Location: USA (Remote)
Workplace: Remote
Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value.
Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact.
Responsibilities
- Build and operate the Security Observability & Data Platform (tens of TB/month and growing). This covers ingestion, normalization and retention, plus the query and detection layer on top. Detections are code: tested, reviewed, and measured for precision.
- Own endpoint security across the fleet: deploy, tune and respond with EDR; run and configure binary authorization; and set hardening baselines with IT Operations.
- Lead threat hunting, internal investigations and insider-threat work. Handle security incidents end to end: triage, containment, forensics, root cause, and the control that prevents a repeat.
- Build the next generation of security services and run them in production: zero-trust AuthN/AuthZ, a uniform blocking service, an application proxy, asset inventory, developer portal, and compliance as code.
- Build and run the agent platform (local and Kubernetes). Use LLM agents to automate triage, enrichment, investigation and response, with deterministic checks wherever a model's answer isn't enough.
- Review infrastructure and cloud designs (Kubernetes, AWS/GCP, bare metal, CI runners) for security, and help engineering teams adopt the shared services instead of building their own.
- Run red-team and adversary-emulation exercises, and turn the results into detections and fixes.
- Write runbooks and post-mortems that someone who wasn't in the room can follow at 3 a.m.
Minimum Qualifications
- Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
- 5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus, including hands-on incident response on endpoints and in the cloud.
- Experience operating an EDR, writing and tuning detections. Knowledge of macOS and Linux internals as attackers use them: persistence, credential theft, process injection, living-off-the-land binaries.
- Experience building or operating telemetry pipelines and a SIEM or security data lake at TB scale. Strong SQL, including detection logic over large datasets.
- Hands-on production engineering: Linux, containers, Kubernetes, at least one major public cloud, infrastructure as code, monitoring and alerting.
- Proficiency in Python or Go, and comfort with Rust or willingness to work in it (most of Mysten's stack are Rust).
- Working knowledge of identity: SSO (OIDC/SAML), phishing-resistant MFA, device trust, and how session and token theft work.
- Strong written communication: can run an incident channel and write the post-mortem.
- Interest in the web3 space is required.
Preferred Qualifications
- Experience building zero-trust access, identity-aware proxies or policy engines.
- Binary authorization or allowlisting at fleet scale
- Familiarity with the threat actors that target crypto companies and their methods, from social engineering and fake campaigns to supply chain compromises.
- Digital forensics (memory, disk, macOS unified logs) and malware analysis.
- Experience building security tooling with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling has to do the work.
- Compliance as code (CIS benchmarks); experience in ISO 27001 or SOC 2 environments.
- Publications, conference talks or open-source security tooling.
Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information.
Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers.
To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers.
Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!
Задачи:
— Разрабатывать и поддерживать ETL-процессы для загрузки данных в DWH на Vertica;
— Создавать и оптимизировать агрегаторы и коллекторы данных на Node.js (TypeScript);
— Проектировать и развивать витрины данных для аналитиков и бизнес-пользователей;
— Участвовать во всем цикле жизни данных: от обсуждения требований до тестирования, запуска и поддержки решений;
— Писать эффективные SQL-запросы с использованием CTE и оконных функций для сложных преобразований данных.
Требования:
— Коммерческий опыт разработки на Node.js, желательно с TypeScript;
— Практический опыт работы с Angular;
— Уверенное владение SQL (PostgreSQL или аналог), включая сложные запросы, CTE и оконные функции;
— Опыт проектирования или развития DWH и витрин данных;
— Умение проектировать и реализовывать ETL-процессы;
— Понимание паттернов проектирования и способность обосновать их применение;
— Навык написания тестов с mocha и should;
— Опыт работы с Git.
Будет преимуществом:
— Опыт работы с Vertica;
— Знакомство с Python, Go или Java;
— Опыт с Docker, Kubernetes и CI/CD (Jenkins);
— Понимание принципов работы высоконагруженных систем.
Условия:
— Работа в аккредитованной ИТ-компании;
— Офисный формат работы в Санкт-Петербурге;
— Гибкое начало рабочего дня;
— Позитивная и поддерживающая атмосфера в команде;
— Возможность профессионального и карьерного роста.
Location: Remote Canada
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
The Capacity Modeling team ensures Affirm can safely handle forecasted traffic—especially during peak sales events—by translating demand forecasts into concrete, testable capacity plans. They build and maintain statistical capacity models that map traffic inputs (e.g., checkout volume, app opens, batch/job activity) to resource outputs (CPU, memory, connections) and then convert those forecasts into recommended capacity settings such as pod counts, HPA ranges, and/or infrastructure sizing changes across regions and environments.
