Задачи:
— Развивать и администрировать CI/CD на Jenkins: Groovy-пайплайны, shared libraries, агенты, кэширование, работа с артефактами.
— Администрировать Bitbucket: права доступа, защита веток, merge checks, шаблоны pull request, интеграция с Jenkins. Совместно с тимлидом поддерживать branching policy и правила ревью, обеспечивать техническую блокировку слияния до прохождения проверок.
— Внедрять и поддерживать анализ состава ПО и уязвимостей: SCA, генерацию SBOM, отслеживание CVE, SAST/DAST, сканирование образов и контейнеров, проверку лицензий.
— Поддерживать и развивать инфраструктуру тестовых стендов: развёртывание ОС и образов, PXE, автоматическая установка, проверка образов. Минимум ручной работы, максимум IaC (Terraform+Ansible).
— Развивать мониторинг на Prometheus + Grafana: метрики, алерты, дашборды. Поддерживать и развивать резервное копирование.
— Автоматизировать рутину на Python и Bash.
— Работать с артефакт-репозиториями, сборкой и пакетированием RPM/DEB.
— Взаимодействовать с командой разработки по сборочным вопросам, включая поддержку сборочного окружения для Yocto/BitBake. Глубокой разработки рецептов не требуется, важнее обеспечить инфраструктуру и автоматизацию вокруг сборки.
— Развивать стандарты CI/CD, участвовать в архитектуре сборочной и тестовой инфраструктуры, делиться знаниями с командой.
Требования:
— Опыт работы DevOps-инженером от 6 лет, включая построение CI/CD-пайплайнов с нуля.
— Уверенное администрирование Jenkins и написание Groovy-пайплайнов.
— Опыт работы с Terraform и Ansible: описание инфраструктуры и конфигураций как кода, идемпотентность, версионирование, ревью, управление дрейфом конфигураций.
— Понимание принципов IaC и стремление максимально следовать им: никаких «настроил руками и забыл».
— Опыт администрирования Git-платформ: Bitbucket обязательно, GitLab или GitHub - как плюс. Понимание ветвления, политик pull request, защиты веток и merge checks.
— Владение Linux на уровне администрирования: systemd, сетевой стек, анализ производительности, отладка.
— Автоматизация на Python и Bash.
— Опыт сборки и пакетирования RPM/DEB или аналогов, работа с репозиториями артефактов.
— Опыт развёртывания ОС и образов: PXE, автоматическая установка, проверка образов.
— Знакомство с виртуализацией и контейнерами: KVM/ESXi, Docker.
— Опыт внедрения SCA/SBOM, отслеживания CVE, SAST/DAST.
— Опыт настройки мониторинга на Prometheus + Grafana и схем резервного копирования.
— Понимание сетевых технологий: Ethernet, VLAN, адресация и маршрутизация.
— Опыт работы с Jira и Confluence или аналогами.
— Уверенное чтение технической документации на английском.
Будет плюсом:
— Опыт сборки и выпуска релизов для программно-аппаратных комплексов, а не только классического ПО.
— Опыт миграции ручных стендов и инфраструктуры в IaC.
— Опыт с GitLab CI или GitHub Actions.
— Опыт работы с серверным железом: BMC/IPMI, удалённое управление серверами стендов.
— Понимание архитектуры СХД и протоколов доступа к данным: FC, iSCSI, NVMe-oF, NFS/SMB.
— Понимание требований лицензирования open-source и их совместимости с моделью поставки.
— Знакомство с SVN.
— Понимание Yocto Project/BitBake на уровне поддержки сборочной инфраструктуры, а не разработки.
Условия:
— Формат работы готовы обсуждать исходя из пожеланий соискателя.
— Офис: БЦ West Plaza, ул. Рябиновая, д. 26с2 (корпоративный автобус от м. Славянский бульвар).
— График работы: 5/2 с гибким началом рабочего дня (08:00, 09:00, 10:00).
— Сокращенная пятница на 1 час.
— Уровень заработной платы обсуждается с успешным кандидатом.
— Расширенный пакет ДМС со стоматологией, либо абонемент в фитнес-клуб "World Class".
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Location: Dubai, UAE
What you will do as a Customer Engineer
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value—guiding enterprise clients from initial pre-sales technical validation through onboarding, deployment architecture, and full lifecycle expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the entire customer journey.
Regional Focus: Ankara, Turkey
Key Responsibilities
Technical Validation:
Partner closely with Account Executives to lead technical deep-dive discovery, capture business requirements, and map complex customer infrastructure - DNS, CDN, Zero Trust, Network Security, Workers - to fit-for-purpose Cloudflare architectures and bespoke solutions. . Define, scope, success criteria, and technical evaluations plans for Proof of Concepts (PoCs) and Technical Validations. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, and reliability challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Provide oversight to technical onboarding and implementation, but not execute the implementation, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer’s environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance), and act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for C-level executives.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, AI control layers, security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Leverage AI agents, Large Language Models (LLMs), and internal platforms to automate routine tasks such as RFP/Security Questionnaire responses, sandbox provisioning, basic telemetry monitoring, and internal/external documentation, reclaiming your time for strategic customer advisory.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization.
Minimum Qualifications
Fluency in English and Turkish (written and spoken).
Experience: Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling).
Architectural Mindset: Ability to white-board, design, and articulate complex enterprise network and security architectures clearly.
Consultative & Advisory Skills: Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives.
Commercial Mindset: Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise sales cycles.
Communication: Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy.
Technical Breadth: We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals: Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security: Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance: Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Proficiency: Familiarity with prompt engineering, AI-assisted scripting and log analysis, LLM utilization, and workflow automation to augment everyday CE workflows.
Coding/Scripting: Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency: Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Strongly Preferred Qualifications (The "Good-to-Haves")
Technical Enablement: Track record of creating and delivering technical enablement - workshops, code samples, documentation, or developer onboarding - that accelerates customer adoption of complex platforms.
Applied AI Knowledge: Experience with LLM orchestration, Retrieval-Augmented Generation (RAG) architectures, and model-access controls.
Regulatory Knowledge: Understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC 2.
Hyperscaler / Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency and advanced architecture depth.
Education
Undergraduate or graduate degree in Computer Science, Engineering, or a related field.
Travel
This role may require travel up to 20–50% to attend customer meetings, conferences, industry events, and in-person team collaboration.
Compensation
This role features a competitive base salary and a variable compensation structure tied directly to the successful execution of full-lifecycle commercial targets, including new business acquisition, ongoing adoption milestones, and overall account expansion.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Location: Dubai, UAE
What you will do as a Customer Engineer
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value—guiding enterprise clients from initial pre-sales technical validation through onboarding, deployment architecture, and full lifecycle expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the entire customer journey.
