота о здоровье: групповые тренировки, йога-классы и массаж;
— Яркая корпоративная жизнь: мероприятия, конкурсы, квизы, клубы по интересам;
— Merch Store с возможностью заработка «спасибо» и обмена на брендированные продукты и активности с топ-менеджментом;
— Приятные скидки и привилегии на продукты банка, фитнес-клубы, клиники и магазины-партнёры;
— Реферальная программа с вознаграждением за рекомендации;
— Дресс-код в стиле Smart Casual.
Location: New York, NY, United States
About Us
Fanatics is a leading global sports platform redefining how fans connect with the teams, players and moments they love. Our businesses — Fanatics Commerce, Fanatics Collectibles, Fanatics Betting & Gaming, Fanatics Events, Fanatics Advertising, Fanatics Markets and Fanatics Studios — maximize the presence and reach for hundreds of partners globally and create a one-stop experience that allows fans to buy, bet, collect, and earn, while engaging with sports in deeper, more immersive ways. This includes licensed fan gear and lifestyle products, sportsbook and iGaming, physical and digital trading cards, live events, premium sports entertainment content, credit card offerings and more. Together, they form a powerful, integrated ecosystem — connected by the Fanatics ONE loyalty program and FanCash, the currency of sport — delivering personalized experiences to over 100 million fans worldwide. Fanatics holds partnerships with over 900 sports properties, from professional leagues and players’ associations to teams, colleges and retail partners; over 7,000 athletes and celebrities; and over 2,000 retail locations, including all Lids stores. Backed by a team of more than 22,000 employees, Fanatics is committed to relentlessly enhancing the fan experience.
Overview
As a Backend Staff Engineer at Fanatics Core, you are a recognized technical leader. You operate both strategically and hands-on while leading ambitious projects, and your solutions set the standard for the team. Your bold decisions balance immediate business needs with long-term technical excellence. Through your leadership, you cultivate a culture of excellence and innovation that leaves a lasting impact on both your immediate team and the broader mobile team. Lastly, you are user-obsessed and know how to drive features from the backend all the way to the frontend.
We own the Fanatics App, the brand-forward application of Fanatics that encompasses elements of all of our different brands and businesses. The Fanatics App brings together Free to Play games, live events, ecommerce, and new product experiences to deliver a new Sports platform. Fundamentally, we are one team in everything we do from the user experience to coding and architecture. In order to deliver on our Customer Promise, we use best in class technologies; thus allowing platforms to be as up to date as possible so that we can rapidly deliver and innovate in this exciting new market.
Every time a fan places a bet, earns a reward, or checks out on Fanatics — Fanatics Core made that possible. We build the shared foundations — identity, payments, loyalty, wallet, data, and platform — that power sports betting, ecommerce, collectibles, and beyond. We supercharge the business by providing products and capabilities so that teams can focus on what matters most: building delightful experiences for the fans.
Responsibilities
Drive the development, testing, documentation, and deployment of high-quality, scalable software into production
Develop a comprehensive understanding of the industry, product, and roadmap, leveraging this knowledge to shape team strategy and influence the direction of the organization
Lead the end-to-end technical execution of complex features and systems, from ideation and architecture to deployment and refinement
Define and enforce engineering principles, guidelines, and best practices
Partner closely with product, design, and other stakeholders to make high-impact technical decisions that align with both business goals and long-term scalability
Lead incident resolution as part of the on-call rotation, ensuring swift diagnosis and remediation of critical software issues
Proactively identify and remove roadblocks, occasionally collaborating cross-team collaboration to maintain momentum on complex projects
Conduct and elevate code reviews, sharing expertise to enhance code quality
Steer team planning and design discussions, introducing innovative approaches to solve technical challenges and optimize design patterns
Champion improvements to software quality, testability, operational metrics, and team documentation, setting a higher standard for the organization
Mentor and coach engineers at all levels, fostering a culture of continuous learning and professional growth across the team
Be open to occasional travel to Fanatics offices and other locations for conferences, events, meetings, and team-building activities
Required Qualifications
7+ years of experience
building highly scalable, performant and evolvable backend distributed systems; proficiency in Spring with Kotlin and/or Java is a plus.
Demonstrated ability
to drive best practices in backend development and mentor others in effective coding and architectural strategies, such as clean code, hexagonal/layered architectures, domain driven design and other design and architectural patterns
Knowledge of observability practices
, including logging, monitoring, and tracing in distributed systems.