What You'll Do
· You will be responsible for owning and delivering quarterly goals for your team, leading engineers on your team through ambiguity to solve open-ended problems, and ensuring that everyone is supported throughout delivery.
· You will support your peers and stakeholders in the product development lifecycle by collaborating with product management, design & analytics by participating in ideation, articulating technical constraints, and partnering on decisions that properly consider risks and trade-offs.
· You will proactively identify project, process, technology or business issues, advocate for them, and lead in solving them.
· You will support the operations and availability of your team’s artifacts by creating and monitoring metrics, escalating when needed, and supporting “keep the lights on” & on-call efforts.
· You will foster a culture of quality and ownership on your team by setting or improving code review and design standards for your team, and advocating for them beyond your team through your writing and tech talks.
· You will help develop talent on your team by providing feedback and guidance, and leading by example.
What We Look For
· You have 4+ years of experience designing, developing and launching backend systems at scale using languages like Python or Kotlin.
· You have a track record of developing highly available distributed systems using technologies like AWS, MySQL and Kubernetes.
·
You have experience supporting scale up and down of large scale sales event such as Prime Day, Black Friday Cyber Monday, or other sales holidays
·
You have tuned autoscaling, CPU/Memory, and multi-threading for compute type workloads.
· You have experience defining a technical plan for the delivery of a significant feature or system component with an elegant, simple and extensible design. You write high quality code that is easily understood and used by others.
· You are proficient at making significant changes in a large code base, and have developed a suite of tools and practices that enable you and your team to do so safely.
· Your experience demonstrates that you take ownership of your growth, proactively seeking feedback from your team, your manager, and your stakeholders.
· You have strong verbal and written communication skills that support effective collaboration with our global engineering team.
Base Pay Grade - N
Equity Grade - 6
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
CAN base pay range per year: $153,000 - $213,000 CAD.
This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.
#LI-Remote
Remote-first with flexibility built in
Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.
Benefits designed for you
Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:
Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.
We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.
For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
By clicking "Submit Application," you acknowledge that you have read Affirm's
Global Candidate Privacy Notice
and consent to the use of your personal information as described.
Location: Remote Canada
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
Affirm's engineering team is building a large-scale, highly available, and global infrastructure that is shared across multiple financial products. Ensuring that our infrastructure is accessible to all engineers is critical to the success of the business. We pride ourselves on our culture across engineering of engaging in thorough technical design review, operational excellence, and capable incident response and analysis.
Affirm runs its workloads on more than 85 Amazon EKS clusters, and the number is growing. The Workload Safety team creates one set of standards for how workloads are configured and run, so Affirm can grow globally and still meet its availability and latency SLOs. The team identifies the industry best practices Affirm needs, drives their adoption across every engineering team on EKS, and enforces them through policy and automation so new workloads comply by default.
As a senior engineer on the team, you will help set its roadmap, decide which standards matter most, and build a repeatable way to take each standard from research to enforcement across the fleet.
What you’ll do
Define and evolve workload safety standards for Affirm's EKS fleet, such as CPU and memory settings, workload isolation and placement, tolerance for disruption, graceful termination to name a few
Own each standard end to end: research and prototyping, white-glove onboarding for early adopters, self-service guidance for everyone else, and automation and policy guardrails that keep every workload compliant from day one
Lead cross-team initiatives from design through fleet-wide rollout, mentor other engineers, and set a high bar for design, code review, and operational readiness
Isolate workloads by criticality and resource profile so one misbehaving workload cannot degrade critical paths such as checkout
Fix stuck workloads and node lifecycle problems, such as pods that ignore termination signals, pod disruption budgets that block node cycling, and Karpenter timeouts that prevent bin packing and the removal of excess capacity
Determine the safe operating limits of each cluster (pod count, node count, API server request volume), keep clusters within them, and develop control plane scaling patterns for bursty workloads such as scheduled batch jobs and large deployments
Analyze workload resource profiles across the fleet (CPU, memory, disk, network) to guide EC2 instance type strategy, and automate that analysis as workloads change
Measure each standard's impact on availability, latency, risk, and cost, and use the results to prioritize the roadmap
Participate in on-call for Kubernetes runtime issues across the fleet, and turn recurring failure patterns into roadmap items
Work closely with the teams that run services, batch jobs, and ML workloads on EKS, and with the deployment, capacity, and SRE teams
Keep up with new best practices from the Kubernetes community and adapt them to Affirm's needs
What we look for
5+ years of experience running Kubernetes in production at scale, ideally Amazon EKS across many clusters
Deep understanding of Kubernetes resource management and scheduling: requests and limits, OOM and CPU throttling behavior, affinity and anti-affinity, taints and tolerations, and topology spread constraints
Solid grasp of the pod lifecycle and disruption management, including graceful termination, pod disruption budgets, and node draining
Experience enforcing configuration standards through admission control and policy-as-code (for example, OPA Gatekeeper or Kyverno)
Proficiency in Go or Python, including building production infrastructure software such as Kubernetes controllers, operators, or admission webhooks
Strong production debugging skills and a demonstrated ability to turn recurring incidents into systemic fixes
Track record of leading technical initiatives across multiple teams, driving adoption of shared standards, and mentoring other engineers
Experience quantifying the impact of infrastructure changes on availability, latency, and cost
Strong written communication, including standards and guidance that teams can adopt on their own
[**THE BELOW ARE INSTRUCTIONS FOR RECRUITERS.***
WHEN COPYING INTO WORKDAY, INCLUDE
ALL
OF THE TEXT BELOW.