Regional Focus:
Saudi Arabia
Key Responsibilities
Technical Validation:
Partner closely with Account Executives to lead technical deep-dive discovery, capture business requirements, and map complex customer infrastructure - DNS, CDN, Zero Trust, Network Security, Workers - to fit-for-purpose Cloudflare architectures and bespoke solutions. . Define, scope, success criteria, and technical evaluations plans for Proof of Concepts (PoCs) and Technical Validations. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, and reliability challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Provide oversight to technical onboarding and implementation, but not execute the implementation, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer’s environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance), and act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for C-level executives.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, AI control layers, security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Leverage AI agents, Large Language Models (LLMs), and internal platforms to automate routine tasks such as RFP/Security Questionnaire responses, sandbox provisioning, basic telemetry monitoring, and internal/external documentation, reclaiming your time for strategic customer advisory.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization.
Minimum Qualifications
Fluency in English and Arabic (written and spoken).
Experience: Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling).
Architectural Mindset: Ability to white-board, design, and articulate complex enterprise network and security architectures clearly.
Consultative & Advisory Skills: Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives.
Commercial Mindset: Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise sales cycles.
Communication: Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy.
Technical Breadth: We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals: Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security: Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance: Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Proficiency: Familiarity with prompt engineering, AI-assisted scripting and log analysis, LLM utilization, and workflow automation to augment everyday CE workflows.
Coding/Scripting: Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency: Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Strongly Preferred Qualifications (The "Good-to-Haves")
Technical Enablement: Track record of creating and delivering technical enablement - workshops, code samples, documentation, or developer onboarding - that accelerates customer adoption of complex platforms.
Applied AI Knowledge: Experience with LLM orchestration, Retrieval-Augmented Generation (RAG) architectures, and model-access controls.
Regulatory Knowledge: Understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC 2.
Hyperscaler / Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency and advanced architecture depth.
Education
Undergraduate or graduate degree in Computer Science, Engineering, or a related field.
Travel
This role may require travel up to 20–50% to attend customer meetings, conferences, industry events, and in-person team collaboration.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: New York City, New York
What you’ll be part of
Garner is on a mission to transform the U.S. healthcare system — and we’re the only proven player doing exactly that. We partner with employers to redesign how healthcare works: applying 550+ proprietary clinical metrics across 80+ specialties to a dataset of 320M+ patients to identify the best-performing doctors, then using compelling incentives to steer members to the care that helps them get healthier, faster.
The result is a rare “win win” — better care and lower costs for both members and employers. In just five years, our work has helped over 2.5 million people access higher-quality care and saved $1B in healthcare costs. We recently raised our Series E and have doubled five years running. If you've ever wanted your work to solve a problem that touches every person in this country, this is the opportunity to do exactly that. You'd be joining a team fundamentally reimagining healthcare in the U.S. — and using AI to scale that impact further and faster than anyone else can.
About the role:
We are seeking an execution-focused and visionary Data Engineering Manager to lead our Data Platform Team. In this critical role, you will manage a team of talented engineers dedicated to building the common, reusable abstractions and high-throughput data infrastructure that power Garner’s internal and external applications. You will champion an AI-native development philosophy and scale our data pipeline capabilities, ensuring our systems seamlessly support the heavy computational demands of our next phase of company-wide growth.
Where you will work:
This role will be based in our New York City office (in the Financial District). You must be willing to work in the office 3 days per week on Tuesday, Wednesday and Thursday.
What you will do:
Lead and manage the Data Platform Engineering team, owning the end-to-end design, implementation, and operational excellence of systems that process complex healthcare data
Provide high-quality technical contributions and architectural guidance, establishing robust standards for data modeling, processing, and system maintainability
Build and optimize common data abstractions, pipelines, and frameworks designed for high scalability, ensuring our platform keeps pace with exponential enterprise data growth
Translate complex, ambiguous business and data requirements into well-scoped, accurately estimated, and composable architectural pieces
Foster and drive an AI-native engineering culture within the team, integrating cutting-edge AI tools and integrations to enhance development workflows and automate data operations
Manage and grow stakeholder relationships across Engineering and Product, aligning team priorities with departmental OKRs and broader business goals
Mentor, coach, and guide your team members, conducting detailed design reviews and managing robust Root Cause Analyses (RCA) to continuously elevate technical rigor
The ideal candidate has:
5+ years of hands-on engineering experience, with a focus on Big Data and distributed system and infrastructure
2+ years of managing engineering teams, with a track record of building and mentoring high performing teams
Expertise with batch data processing frameworks such as Hadoop, Spark, EMR, etc.
Experience with stream processing systems such as Kafka and RedPanda
Proficiency with technologies such as Temporal, Apache iceberg, AWS glue, Spark, DBT, and Soda
Exhibits strong ownership and a proactive mindset, with a proven ability to translate complex business needs into scalable, actionable technical roadmaps
Demonstrated ability to operate effectively in dynamic, fast-paced startup environments, with a hands-on approach and a strong commitment to organizational success
Preference for managing healthcare data standards (e.g. HIPAA, EDI)
A desire to be a part of our mission to improve the U.S. healthcare system
A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback
Technologies we use:
Python, Spark, dbt, SnowFlake, Iceberg, Airflow, OpenMetadata, Kubernetes, NATS, AWS, Terraform, Claude Code
This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare.
What you'll get here:
You’ll work on problems that matter, at a company working to change healthcare at scale. You’ll work at the intersection of AI and systemic healthcare reform, where the problems we solve are as interesting and compelling as the mission.
At Garner, you’ll take on real, ambitious problems with real ownership and autonomy, alongside exceptional, principles-based people who genuinely want you to win. It’s demanding by design. You’ll be challenged to stretch beyond what you thought possible and receive consistent coaching to help you grow and do the best work of your career. This isn't the right fit for everyone, and that's intentional. The people here are driven by what's at stake for real people, and that's what gives our intensity its purpose.
Compensation Transparency:
The target salary range for this position is $310,000 - $385,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more.
Fraud and Security Notice:
Please be aware of recent job scam attempts. Our recruiters use
getgarner.com
and
garnerhealth.com
email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement
here
and to
candidateprotection@garnerhealth.com
.
Equal Employment Opportunity:
Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.
Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at
talent@garnerhealth.com
.
Location: London
500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating.
Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down.
With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better.
The job
This role unites Security and Infrastructure under a single organizational mandate to ensure security practices align directly with rapid engineering execution and platform scalability. Flo Health protects the data of over 80 million monthly active users, holding ISO 27001 and ISO 27701 certifications alongside privacy-first features such as Anonymous Mode. The VP of Security & Infrastructure is accountable for maintaining and elevating these security, privacy, and architectural standards across the organization. We are building organisation where secure is the default path and the fast path.
Core Ownership & Responsibilities
1. Security Strategy & Governance
Security Stategy and Roadmap:
Develop, evolve and communicate Flo’s security strategy and roadmap, promoting strong shared security ownership culture.