Expertise in Agile software delivery
, with a track record of modeling and driving process improvements across teams, and ability to collaborate cross-functionally across diverse teams within large enterprise environments, driving alignment and shared success.
Excellent communication skills
, capable of conveying complex technical concepts clearly and effectively to diverse audiences, including engineers, executives, and non-technical stakeholders.
Team-first mentality
, with a willingness to do what it takes to get the job done and a desire to strive for better.
Thrives in a high-growth
environment where priorities evolve regularly and decisions are made quickly.
Preferred Qualifications
Strong Experience
in the sports industry, gaming and content delivery
Highly effective
with Kotlin, Java and/or Go
Expertise in messaging technologies
such as Kafka or Amazon SQS, with a solid understanding of event-driven architectures.
Comfortable working with
Cloud Native and Infrastructure as Code, like Kubernetes, Helm and Terraform
Ability to work in diverse
codebases, both legacy and greenfield, in different languages and environments
If you possess some of these qualifications but not all of them, we still encourage you to apply!
#LI-AC2
Ranges will change based on country and state of residence, which are reflected in Geographical Zones defined by Fanatics Betting and Gaming. The range incorporates all of our Geographical Compensation Zones and is subject to change as the Zone associated with the actual offer is confirmed. In addition to the base and bonus, full-time employment, and more. For information about our benefits, please visit
https://benefitsatfanatics.com/
Salary Range
$144,000
—
$235,000 USD
By submitting your application, you agree to our terms of service and acknowledge you have read our
Candidate Privacy Policy.
Fanatics will never ask candidates for money, banking information, or other sensitive personal information as part of the interview process. If you receive a suspicious message claiming to be from Fanatics recruiting, please do not respond and report it
here
.
Location: New York, NY, United States
About Us
Fanatics is a leading global sports platform redefining how fans connect with the teams, players and moments they love. Our businesses — Fanatics Commerce, Fanatics Collectibles, Fanatics Betting & Gaming, Fanatics Events, Fanatics Advertising, Fanatics Markets and Fanatics Studios — maximize the presence and reach for hundreds of partners globally and create a one-stop experience that allows fans to buy, bet, collect, and earn, while engaging with sports in deeper, more immersive ways. This includes licensed fan gear and lifestyle products, sportsbook and iGaming, physical and digital trading cards, live events, premium sports entertainment content, credit card offerings and more. Together, they form a powerful, integrated ecosystem — connected by the Fanatics ONE loyalty program and FanCash, the currency of sport — delivering personalized experiences to over 100 million fans worldwide. Fanatics holds partnerships with over 900 sports properties, from professional leagues and players’ associations to teams, colleges and retail partners; over 7,000 athletes and celebrities; and over 2,000 retail locations, including all Lids stores. Backed by a team of more than 22,000 employees, Fanatics is committed to relentlessly enhancing the fan experience.
Overview
As a Backend Engineer at Fanatics Core, you'll design, develop, test, and maintain scalable, high-quality systems to deliver exceptional customer experiences. We own the Fanatics App, the brand-forward application of Fanatics that encompasses elements of all of our different brands and businesses.
We own the Fanatics App, the mobile app at Fanatics that encompasses elements from all of our different brands and businesses. The Fanatics App brings together Free to Play games, live events, ecommerce, and new product experiences to deliver a best-in-class Sports platform. Fundamentally, we are one team in everything we do, from the user experience to coding and architecture. We aim to deliver on our Customer Promise by delighting our millions of monthly active users.
Responsibilities
Develop, test, document, and deploy high quality software into production
Build features and tools that you and your team use
Participate in the on-call rotation when needed to troubleshoot software issues
Escalate when tasks or projects hit roadblocks
Participate in code reviews to maintain code quality and share knowledge
Contribute to team planning and design discussions, building more expertise around design approaches
Impact software quality and customer experience of product features
Improve testability, operational excellence metrics, and team documentation
Help your team define and adhere to the principles, guidelines, and best practices of our engineering strategy
Develop a fundamental understanding of our industry, product, feature set and roadmap
Work closely with our product team and other internal stakeholders to make technology decisions that grow and improve our products
Help to onboard and mentor junior engineers and interns
Remain current on the latest technologies and trends in software development
Must be open to occasional travel to Fanatics offices and other locations for conferences, events, meetings, and team-building activities
Required Qualifications
5+ years of experience
building highly scalable, performant and evolvable backend distributed systems; proficiency in Spring with Kotlin and/or Java is a plus.