DO NOT DELETE OR FILL OUT ANY OF THE INFORMATION BELOW.
]
[DELETE IF NOT APPLICABLE TO ROLE] For U.S. non-variable roles use the template below:
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
USA base pay range (CA, WA, NY, NJ, CT) per year: $X - $X
USA base pay range (all other U.S. states) per year: $X - $X
[DELETE IF NOT APPLICABLE TO ROLE] For U.S. variable roles use the template below:
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, which includes the annual base pay and the sales incentive target.
USA On Target Earnings (CA, WA, NY, NJ, CT) per year: $X - $X
USA On Target Earnings (all other U.S. states) per year: $X - $X
[DELETE IF NOT APPLICABLE TO ROLE] For CAN/GBR roles use the template below:
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. [IF APPLICABLE] For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, which includes the annual base pay and the sales incentive target.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
(CHOOSE ONE - CAN or GBR) base pay range per year: $X - $X
[DELETE IF NOT APPLICABLE TO ROLE] For POL roles use the template below:
Total Rewards
We believe the people building honest financial products at Affirm should share in its success. That's why our total rewards are designed to support your health, growth, financial well-being, and future.
In service of our mission, we reward employees through a combination of base pay, equity (from parent company), and comprehensive benefits.
Base Pay Grade – N
$XXX-$XXX
Base pay ranges and placement within those ranges are determined based on several factors, including role, experience, and job-related skills.
In addition to base pay, all employees in this role are eligible to receive equity from the parent company each year. This means as Affirm’s parent company grows, employees have the opportunity to share in that growth financially.
Equity Grade – 4 (awarded in US Dollars)
Affirm Holdings, Inc. Equity Grade example
Equity grade: 2
New hire equity: $16,000-$24,000
Annual Refresh: $5,000
Reward equity: $0-$75,000
Affirm also provides flexible spending wallets to all employees for technology and wellbeing related needs, which are reimbursable up to 1390 zł per month.
In addition to your compensation, our comprehensive benefits are designed to support you and the people who matter most. Benefits include:
Competitive paid time off, paid public holidays, and additional paid Away Days to rest and recharge.
Comprehensive private healthcare through Lux Med's Platinum package.
A MultiSport card to support your health and well-being.
Learning and development programs to help you grow professionally.
Family healthcare support through Maven and parental leave support through Parentaly.
Mental well-being support through Lyra, including up to 12 confidential counseling or coaching sessions each year for you and your household members.
Financial well-being support through Northstar, with unlimited access to Certified Financial Advisors and planning tools at no cost to you.
Employee Resource Groups (ERGs) that foster connection and inclusion.
Eligibility for creative tax benefits, subject to applicable law, role, and company policy.
Location - Remote Poland
The majority of our roles can be located anywhere in Poland.
**This job description is not a contractual document, and is not intended to have binding force.**
LI-Remote
[DELETE IF NOT APPLICABLE TO ROLE] For ESP roles use the template below:
Compensation & Benefits
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
ESP base pay range per year: €X - €X
Additional benefits include:
• Flexible Spending Wallets for tech, food and lifestyle
• Away Days - wellness days to take off work and recharge
• Learning & Development programs
• Parental benefits
• Employee Resource & Community Groups
[ONLY KEEP THIS IF WE DO NOT SPONSOR THE ROLE] Please note that visa sponsorship is not available for this position.