Security Programme:
Oversee all aspects of Flo’s security programme, risk management, security architecture, product security, and security operations, including embedded security engineering functions.
Data Protection & Governance:
Define and enforce standards for storing, protecting, and deleting personal and health data across production systems, analytics warehouses, AI model training sets, backups, and search indexes.
Regulatory & Compliance Engineering:
Deliver and oversee the performance of technical controls, automated evidence extraction, and ongoing compliance for ISO 27001, ISO 27701, SOC 2 Type 2, HIPAA, EU AI Act, and Cyber Resilience Act.
Third-Party & Supply-Chain Risk:
Establish evaluation criteria and ongoing governance controls for vendors, SDKs, and external partners accessing internal environments or data.
Vulnerability Management:
Oversee the management life cycle of code, third party and platform vulnerabilities, ensuring remediation paths are transparent, risk-based, and tracked to closure.
Security Operations & Incident Response:
Oversee detection engineering, continuous threat monitoring, and serve as the accountable executive for major incident escalations.
2. Platform & Infrastructure Engineering
Cloud & Developer Infrastructure:
Own GCP and AWS multi-account architecture, Kubernetes, Terraform, and developer platform delivery to drive down lead times and change failure rates.
Secure SDLC: embed technical security requirements across the development lifecycle, optimising automated security controls within CI/CD pipelines, and ensuring well informed platform and product security architecture decisions drive strong protection, resilience and scalability.
Corporate IT & Access Controls:
Manage IT service provision, including identity, hardware devices, collaboration tools and joiner-mover-leaver lifecycle workflows through automated, self-service access controls.
3. User Identity & AI Security
Product Identity & Access Management:
Direct cross-functional roadmaps for user facing security services and account safety, including authentication, sessions management, and cryptography,while balancing conversion metrics with security controls.
AI & Machine Actor Security:
Establish governance, scoping, permissioning, appropriate security guardrails and auditing for AI-assisted engineering agents and consumer-facing AI features.
4. External Trust and Transparency
Advocate for Security In FemTech:
Set and continually raisethe bar as market leader, executing transparent and proactive external communications and raising Flo's security profile through external events and industry engagement.
Key Qualifications & Technical Requirements
Leadership Experience:
Proven track record of managing combined or parallel Security and Production Infrastructure functions at consumer scale (tens of millions of active users).
Product Integration:
Demonstrated experience partnering with Product, Design, and Mobile/Backend Engineering teams to ship user-facing features to roadmap.
Audit Track Record:
Successful execution and ongoing maintenance of ISO 27001, SOC 2, HIPAA, or equivalent certification frameworks through external audits.
Data Privacy Systems:
Deep technical experience implementing GDPR, automated data deletion, retention policies, DPIAs, and cross-border transfer controls programmatically.
AI Governance & Security:
Practical implementation experience securing AI models, autonomous code/development agents, and automated permission/audit systems.
Preferred Qualifications:
Experience with consumer sign-in optimization, health/biometric data protection, in-house offensive security engineering, and mobile platform security.
Annual Salary Range (ranges may vary based on skills and experience)
£200,000
—
£220,000 GBP
How we work
We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar.
You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it.
What you'll get
We support impact with meaningful reward. Here’s what that looks like:
Competitive salary and annual reviews
Opportunity to participate in Flo’s performance incentive scheme
Paid holiday, sick leave, and female health leave
Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents
Accelerated professional growth through world-changing work and learning support
In-person collaboration and work in a hybrid model, with 3 days per week spent in the office
5-week fully paid sabbatical at 5-year Floversary
Flo Premium for friends & family, plus more health, pension and wellbeing perks
Diversity, equity and inclusion
Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our
privacy notice for job applicants
.
Location: Amsterdam, Netherlands
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
About the team
The Customer Experience team at Nebius handles thousands of requests every month — quota applications, billing operations, planned enterprise cluster upgrades, and incident notifications. Volume has grown 130% over seven months and continues to grow alongside our customer base.
We are building a dedicated automation team to turn repetitive manual work into scalable, maintainable systems: LLM-powered agents, self-service flows, and infrastructure tooling. The goal is to make Customer Service capacity independent of headcount growth.
The role
We are looking for a technical leader to build and lead this team. You will start as an individual contributor, establishing the technical foundation, then take on management responsibilities as the team grows — without stepping away from hands-on engineering work.
Your responsibilities will include:
Design and build automated systems that handle thousands of support operations per month — quota requests, billing, account management, DSR
Develop LLM-powered agents that help support engineers resolve complex tickets in real time
Create tooling for planned cluster operations: Terraform automation, runbook execution, Soperator integration
Build self-service flows that reduce load on the support team without degrading the customer experience
Hire and grow a team of automation engineers
Define the technical roadmap together with the Head of Customer Service
Build integrations with Jira, billing APIs, and internal Nebius systems
Track key metrics: automation rate, ticket deflection, engineer hours saved
We expect you to have:
7+ years of software engineering experience, including 2+ years as a tech lead or engineering manager
Strong Python skills and hands-on experience with REST APIs and system integrations
Experience building automation pipelines or workflow systems in production
Practical experience with LLM APIs and building AI agents
Experience working with ticketing systems (Jira or equivalent) at the API level
Fluency in English, written and spoken
It will be an added bonus if you have:
Experience with Terraform and infrastructure automation
Knowledge of Kubernetes and cloud-native stack
Experience with
N8N
, Temporal, or similar workflow automation tools
Understanding of cloud billing, quota management, and compliance workflows
Background in support engineering, DevOps, or customer success engineering
Examples of outcomes you could drive:
Automate quota request processing and free up the equivalent of 2,400+ engineer hours annually
Build an internal Q&A agent that reduces response time on complex Chat tickets from 30 minutes to under 5
Develop cluster upgrade tooling that compresses a multi-day operation into a matter of hours — as the number of enterprise clusters keeps growing
#LI-SS1
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits.
As Anthropic scales to meet public-company standards, the Sarbanes-Oxley (SOX) control environment over our technology stack is one of the most consequential things this team owns. As part of Security GRC's technical controls assurance function, you will be the voice on what the IT general controls must achieve to support SOX 404 compliance. In partnership with Internal Audit, you will define control requirements and acceptance criteria for the in-scope engineering systems and infrastructure that underpin financial reporting. You will pair with engineering as they design and implement against those requirements, and validate that what ships actually meets the bar before Internal Audit and our external auditors test it. You are the product owner for control design methodology and continuous control monitoring, initially around ITGCs, but extending into other areas of security and compliance to drive visibility where and when we need it.
Key responsibilities
Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, computer operations, and program development for SOX in-scope systems, including home-built platforms where the control has to be designed into the system rather than bolted on.
Set the bar for in-scope systems from day one. As financially significant systems are built, migrated, or replaced, define what the system must provide (auditability, segregation of duties, change control, immutable logging, evidence retention) before go-live, so controls are not retrofitted after the fact.