Demonstrated ability
to drive best practices in backend development and mentor others in effective coding and architectural strategies, such as clean code, hexagonal/layered architectures, domain driven design and other design and architectural patterns
Knowledge of observability practices
, including logging, monitoring, and tracing in distributed systems.
Expertise in Agile software delivery
, with a track record of modeling and driving process improvements across teams, and ability to collaborate cross-functionally across diverse teams within large enterprise environments, driving alignment and shared success.
Excellent communication skills
, capable of conveying complex technical concepts clearly and effectively to diverse audiences, including engineers, executives, and non-technical stakeholders.
Team-first mentality
, with a willingness to do what it takes to get the job done and a desire to strive for better.
Thrives in a high-growth
environment where priorities evolve regularly and decisions are made quickly.
Preferred Qualifications
Strong Experience
in the sports industry, gaming and content delivery
Highly effective
with Kotlin, Java and/or Go
Expertise in messaging technologies
such as Kafka or Amazon SQS, with a solid understanding of event-driven architectures.
Comfortable working with
Cloud Native and Infrastructure as Code, like Kubernetes, Helm and Terraform
Ability to work in diverse
codebases, both legacy and greenfield, in different languages and environments
If you possess some of these qualifications but not all of them, we still encourage you to apply!
#LI-AC2
Ranges will change based on country and state of residence, which are reflected in Geographical Zones defined by Fanatics Betting and Gaming. The range incorporates all of our Geographical Compensation Zones and is subject to change as the Zone associated with the actual offer is confirmed. In addition to the base and bonus, full-time employment, and more. For information about our benefits, please visit
https://benefitsatfanatics.com/
Salary Range
$121,000
—
$200,000 USD
By submitting your application, you agree to our terms of service and acknowledge you have read our
Candidate Privacy Policy.
Fanatics will never ask candidates for money, banking information, or other sensitive personal information as part of the interview process. If you receive a suspicious message claiming to be from Fanatics recruiting, please do not respond and report it
here
.
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
Join us at the forefront of AI and cloud-native security as we work to secure one of the most innovative developer platforms in the world. As the Cloud Security Lead, you will shape the cloud and infrastructure security program that protects millions of developers, enables safe AI-assisted development, and ensures organizations can confidently bring our platform into enterprise environments.
In this role, you will own cloud security across GCP (primary) and supplemental environments in AWS and Azure, as well as containerized systems, SaaS platforms, and our multi-tenant AI infrastructure. You’ll improve our security posture through strong architecture, posture management, secure-by-default development practices, and close partnership with Engineering, Compliance, Security Architecture, and Platform teams.
This is a highly impactful, hands-on leadership role—perfect for someone who wants to solve complex security challenges at scale while influencing product, engineering, and go-to-market teams.
WHAT YOU’LL DO:
CLOUD SECURITY ENGINEERING
- Lead configuration hardening across GCP, with additional oversight of workloads and integrations running in AWS and Azure.
- Own and optimize CSPM platforms across multi-cloud environments—establishing configuration baselines, guardrails, and remediation workflows.
- Secure critical SaaS platforms, ensuring proper configurations, access controls, and engineering integrations.
- Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services.
- Enhance security across containerized and Kubernetes (GKE/EKS/AKS) workloads, including runtime protections, network policies, and workload identity.
- Assess secure logging configurations across cloud/SaaS providers, ensuring audit logs, retention, and routing meet monitoring and architecture needs.
SECURE DEVELOPMENT & ARCHITECTURE ENABLEMENT
- Partner with engineering teams to make services secure by default, embedding security into development workflows, CI/CD pipelines, and cloud-native deployments.
CROSS-FUNCTIONAL RESPONSIBILITIES
- Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure.
- Participate in communicating security advisories, best practices, and updates to Replit’s customers.
- Support incident investigations as a cloud security subject-matter expert.
REQUIRED SKILLS & EXPERIENCE:
- 7+ years of experience in cloud engineering, with 3+ years in a senior or lead role.
- Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.).
- Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging).
- Experience securing and governing SaaS platforms and identity integrations.
- Operational experience with infrastructure vulnerability management across cloud and container environments.
- Working knowledge of AWS and/or Azure security services and configurations.
- Experience with container and Kubernetes security across GKE, EKS, or AKS.
- Strong IaC security experience with Terraform, Pulumi, or similar tooling.
- Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS).
PREFERRED QUALIFICATIONS:
- Experience supporting engineering teams in building secure-first, cloud-native or PaaS environments.
- Background securing AI/ML pipelines, model-serving infrastructure, or developer platform services.
- Experience in high-growth technology or cloud-native product companies.
- Experience with securing AI/agentic systems and sensitive data pipelines.
- Automation/scripting with Python.
- Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS/Azure security certs).
WHAT WE VALUE:
- Problem-solving mindset — Ability to break down complex security and operational challenges into clear engineering solutions.
- Autonomy — Comfortable leading initiatives, collaborating effectively, and driving outcomes with minimal oversight.
- Communication excellence — Able to translate deep technical concepts for engineers, executives, and enterprise customers.
- Continuous learning — Passion for staying current with AI security, cloud-native advances, and emerging threats.
- Automation-first approach — Belief in reducing operational toil and building scalable, self-healing systems.
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: United States & Canada
Workplace: Remote
About WorkOS 🚀
WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.
We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.
As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.
ABOUT THE ROLE
The Data team at WorkOS plays a central role on the company operations to ensure information and insights are accurate and available from any surface, whether that's a visualization tool or an agent's response, to accelerate company growth and scale. The team owns WorkOS's internal data platform end to end: ingestion, orchestration, the Snowflake warehouse, dbt transformations, governance and access controls. We also own the consumption layer: the reverse-ETL syncs that land data in Salesforce and Slack, the semantic views that agents query, the definitions that keep reporting consistent across the company, and the visualization tooling the company uses (ask us about Flashboards https://workos.com/blog/reporting-tool-with-no-editor).
We run on an agent-first operating system: we are a lean team that moves fast, we document so agents can execute, and AI agents query the warehouse, run our runbooks, and open pull requests alongside us. We trust each other's expertise, we work out loud and in the open, and not opposed to rapid experimentation to get to the right solution for the business.
We're hiring a Data Engineer to own and evolve the systems that move, transform, protect, and serve data across our internal warehouse. This is a high-ownership role on a lean team: you will be the DRI for the platform and its core data models, partner directly with Product Engineering, RevOps, Finance, GTM Engineering, and Security, and raise the bar on reliability, correctness, and operational rigor. The role spans the platform and what runs on it. You will own ingestion, orchestration, and access governance; the dbt models and metric definitions that depend on them; and how AI is applied across the data stack, so that trusted data is easy for both people and AI agents to discover, understand, and work with.
You don't need to have done this exact job before. The best data engineers at WorkOS are the ones who notice in a Slack thread that a number doesn't match, trace it from the dashboard through the Gold model to the connector, fix the connector, and confirm the definition with its owner before the weekly review. When a business team asks for a field in Salesforce, they don't hand it off; they build the model, write the sync, and add the test. They would rather automate the runbook than run it a third time. They enjoy collaboration with different parts of the business and can find simple, scalable solutions to ambiguous problems. If that sounds like how you work, we want to talk.
RESPONSIBILITIES
- Own the reliability, freshness, and scaling of the ingestion and orchestration pipelines that land source data in Snowflake, including monitoring, alerting, runbooks, and backfill and reprocessing patterns
- Design, build, and scale the core dbt models (Bronze, Silver, Gold) for billing and usage, CRM, product events, and GTM funnel reporting
- Partner with Product, Finance, RevOps, and GTM to define metrics and codify them in the warehouse, and diagnose and resolve data quality and freshness issues at source, not just downstream
- Own Snowflake RBAC, dynamic masking, and PII classification for humans, agents, and service accounts, so sensitive data is protected without blocking legitimate use, and review DDL and access requests from Engineering and GTM
- Own the reverse-ETL layer and the runbooks that deliver warehouse data to Salesforce, Slack, and internal agents
- Extend the semantic views, context, and evaluations that let agents answer business questions accurately, and expand what agents can operate directly, from runbooks and ingestion to pull requests
- Build and advance the CI/CD review gates in the data-platform monorepo, including the automated review that agent-authored pull requests pass through
- Own the infrastructure the data platform runs on: the compute, deployments, secrets and access patterns, and environments behind ingestion and orchestration, with attention to availability and failure modes, in partnership with our infrastructure engineers
Example problems you might work on, possible paths rather than a fixed roadmap:
- Standardizing how Postgres and SaaS sources are ingested, and consolidating end-to-end pipeline deployment and orchestration in Prefect