Pressure-test changes for SOX impact during design. Review major infrastructure, system, and agent framework changes for control impact while decisions are still cheap, and maintain a clear view of which changes alter the SOX scope, key control population, or evidence requirements.
Own second-line control monitoring and evidence readiness. Stand up continuous controls monitoring and automated evidence collection for ITGCs (control testing, walkthrough preparation, population and completeness validation, and mapping to the common controls framework). Materially raise automated evidence coverage and cut audit prep time.
Drive control deficiency remediation with cross functional partners. Track and root-cause ITGC deficiencies surfaced by monitoring, Internal Audit, or external audit; partner with engineering owners on remediation design; and assess whether remediation actually closes the gap before re-testing.
Assess scope changes through a SOX lens. When new products, entities, systems, or integrations come into scope, provide technical and compliance assessment of their impact on control design, evidence requirements, and engineering effort before commitments are made.
Maintain alignment with the broader compliance portfolio. Where SOX ITGCs overlap with SOC 2, ISO 27001/42001, or other frameworks, ensure controls are designed once and evidenced once, and that changes made for one framework do not silently break another.
Minimum qualifications
Thrive at the pace of a hypergrowth company. You're comfortable making calls with incomplete information and reprioritizing as scope shifts.
Have led or been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company, with a working command of PCAOB AS 2201, COSO 2013, and how external auditors scope, test, and evaluate technology controls and deficiencies.
Have genuine engineering fluency, possibly from an earlier engineering career: you can read code and Terraform, follow a CI/CD pipeline end to end, and challenge a design on its technical merits.
Have programming skills in Python or at least one systems language such as Go, Rust, or C/C++.
Have deep familiarity with developer platform, release engineering, cloud infrastructure, or ERP/financial systems control domains.
Understand the role of the second line: you can advise and challenge engineering without taking ownership of their controls, and you know where the line sits between your monitoring and Internal Audit's independent testing.
Are a strong collaborator and communicator across Finance, Engineering, Internal Audit, and external auditors.
Use Claude and other LLMs as daily working tools, and have grounded, specific views on which SOX assurance workflows AI can run today and which it can't yet.
Translate SOX and framework language into acceptance criteria engineers can build against, and translate engineering reality back into assurance language auditors and leadership can rely on.
Default to getting the requirement designed into the system rather than papering over the gap with procedure.
Preferred qualifications
A combination of audit or advisory experience (Big 4 or equivalent, ideally IT audit) with in-house experience at an AI-forward tech company, in either order.
Taken a company through a first-year SOX 404(a) and 404(b) assessment, including a first external ITGC audit.
Defined or assessed controls over home-built financially significant systems, usage-based billing, or revenue metering pipelines.
Defined or assessed controls for AI/ML systems or agents acting in production environments.
Stood up continuous controls monitoring or automated evidence programs.
Experience with SOC 1 reliance, service organization control mapping, and complementary user entity controls.
CISSP, CISA, CPA, or equivalent certification.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$410,000
—
$510,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Dublin, Ireland
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT US:
Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money.
In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays.
ABOUT THE ROLE:
Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day.
We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role.
You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day.
WHAT YOU'LL ACHIEVE:
- Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS.
- Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS.
- Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools.
- Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
- Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection.
- Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse.
- Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream.
- Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.
SKILLS YOU NEED TO BRING:
- Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.
- Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).
- Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
- Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration.
- Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors.
- Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.
- Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC.
NICE TO HAVES:
- Experience at a fast-growing tech or AI company where the security program had to outpace headcount.
- A background in IT engineering, SRE, or production engineering that transitioned into security engineering.
- Experience building internal security tooling or workflows that improved employee or developer experience.
- Contributions to the security community through open-source tools, blog posts, or conference talks.
We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: United States (Remote)
Workplace: Remote
About Teleport
Don't wait for the future of infrastructure. Be part of it.
Teleport is the AI Infrastructure Identity Company. We're solving one of the hardest problems in security: giving every human, machine, workload, and AI agent a cryptographically secured identity, improving engineering velocity while maintaining security. We make trusted computing simple. This gives you the freedom, power, and autonomy to build and innovate with confidence.
Remote-first and globally distributed, we work with companies like Nasdaq, DoorDash, and Elastic to secure infrastructure for an AI world.
HERE IS WHY WE LOVE THIS JOB OURSELVES, AND HOPE YOU WILL ENJOY IT TOO:
- We work on a wide range of IT projects including automation, security, networking, and building integrations.
- We value modern IT tooling and novel approaches to traditional problems.
- We prefer working autonomously and asynchronously, proactively identifying and addressing issues, and operating with a builder's mindset.
- We practice thorough code reviews and have an open design process.
- Our products are loved by their users.
HERE ARE THE PROJECTS YOU MAY BE WORKING ON:
- Administering our core IT stack (Okta, Jamf, Google Workspace, Chrome Enterprise).
- Creating new workflows and integrations both within our IT stack and with other systems and platforms across Teleport.
- Hardening our macOS endpoints and securing our SaaS services.
- Building upon our IT workflow automation tooling written in Go and using Temporal running on Kubernetes.
- Collaborating with the engineering team on dogfooding Teleport, specifically Teleport Identity (identity governance), Teleport Policy (access policies), and Beams (runtime for agentic workflows).
- Governing and securing corporate generative AI usage.
- Providing IT support to internal users as needed.
REQUIREMENTS:
- Strong knowledge of modern IT platforms such as Okta, Jamf, Google Workspace, Google Chrome Enterprise, Zoom, and Slack.
- Hands-on experience administering and hardening macOS endpoints.
- Deep understanding of corporate IT identity, automation, and security concepts.
- Experience (and a preference for) building with IaC/Terraform and CI/CD with GitOps.
- Scripting experience with shell and object-oriented programming experience.
- Experience with Go is a plus.
- Experience with Linux systems administration and engineering.
- Willingness and ability to roll up your sleeves and work on traditional IT tasks when needed, such as managing our internal facing helpdesk.
WHAT TO EXPECT ONCE YOU APPLY:
- You will join a 30-minute intro call where we will walk you through the compensation, interview process, and requirements.
- We’ll invite you to a Slack channel and you’ll work on a coding challenge using Terraform and shell scripts (or Go) on GitHub.
Why Teleport
You're joining a company where the problem is real, the team is small, and your work shows up directly in the product. We're not a big company, you won't get lost in a crowd. You'll have the freedom and autonomy to do what you're great at, alongside teammates who care about doing it right and want to see you succeed. The work is collaborative, there's real room to grow, and the mission is one worth showing up for.
Remote-first and globally distributed, we're genuinely passionate about what we're building.
The Benefits
At Teleport, we believe your career is more important than a list of perks. That's why we focus on making your day-to-day the best it can be — giving you the autonomy, access, and support to do the best work of your career.
- Extensive health coverage
- Annual expense budget
- Rest and recovery policies that maximize your ability to recharge
- Investment in your future with retirement savings plans
- Professional development opportunities
Teleport is an equal opportunity employer and does not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classifications protected by federal, state, or local law.
Candidate Privacy Notice: For information about our collection and processing of job applicant personal data for this position, please see our Job Applicant Privacy Policy and Notice of Collection at goteleport.com/legal/apply/job-applicant/ http://goteleport.com/legal/apply/job-applicant/
Location: Boston, Massachusetts, United States
We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.
Job Overview
The Senior Network Engineer leads Wizards of the Coast's enterprise network — datacenters, corporate offices, studios, and AWS cloud. Our stack runs on a Juniper/Mist campus fabric, a Palo Alto Networks security edge, and cloud-native AWS connectivity. You'll set technical direction, drive complex initiatives end to end, and mentor the broader team. Your work keeps the network that connects our datacenters, offices, studios, and cloud environments secure, reliable, and ready to support the teams creating our games.
Location and Work Arrangement
This role is based at our Boston, Massachusetts office and follows a hybrid schedule designed to support in-person collaboration. Employees are expected to work onsite on Tuesdays, Wednesdays, and Thursdays, with the flexibility to work remotely or onsite on Mondays and Fridays.
What You'll Do
Own the architecture, build, and roadmap for our Juniper/Mist campus and branch infrastructure, and lead its evolution across sites and business units.
Lead the Palo Alto Networks security stack, from policy architecture to secure-by-design standards across teams.
Own end-to-end AWS cloud network implementation — Virtual Private Cloud (VPC), Transit Gateway, Direct Connect/VPN, Route 53 — and hybrid connectivity, including Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), and Software-Defined Wide Area Network (SD-WAN) traffic engineering at scale.
Drive automation and AI adoption across network operations, from config deployment to AI-powered monitoring, observability, and root-cause analysis.
Be the go-to for critical issues, and mentor less-experienced engineers through code review, troubleshooting, and skill-building.
What You'll Bring
At least 10 years of experience in enterprise network engineering — routing, switching, wireless — or equivalent demonstrated experience, with deep expertise in Juniper (EX/QFX/SRX, Mist) and/or Cisco (Catalyst, Nexus), plus hands-on work with intelligent ops tools like Mist/Marvis at scale.
Expert-level Border Gateway Protocol (BGP), Open Shortest Path First (OSPF), Software-Defined Wide Area Network (SD-WAN), and load balancing experience, including designing and building these solutions from the ground up.
Extensive Palo Alto Networks firewall experience, including policy architecture and Panorama at enterprise scale.
Proven AWS production experience — Virtual Private Cloud (VPC), Transit Gateway, Direct Connect/VPN, Route 53, security groups, CloudWatch, DNS, Dynamic Host Configuration Protocol (DHCP), IP Address Management (IPAM) — with the judgment to make platform decisions independently.
Hands-on use of AI tools like Mist/Marvis and coding assistants (Claude, Copilot) to power automation and network ops, plus a track record of leading cross-functional work and mentoring engineers.
What Sets You Apart
Active advanced certifications: Cisco Certified Internetwork Expert (CCIE), Juniper Networks Certified Internet Expert (JNCIE), AWS Advanced Networking Specialty, or AWS Solutions Architect Professional.
Prisma Access / Secure Access Service Edge (SASE) deployment leadership, or Palo Alto Cloud Identity Engine (CIE) build ownership.
Terraform or Ansible pipelines you've built and owned in production — not just maintained.
Experience in a multi-studio, multi-business-unit (BU) entertainment or gaming environment, or another complex, highly distributed org.
Who We Are
We’re a team of creators, storytellers, and innovators united under the Hasbro family and home to beloved brands, AAA digital games studios and immersive experiences that spark imagination across generations. Together, we’re committed to a culture rooted in creativity, excellence, curiosity, and inclusion, and where every employee is empowered to think boldly, act with integrity, and spark joy for all.
Hasbro
About the Company – Hasbro
Wizards of the Coast
Who We Are – Wizards of the Coast
Equal Opportunity
Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status.
Accommodations
If you have a disability and need reasonable accommodation during the hiring process, please inform your recruiter anytime throughout the process.
Notice Regarding Hasbro’s use of AI in the Recruitment Process
We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements.
How it works: Talent Matching compares information from your resume and application responses with job-related criteria established and weighted by Hasbro’s recruiting and hiring teams. Depending on the role, these criteria may include relevant skills, work experience, prior job titles, and industry experience. The tool then assigns a match category to help organize applications for review.
Human oversight: Talent Matching supports — but does not replace — human review. It does not automatically advance or reject candidates or make employment decisions. Hasbro’s recruiters and hiring managers review applications and remain responsible for all hiring decisions.
Greenhouse has published the results of an independent bias audit of Talent Matching.
View the Greenhouse Talent Matching audit results
.
The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package.
Pay Range
$119,600
—
$179,500 USD
Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:
Health & Wellness
Time Off to Recharge
Financial Well-being
Life & Family Support
Volunteer and Community Initiatives
Learning & Development
Exclusive Perks
Please review our
Applicant Privacy Notice
to learn how we collect, use, and protect your personal information in connection with the application process.
Location: Remote
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
Site Reliability Engineers keep GitLab's user-facing services and production systems running reliably at scale. They combine software engineering with operational excellence, applying sound engineering principles, automation, and continuous improvement to build, operate, and evolve our production infrastructure.
This is a single application for Site Reliability Engineering opportunities across Infrastructure Platforms. Rather than asking you to choose the right team or level upfront, we evaluate your skills holistically and match you to the opportunity that best aligns with your experience and our hiring needs. We hire Site Reliability Engineers from Intermediate through Senior Staff across multiple Infrastructure Platforms teams.
We don't expect every candidate to have experience with every technology in our environment. We're looking for engineers with strong technical fundamentals, a growth mindset, and the ability to learn quickly. We'll support you in becoming successful with GitLab's tools, systems, and ways of working.
Please note: This position is open to candidates based in the United Kingdom only. Candidates based in the United States or Canada can apply to this posting:
Site Reliability Engineer, Infrastructure Platforms — AMER (Intermediate to Senior Staff)
How our SRE hiring works
Because this is a single application for SRE roles across Infrastructure Platforms, our process is built to evaluate you once and match you well, rather than interviewing separately for every team.
Recruiter Screen:
A conversation about your background, what you're looking for, and the level and teams that fit, so we can point your process in the right direction.
Core Technical:
The shared assessment every SRE candidate takes, regardless of eventual team. A low-stress, collaborative discussion covering system architecture and incident review.
Hiring Manager Interview:
A conversation about ownership, judgment, execution, collaboration, and growth, the non-technical signals that make an SRE effective at GitLab.