- Managing Snowflake RBAC, resource management, and masking policies as code with Terraform
- Using query history to improve analytics tables and semantic views, and to keep agent answers accurate and consistent as data grows and metrics shift
- Automating masking coverage as new data sources arrive, so adding a new table no longer needs a human in the loop
- Automating near-certain matches in the Identity Graph
- Pseudonymizing product data in the ingestion path, alongside compliance and data-deletion policies
- Extending transcript aggregation across sources, including PII detection before transcripts enter the warehouse
- Building the reverse-ETL framework and runbooks that deliver data to other tooling and agents
- Running self-hosted data services on Kubernetes and managing their AWS resources (IAM, storage, secrets) as code with Terraform
QUALIFICATIONS
- 5+ years (or equivalent) building and operating production data platforms, including the transformation layer
- Deep experience with Snowflake, dbt, and an orchestrator such as Prefect, Airflow, or Dagster, and with ingesting data from production databases and SaaS sources, including backfill and reprocessing patterns
- Experience running data systems in production: monitoring, alerting, debugging, incident response habits, and pragmatic SLO/SLA thinking
- Experience with warehouse access governance: RBAC, masking policies, and PII handling
- Strong data modeling judgment and an understanding of schema evolution
- Strong SQL and Python; disciplined engineering practices (tests, docs, reviews, CI/CD)
- Proven experience operating as the only engineer on a layer, balancing foundational architecture with urgent business needs
- Working knowledge of how GTM, Finance, and Product teams operate in addition to working with Engineering, and experience translating ambiguous business questions into technical specs
- Comfortable using LLMs and coding agents as part of your day-to-day development workflow, with the judgment to validate their output and scale it into shared processes, and embracing AI and automation to scale platform work and accelerate your teammates
- A systems thinker who reasons carefully about freshness, correctness, and failure modes, especially for data that everything else depends on
- Pragmatic: you start with the simplest solution that works, prove it, then scale it, and you balance fast answers with durable solutions
- You look for where AI can remove a bottleneck for the people and agents who depend on the warehouse, and you build the durable tools and workflows they rely on every day
Benefits and Perks (US Only) 💖
At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.
- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
- 12 weeks fully paid parental leave
- Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
- Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
- Commuter benefits for hybrid employees in SF/NYC
- Unlimited token usage!
Please inquire directly with our recruiting team for benefits available to those working outside the US.
Equal Opportunity Employer
WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Location: Remote (United States | Canada)
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
Our Infrastructure Services organization is responsible for the underlying infrastructure that powers the 1Password application. It includes Compute Services, Network and Edge Services, and Stateful Services.
As a Senior Staff Cloud Platform Engineer, you set the multi-year technical strategy for Infrastructure Services. You decide where the organization invests, define the architecture and standards that every infrastructure team and internal tenant builds on, and make sure our compute, network and edge, and stateful platforms evolve as one coherent system rather than three separate ones. You partner with engineering and product leadership, security, and finance to balance reliability, security, cost, and delivery speed, and you are the senior technical voice for infrastructure across the company.
This is a hands-on role. You write design docs, prototype, review the hardest designs, and step into the most serious incidents. But your main impact comes from making many teams more effective and from the decisions that hold up for years.
How we’re using AI today
Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers.
This is a remote opportunity within Canada and the US.
What we're looking for:
- You have set technical direction across multiple teams. You have owned an infrastructure strategy or architecture spanning several teams or an entire organization, and you can point to the multi-year outcomes: what others adopted, what shipped, and what measurably improved.
- You have operated Kubernetes at production scale. This includes multi-cluster, multi-tenant, customer-traffic-bearing environments (EKS or similar managed platforms preferred). You know it deeply, from autoscaling and admission control to GitOps, workload identity, and fleet-wide cluster upgrades.
- You combine depth with breadth. Beyond Kubernetes, you have working fluency in networking and edge and in stateful data systems, and you understand how a decision in one layer affects the rest.
- You have made reliability a standard, not a project. You defined SLIs, SLOs, and error budgets, and you got multiple teams to adopt them. You have improved incident response, post-incident learning, and disaster recovery across an organization, not just on your own team.
- You have cut cloud costs through engineering. You can show measurable, real-dollar impact from work such as capacity automation, right-sizing, architecture changes, or commitment strategy, and you have worked with finance on forecasting and tradeoffs.