Peer Technical:
Team-specific depth, run by SREs from the team you're most likely to join, focused on the problems that team actually works on.
Skip-Level Interview:
A conversation with a senior leader on values alignment, and how you'll work across teams.
After your interviews, we consider your performance alongside our current hiring needs to confirm the level and team where you'll do your best work. Interview results are a major factor, and final placement also reflects our active hiring priorities at the time.
We’ll calibrate your level throughout the interview process based on the scope and impact of your experience.
Intermediate: You independently deliver meaningful reliability improvements within a defined area.
Senior: You own complex reliability work end to end and raise the effectiveness of your team.
Staff: You shape reliability across multiple teams, solving systemic problems and creating approaches others can reuse.
Senior Staff: You set technical direction across a broader Infrastructure area and influence reliability strategy at organizational scale.
What you'll do
Keep user-facing services and production systems reliable, scalable, and efficient
Build automation and tooling that reduces toil and replaces manual work with repeatable, infrastructure-as-code-driven workflows
Operate and troubleshoot production systems on Kubernetes, including deployments, rollouts, and scaling
Write and maintain infrastructure as code, and ship changes safely through CI/CD and GitOps
Participate in on-call, triage alerts, follow and improve runbooks, and escalate appropriately
Contribute to the observability stack, using metrics, logs, and SLOs to detect symptoms early rather than just outages
Take part in incident response and post-incident reviews, turning learnings into changes in automation and process
Document runbooks, architecture decisions, and reviews so your findings become repeatable practices
Take part in on-call or operational support where your team’s ownership model requires it.
What you'll bring
Experience keeping production systems reliable, combining an operations mindset with real software engineering practice
Experience building net-new infrastructure tooling and automation, not just configuring existing tools. For example, Terraform modules, Kubernetes operators or controllers, or production automation and services written from scratch
The ability to read, debug, and reason about code. Most of our teams work in Go; some work in Ruby. You can discuss a piece of code's behavior, performance, and failure modes
Experience with infrastructure as code, and with Kubernetes and its ecosystem, at a depth appropriate to your level
Hands-on experience with at least one major cloud provider (GCP or AWS)
Familiarity with observability practices, including metrics, logging, alerting, and SLOs or SLIs, and using data to inform operational decisions
Comfort participating in on-call and incident response, with a structured approach to troubleshooting under pressure
Strong written communication and the ability to operate as a manager-of-one in an async, distributed environment
A track record of using automation, and increasingly AI, to reduce toil and improve how you and your team work
Alignment with GitLab's values and a commitment to working in accordance with them
About the team
Infrastructure Platforms
is responsible for the availability, reliability, performance, and scalability of GitLab’s user-facing services, most notably
GitLab.com
. The organization spans teams across
Production Engineering
,
GitLab Dedicated
,
GitLab Delivery
, and
Developer Experience
, covering everything from the production fleet and networking platform to observability, incident response, deployment infrastructure, tenant scale, and our single-tenant Dedicated offering.
We are a globally distributed, remote-first organization that works asynchronously, favors automation over toil, and uses monitoring, metrics, and clear ownership to continuously improve the reliability of GitLab at scale. For more on how we work, see the
Infrastructure Handbook Page
.
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Задачи:
— Обеспечение надежности, масштабируемости и стабильной работы систем через автоматизацию и поддержку инфраструктуры.
— Проектирование, внедрение и поддержка надежных CI/CD пайплайнов и облачной инфраструктуры.
— Проактивный мониторинг производительности систем, устранение проблем и постоянное улучшение доступности и эффективности платформ.
Требования:
— Глубокие практические знания Kubernetes и AWS.
— Продвинутое администрирование Linux.
— Владение скриптовыми языками Python, Bash.
— Опыт проектирования и управления CI/CD пайплайнами (Gitlab).
— Экспертиза в Terraform, знание Ansible будет плюсом.
— Опыт работы с облачными сетями.
— Опыт работы с RabbitMQ.
— Опыт работы с PostgreSQL.
— Английский язык на уровне B1 и выше.
Инструменты и технологии:
AWS, Cloudflare, Kubernetes, GitLab, Nexus, Helm/Helmwave, Vault, VictoriaMetrics, Envoy, OpenSearch, Grafana, Ansible, Terraform, RabbitMQ, PostgreSQL, Nginx/HAProxy.
Location: Remote - Europe
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
About the role
You own the company's identity provider: who signs in, from where, with which factors, into which applications — and how that access is granted, reviewed, and revoked.
Microsoft Entra ID is the primary identity plane and the center of gravity for the role. Google Workspace, Cloud Identity, and Google Cloud IAM form a secondary domain. Microsoft 365 is in scope for tenant, licensing, and access administration.
You are the escalation point for identity incidents from operations, security, service desk, and application teams — expected to resolve them, not route them onward.
What you'll own
Microsoft Entra ID and Microsoft 365
– Users, dynamic and assigned groups, administrative units, directory roles, service principals, workload identities.
– Conditional Access design and rollout: named locations, client app and platform conditions, session controls, sign-in frequency, break-glass exclusions, report-only staging.
– Authentication methods policy and phishing-resistant factors.
– Application onboarding over SAML 2.0 (NameID, claims mapping, signing certificate rollover, encrypted assertions) and OIDC / OAuth 2.0 (authorization code with PKCE, client credentials, device code).
– App registrations: redirect URIs, permissions, admin consent workflow, secret and certificate lifecycle.
– SCIM 2.0 provisioning: attribute mappings, scoping filters, expression transformations, quarantined jobs, drift reconciliation.
– Tenant consent settings, OAuth grant review, remediation of over-permissioned and stale applications; defensible controls for SaaS without SSO or SCIM support.
– Joiner-mover-leaver as an automated pipeline: provisioning, group-based licensing, revocation with session and refresh token invalidation.
– Least privilege for admin access: scoped role assignments, RBAC, PIM, access reviews, entitlement management access packages.
– Service account and workload identity governance: ownership, credential rotation, permission scoping, decommissioning.
– Microsoft 365 tenant settings, licensing, admin roles; access and permission issues in Exchange Online, SharePoint Online, Power Platform.
– Diagnostics from sign-in, audit, and provisioning logs, with diagnostic settings routed to Log Analytics and KQL queries.
– Cross-tenant access settings and B2B external collaboration.
Automation
– PowerShell tooling on the Microsoft Graph PowerShell SDK and Graph REST API: lifecycle, licensing, access reporting, recertification.
– Google-side automation through the Admin SDK Directory API, Cloud Identity API, and gcloud.
– Scheduled and event-driven workflows in Azure Automation Runbooks, Azure Logic Apps, or Power Automate.
– Unattended execution on managed identities and narrowly scoped app registrations, with credential rotation, structured logging, error handling, and retries.
– Automation treated as production code: version control, peer review, documented rollback.
What you'll bring
We care about what you can do, not which products appear on your CV. Concretely, you can:
– Decode a SAML assertion or JWT and pinpoint the failure — audience mismatch, NameID format, expired signing certificate, missing claim — without escalating to the vendor.
– Diagnose a failing SCIM job and tell scoping from attribute mapping, transformation expressions, or target schema.
– Replace a manual lifecycle process with automation that logs, retries, and can be handed to someone else to run.
Experience we expect
– 3+ years administering Microsoft Entra ID in production as a primary responsibility.
– Microsoft 365 tenant: settings, licensing, admin roles, Service Health
– Exchange Online: mailbox permissions, groups, mail flow, SPF/DKIM/DMARC
– Microsoft Defender: threat policies, quarantine, message trace
– Power Platform: environments, DLP connector policies, maker access
– PowerShell: Exchange Online module, Microsoft Graph SDK
– Enterprise applications, app registrations, consent and permission models, automated provisioning.
– Azure Automation Runbooks, Azure Logic Apps, Power Automate, or comparable platforms.
– Least privilege, secure administration, change management, and the discipline to leave configurations documented.
– Written and spoken English at B2 or higher.
Nice to haves
– SC-300, MS-102, or SC-401 — or equivalent demonstrable expertise.
– Microsoft Entra ID Governance: entitlement management, lifecycle workflows, Privileged Identity Management.
– Microsoft Purview (DLP, retention, eDiscovery), Microsoft Defender for Cloud Apps, or Microsoft Sentinel.
– Google Cloud IAM: projects, roles and policies, service accounts, API access, OAuth credentials.
– Google Cloud workload identity federation, custom roles, organization policy constraints.
– Git, CI/CD practices, Pester, Bicep, or Terraform.
– Access evidence for SOC 2, ISO 27001, or comparable audit cycles.
#
LI
-RK1
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Remote - Europe
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
Your responsibilities will include:
Develop and maintain Python-based API integrations between our HR information system (HRIS) and business systems, including finance, travel, expense management, and recruiting platforms.
Build and maintain cloud-native services, web applications, and containerized workloads on Microsoft Azure.
Implement automation for system workflows, onboarding/offboarding, access-related processes, and data synchronization.
Create and maintain deployment pipelines and Infrastructure-as-Code with Terraform.
Own integrations through implementation, testing, deployment, and production support; respond to alerts and troubleshoot issues across APIs, Azure services, and data sources within agreed SLAs.
Implement safeguards for sensitive employee data, including validation, audit trails, and controls around mass changes.
Work with business stakeholders to clarify requirements and maintain technical documentation as part of each change.
We expect you to have:
3+ years of integration or backend development experience, including hands-on experience deploying and supporting production workloads in Microsoft Azure.
Practical experience with Azure compute and integration services. Our stack includes Azure Functions, App Service, Container Apps, Container Instances, Service Bus, and API Management.
Practical Python development skills, including maintaining and debugging existing services and automations.
Experience integrating REST APIs, webhooks, and Microsoft Graph API, with an understanding of pagination, rate limits, retries, and idempotency.
Experience working with CI/CD pipelines and Terraform for Azure deployments.
Good understanding of OAuth 2.0, Microsoft Entra ID, and managed identities for secure authentication and service-to-service access.
Experience designing and working with relational databases (PostgreSQL, MSSQL, etc.).
Experience with automated testing and diagnosing production issues through logs, monitoring, and alerts.
It will be an added bonus if you have:
Experience integrating HRIS or other business systems, such as ERP, expense management, or recruiting platforms.
Azure certifications (AZ-204, AZ-900, AZ-104).
Hands-on experience with Application Insights and Log Analytics.
Experience using AI-assisted development tools, with the ability to critically evaluate their output.
#LI-RK1
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Amsterdam, Netherlands
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
Summary:
Location
: Amsterdam
Duration
: 3-6 months
Start date
: January 2027
Compensation
: Paid
Eligibility
: Current University student (Computer Science or related field), Recent Graduate or Early Career specialist
Work authorization
: Permitted to work in the job’s location
Why work at Nebius
Nebius is leading a new era in cloud computing to serve the global AI economy. We create the tools and resources our customers need to solve real-world challenges and transform industries, without massive infrastructure costs or the need to build large in-house AI/ML teams. Our employees work at the cutting edge of AI cloud infrastructure alongside some of the most experienced and innovative leaders and engineers in the field.
Your responsibilities will include
Operation:
assist in day-to-day SRE operations tasks
Project work:
execute tasks from the backlog
together or instead: work on small and well-defined SRE project from backlog
create tests for their changes/project (if applicable)
write technical documentation about their work
track and update Jira tasks according to their progress
Learning and growth:
actively study system fundamentals: Linux ( networking, cgroups, ebpf, etc.)
learn internal tools, workflows and operational standards
learn container and platform fundamentals: Kubernetes (core architecture and networking), Helm, Terraform
learn configuration management and automation basics
What we expect you to have
demonstrate strong interest and foundational knowledge in cloud providers, operations, networking, hardware, and software
programming experience in any of Python, Go, C++ or Java
basic understanding of the Network (ethernet, ip, tcp/udp, routing fundamentals)
familiarity with Git
basic understanding of containers, Kubernetes and Gitops approach
What we offer
Mentorship from experienced AI, ML, and cloud infrastructure professionals
Hands-on experience with real customer workloads and production systems
Opportunities for professional growth within Nebius
Opportunity to be considered for a full-time role after the Early Talent Program
We’re growing and expanding our products every day. If you’re up to the challenge and are excited about AI and ML as much as we are, join us!
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
О компании. AgVend — B2B SaaS-платформа для агросектора Северной Америки, 8 лет на рынке, около 30% рынка ag-retail в США и Канаде, около 150 человек, из них около 100 в R&D. Полностью удалённая работа, офисы в Канаде, США и на Кипре для желающих.
Стек. Python, Django, DRF, Postgres, ClickHouse, AWS на бэкенде. TypeScript и React на фронтенде. Модульный монолит (3 крупных приложения и микросервисы-сателлиты). 5 продакшн Kubernetes-кластеров, около 150 тенантов, около 5K RPM. CircleCI, Docker/ECR, Helm/Terraform, blue-green деплой.
Задачи:
— Полноценная fullstack работа: проектирование API на Django/DRF и реализация UI на React/TypeScript в рамках одной задачи.
— Реализация фич end-to-end: от модели данных и миграций до компонентов и состояния на фронте.
— Владение зоной ответственности: архитектура, code review, ответственность за продакшн.
— Работа с реальной нагрузкой: Postgres и ClickHouse, мульти-тенант, миллионы записей.
Требования:
— Senior, 5+ лет коммерческой разработки.
— Уверенный Python и Django/DRF на уровне продакшн под нагрузкой с Postgres.
— React и TypeScript на продуктовом уровне: state management, оптимизация рендеринга, сложные формы и таблицы.