- You build security in by design. You have driven practices such as workload identity, least-privilege IAM and RBAC, credential rotation, and strong isolation in multi-tenant environments, and you have partnered with security teams on risk decisions and compliance requirements.
- You still build. You are proficient in Go (or a similar language) and Infrastructure as Code (Terraform), and you have a track record of automating complex, high-toil operational workflows at fleet scale.
- You influence without relying on authority. You write clear strategy and design documents, present to senior leaders, resolve technical disagreements between teams, and build alignment on difficult tradeoffs.
- You grow other engineers. You have mentored Senior and Staff engineers, raised the bar on design review, and helped shape how your organization hires and evaluates technical talent.
Bonus points for:
- Hands-on experience with service mesh and service-to-service networking, such as Linkerd or Amazon VPC Lattice.
- Experience operating scalable database technology, such as MySQL, Postgres, or DynamoDB.
- Designing developer platform abstractions for internal teams, such as paved-road service toolkits and production readiness frameworks, that measurably improved usability and productivity.
- Helping build AI-assisted operations tools, such as auto-remediation or AI-assisted diagnosis, rather than only using them.
- Operating highly available, multi-region services in a large SaaS environment, including capacity planning and performance optimization at scale.
- Experience in a security, identity, or other high-trust product environment.
What you can expect:
- Set the multi-year technical strategy and architecture for Infrastructure Services, working with directors and senior engineering leadership to shape roadmap and investment decisions, including build versus buy.
- Define the patterns, standards, and guardrails across compute, network and edge, and stateful services that internal teams depend on for years.
- Represent Infrastructure Services in cross-organization reviews with product engineering, security, and finance, and serve as the senior technical voice for the platform.
- Serve as an escalation point for major incidents, and drive organization-wide improvements to incident management, reliability targets, and disaster recovery.
- Lead cost, capacity, and efficiency strategy for our cloud footprint, with measurable goals.
- Drive adoption of automation and AI-assisted operations to reduce toil across the organization.
- Mentor Staff and Senior engineers, raise the bar on design review and engineering practice, and help us hire and develop the next generation of infrastructure leaders.
USA-based roles only: The annual base salary for this role is between $230,000 USD and $334,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $202,000 CAD and $293,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Agvend — B2B SaaS-платформа для агросектора Северной Америки с 8-летним опытом на рынке и ~30% рынка ag-retail в США/Канаде. В компании около 150 человек, из них ~100 в R&D. Полностью удалённая работа с офисами в Канаде, США и на Кипре для желающих.
Стек технологий: Python, Django, DRF, Postgres, ClickHouse, AWS на бэкенде; TypeScript и React на фронтенде. Архитектура — модульный монолит с микросервисами-сателлитами. Используются 5 продакшен Kubernetes кластеров, около 150 тенантов, ~5K RPM. Инструменты CI/CD: CircleCI, Docker/ECR, Helm, Terraform, blue-green деплой.
Задачи:
— Полноценный fullstack: разработка фич end-to-end от API до UI без разделения на бэкенд и фронтенд.
— Владение зоной ответственности: архитектура, code review, ответственность за продакшен.
— Работа с реальной нагрузкой: Postgres и ClickHouse, мульти-тенантность, миллионы записей.
Требования:
— Senior уровень, 5+ лет коммерческой fullstack-разработки.
— Продовый опыт на обоих концах: Python/Django/DRF и React/TypeScript.
— Уверенные знания Python и Django/DRF, опыт работы с Postgres под нагрузкой.
— React и TypeScript на продуктовом уровне, минимум 2 года.
— Самостоятельность, умение вести зону без микроменеджмента, прямое взаимодействие с PM.
— Русский язык — основной рабочий, английский — рабочий уровень.
— Будет плюсом: опыт с ClickHouse, аналитическими БД, highload/финтех, Kubernetes, Helm, Terraform, CircleCI, очередями и распределёнными системами (Kafka, RabbitMQ), идемпотентность.
Условия:
— Работа в сеньорской команде, плоская структура без техлидов.
— Безлимитные отпуска, soft management, отсутствие фиксированных часов, асинхронная коммуникация.
— Оффсайты два раза в год (Кипр и Грузия/Армения).
— Бюджет на обучение, конференции и технику.
— Очень низкая текучка, многие работают по 5–6 лет.
— Коммуникация внутри команды на русском языке.
Контакт для отклика: @cant_exit_vim
Location: Ireland, Dublin
Why Sony Interactive Entertainment?
Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.
We are looking for an inspirational and hardworking person to join the Platform Hosting Cloud Security Engineering team at SIE! You'll be joining a team of innovative engineers who are unified in their mission to make PlayStation the best and most secure gaming platform. This support is fulfilled by minimizing impact to the platform while ensuring security needs are met. This role is highly technical and requires a shown grasp of security principles and how they are applied to production environments. You will assist in the planning, design, development, testing, and management of security tools and processes that provide protection and visibility of our cloud environments.
Key Responsibilities
Design, architect, and implement security controls and frameworks for PlayStation Infrastructure
Be responsible for the detection of security gaps, and lead efforts to mature security tooling and operational processes
Work with product and platform teams to define system requirements, engineer, and implement cloud based security applications and controls
Write code to automate security processes which seamlessly integrate into code builds and deployments, applying DevSecOps processes and tools
Architect, develop, and deploy automation solutions that help audit, secure, and affect changes across multi-cloud environments
Champion tools for improving platform availability using automated protection mechanisms
Document security designs, operating procedures, and technical recommendations clearly. Review existing security policies and maintain their freshness and understandability.
Mentor senior and junior engineers and guide them in making design choices that protect Platform
Advocate for security and privacy best practices across engineering teams.
Qualifications
5-7+ years of experience in cloud security, security engineering, DevOps, platform engineering, or a related field.
Hands-on experience securing cloud infrastructure in AWS, GCP, or both.
Understanding of common security frameworks and compliance concepts, such as NIST or PCI DSS
Proficient in multiple programming and scripting languages such as Python and Go
Experience architecting and deploying IaC tools such as CloudFormation and Terraform
Familiarity with CI/CD and DevOps tools and practices, such as GitHub, Jenkins, Kubernetes, and automated deployment pipelines.
Shown experience building end-to-end enterprise level systems
Hands-on experience with utilizing tooling like Wiz and AI tooling like Codex, etc.
Strong written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams.
Proven record of success in coaching and growing people
Technical certifications or other demonstrations of passion in security and technology such as CISSP, CCSP, AWS Certified Security are a plus!
Strong written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams.
Technical certifications or demonstrated passion for security and technology, such as Security+, AWS Certified Security – Specialty, CISSP, or CCSP, are a plus.
At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.
Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.
In addition, this role
is eligible
for SIE’s top-tier benefits package that includes paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package.
Click
here
to learn more.
The estimated base pay range for this role is listed below.
€87.800
—
€131.800 EUR
Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.
Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.
Equal Opportunity Statement:
Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.
We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.
Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.
Задачи:
— Проектировать и развивать identity-сервисы (SSO, MFA, управление сессиями, федерация).
— Писать чистый, конкурентный и высокопроизводительный код на Go.
— Работать с OAuth 2.0, OIDC, JWT, Keycloak, AWS Cognito.
— Быть внутренним экспертом по безопасности: проводить security reviews и threat modeling.
— Менторить инженеров и участвовать в формировании технического roadmap.
Требования:
— 7+ лет в бэкенде, из них 5+ лет уверенного Go + gRPC.
— Глубокое понимание IAM, OAuth2, OIDC, JWT, криптографии и управления сессиями (опыт от 3-х лет).
— Опыт работы с AWS, Kubernetes, IaC (Terraform / Terragrunt / OpenTofu).
— Понимание OWASP Top 10, принципов secure coding и federated identity.
— Английский от Upper-Intermediate (свободное общение с международными командами).
Условия:
— Локации: Albania, Azerbaijan, EU, Georgia, Macedonia, Serbia, Slovenia.
— Формат: удаленка, гибрид или офис.
— Возможность зарабатывать до +1000 EUR/мес за участие в жизни компании (входит в годовой бонус).
— Компенсация сертификаций (AWS, PMP и др.), доступ к корпоративному порталу обучения, менторство.
— ДМС и компенсация спорта (зависит от типа оформления).
seniorАлбания, Азербайджан, Грузия, Северная Македония, Сербия, Словения
Hybrid - San Francisco, New York City, Austin
УдалённоseniorRemote, Canada; Remote, United States; The base salary range for this role’s listed level is currently for residents of the United States only
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ГибридleadСША; 💹 401(k) Program with a 4% match (US Only); 🚗 Commuter Benefits (In-Office & US Only); We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds
УдалённоUnited States & Canada; Benefits and Perks (US Only) 💖