— Комфортная работа и на бэкенде, и на фронтенде.
— Самостоятельность, ведение зоны без микроменеджмента, прямая работа с PM.
— Русский язык — основной рабочий, английский — рабочий уровень.
Будет плюсом:
— Опыт с ClickHouse и аналитическими базами данных.
— Опыт с highload/финтех.
— Знания Kubernetes, Helm, Terraform, CircleCI на уровне "могу починить пайплайн".
— Опыт с очередями и распределёнными системами (Kafka, RabbitMQ, идемпотентность).
Условия:
— Только сеньорская команда, плоская структура (EM + senior IC, без техлидов).
— Безлимитные отпуска, soft management, нет фиксированных часов, асинхронная коммуникация.
— Оффсайты 2 раза в год (Кипр и Грузия/Армения).
— Бюджет на обучение, конференции, технику.
— Очень низкая текучка — многие работают по 5–6 лет.
— Коммуникация внутри команды на русском.
Location: Remote - Global
Workplace: Remote
About the company
Trust Wallet is the secure, self-custody Web3 wallet that empowers people to own and control their digital assets. Whether you're new to crypto or an experienced user, Trust Wallet makes it easier, safer, and more convenient to explore Web3, securely access dApps, manage your crypto, and buy and sell digital assets, all in one place.
If you’re passionate and motivated by building modern, cloud native and cloud agnostic platforms we invite you to join us to build innovative crypto architectures and advance technologies that will accelerate the delivery of web3 innovations to our users.
Responsibilities:
- Infrastructure: You will be spearheading the planning and execution of infrastructure deployments, leveraging automation tools and best practices to guarantee a stable and scalable foundation for the platform serving our million users.
- Operations: You will be managing day-to-day operations, troubleshooting issues, and optimizing workflows to maintain high availability (HA) and meet service level objectives (SLOs) for the platform.
- Feature development: You will be owning backend features that support all our platforms (extension, mobile and desktop).
- Interfacing with users: You will be interfacing directly with end-users and developers building on Trust Wallet – supporting them and collecting feedback to inform the direction of the product.
- Team building: You will be working with the team to create and foster a culture of raising the bar with each new hire.
- AI & DevX: You will leverage AI engineering best practices to boost developer productivity and engineering velocity—standardizing AI-assisted workflows (coding, reviews, debugging, incident response), building/maintaining internal tooling and prompts/guardrails, and measuring impact through delivery and reliability metrics.
Qualifications:
- Deep experience managing and building with Cloud Platforms (AWS, Cloudflare)
- Experience with Kubernetes and adjacent technologies (Istio, Helm Charts)
- Experience with infrastructure configuration management (Terraform, Atlantis)
- Experience building CI/CD pipelines and accelerating application delivery (GitHub Actions, ArgoCD)
- Experience with production observability technologies (Prometheus, Grafana, Sentry)
- Hands on Go lang experience (Networking, HTTP, gRPC, OpenTelemetry)
- Expertise in implementing SRE principles, focusing on maintaining high availability
- Familiar with incident handling and on-call responsibilities
- Experience leveraging AI-assisted engineering tools and best practices (e.g., LLM coding assistants, AI-driven code review/testing, prompt patterns/guardrails)
- Strong security fundamentals and hands-on experience implementing cloud and Kubernetes security best practices.
ADDITIONAL INFORMATION
This is a global and fully remote role. You must have the right to work for the country you are based.
WHY WORK AT TRUST WALLET?
- Be a part of the world’s leading blockchain ecosystem that continues to grow.
- Excellent learning and career development opportunities.
- Work alongside diverse, world-class talent, in an environment where learning and growth opportunities are endless.
- Tackle fast-paced, challenging and unique projects.
- Work in a truly global organization, with international teams and a flat organizational structure.
- Work fully remotely with flexible working hours.
- Enjoy competitive salary and benefits.
Apply today to join our team in building the world’s most trusted and secure crypto wallet and enable a decentralized future for everyone.
Trust Wallet is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
*Due to the large amount of the applications, please consider your application as unsuccessful should you not be contacted within 4 weeks from your application date.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations: Austin, New York, San Francisco, Canada, Remote
About the Team
We manage an internal, multi-region PostgreSQL platform that enables engineers to rapidly build, deploy, and operate services. Our mission is to provide a highly available, stable, and self-service platform with clear operational visibility. As a Systems Engineer, you will collaborate with database engineers, developers, and infrastructure teams to evolve our database architecture and automation. You will be instrumental in scaling our PostgreSQL infrastructure and enhancing database reliability. If you are passionate about PostgreSQL, automation, reliability, and database tooling, let's connect!
Role Responsibilities
Build, deploy, and manage PostgreSQL database clusters in production environments.
Develop and maintain database tooling for automation, monitoring and performance tuning.
Implement high availability, backup and disaster recovery solutions.
Work closely with Infrastructure and Applications teams to integrate database tools.
Implement proactive solutions using observability tools to monitor database health.
Optimize database performance, indexing strategies, and query tuning.
Role Requirements (Must-Have Skills)
Must-Have Skills
Experience with building, scaling, and managing large-scale multi-tenant PostgreSQL database clusters, encompassing high availability failover, and disaster recovery strategies.
Experience with infrastructure-as-code (Terraform, Ansible or Salt) .
Experience in scripting languages (Python, Bash) for automation.
Experience building and maintaining database tooling for automation and monitoring.
Experience with containerization technologies like Docker and Kubernetes.
Experience optimizing database performance and query tuning.
Experience with alerting and monitoring tools such as Prometheus, Grafana, and Kibana.
Nice-to-Have Skills
Experience developing software in Go, Ruby or C/C++
Contributions to PostgreSQL or relevant open-source projects.
Expertise in database schema migrations and automation using tools like Flyway, Liquibase or goose.
Experience with connection pooling solutions such as PgBouncer, HAProxy.
Experience with non-relational data stores such as Distributed & time-series databases (ex. Cassandra, Timescale) and key-value stores (eg., Redis)
Compensation
Compensation may be adjusted depending on work location.
For Bay Area based hires: Estimated annual salary of $157,000 - $196,000
For New York based hires: Estimated annual salary of $150,000 - $187,000
Equity
This role is eligible to participate in Cloudflare’s equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health & Welfare Benefits
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Financial Benefits
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Time Off
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
seniorГеография найма не уточнена
seniorГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
London; We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities
Amsterdam, Netherlands
leadSan Francisco, CA | Seattle, WA | New York City, NY | Washington, DC
ГибридDublin, Ireland
УдалённоUnited States (Remote)
seniorBoston, Massachusetts, United States
УдалённоseniorПротиворечивые условия: Please note: This position is open to candidates based in the United Kingdom only; Candidates based in the United States or Canada can apply to this posting:
Автоотклики