[REMOVE IF POSTING IS NOT REMOTE] LI-Remote
Remote-first with flexibility built in
Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.
Benefits designed for you
Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:
Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.
We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.
For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
By clicking "Submit Application," you acknowledge that you have read Affirm's
Global Candidate Privacy Notice
and consent to the use of your personal information as described.
Location: Remote US
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
Affirm's engineering team is building a large-scale, highly available, and global infrastructure that is shared across multiple financial products. Ensuring that our infrastructure is accessible to all engineers is critical to the success of the business. We pride ourselves on our culture across engineering of engaging in thorough technical design review, operational excellence, and capable incident response and analysis.
Affirm runs its workloads on more than 85 Amazon EKS clusters, and the number is growing. The Workload Safety team creates one set of standards for how workloads are configured and run, so Affirm can grow globally and still meet its availability and latency SLOs. The team identifies the industry best practices Affirm needs, drives their adoption across every engineering team on EKS, and enforces them through policy and automation so new workloads comply by default.
As a senior engineer on the team, you will help set its roadmap, decide which standards matter most, and build a repeatable way to take each standard from research to enforcement across the fleet.
What you’ll do
Define and evolve workload safety standards for Affirm's EKS fleet, such as CPU and memory settings, workload isolation and placement, tolerance for disruption, graceful termination to name a few
Own each standard end to end: research and prototyping, white-glove onboarding for early adopters, self-service guidance for everyone else, and automation and policy guardrails that keep every workload compliant from day one
Lead cross-team initiatives from design through fleet-wide rollout, mentor other engineers, and set a high bar for design, code review, and operational readiness
Isolate workloads by criticality and resource profile so one misbehaving workload cannot degrade critical paths such as checkout
Fix stuck workloads and node lifecycle problems, such as pods that ignore termination signals, pod disruption budgets that block node cycling, and Karpenter timeouts that prevent bin packing and the removal of excess capacity
Determine the safe operating limits of each cluster (pod count, node count, API server request volume), keep clusters within them, and develop control plane scaling patterns for bursty workloads such as scheduled batch jobs and large deployments
Analyze workload resource profiles across the fleet (CPU, memory, disk, network) to guide EC2 instance type strategy, and automate that analysis as workloads change
Measure each standard's impact on availability, latency, risk, and cost, and use the results to prioritize the roadmap
Participate in on-call for Kubernetes runtime issues across the fleet, and turn recurring failure patterns into roadmap items
Work closely with the teams that run services, batch jobs, and ML workloads on EKS, and with the deployment, capacity, and SRE teams
Keep up with new best practices from the Kubernetes community and adapt them to Affirm's needs
What we look for
5+ years of experience running Kubernetes in production at scale, ideally Amazon EKS across many clusters
Deep understanding of Kubernetes resource management and scheduling: requests and limits, OOM and CPU throttling behavior, affinity and anti-affinity, taints and tolerations, and topology spread constraints
Solid grasp of the pod lifecycle and disruption management, including graceful termination, pod disruption budgets, and node draining
Experience enforcing configuration standards through admission control and policy-as-code (for example, OPA Gatekeeper or Kyverno)
Proficiency in Go or Python, including building production infrastructure software such as Kubernetes controllers, operators, or admission webhooks
Strong production debugging skills and a demonstrated ability to turn recurring incidents into systemic fixes
Track record of leading technical initiatives across multiple teams, driving adoption of shared standards, and mentoring other engineers
Experience quantifying the impact of infrastructure changes on availability, latency, and cost
Strong written communication, including standards and guidance that teams can adopt on their own
[**THE BELOW ARE INSTRUCTIONS FOR RECRUITERS.***
WHEN COPYING INTO WORKDAY, INCLUDE
ALL
OF THE TEXT BELOW.
DO NOT DELETE OR FILL OUT ANY OF THE INFORMATION BELOW.
]
[DELETE IF NOT APPLICABLE TO ROLE] For U.S. non-variable roles use the template below:
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
USA base pay range (CA, WA, NY, NJ, CT) per year: $X - $X
USA base pay range (all other U.S. states) per year: $X - $X
[DELETE IF NOT APPLICABLE TO ROLE] For U.S. variable roles use the template below:
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, which includes the annual base pay and the sales incentive target.
USA On Target Earnings (CA, WA, NY, NJ, CT) per year: $X - $X
USA On Target Earnings (all other U.S. states) per year: $X - $X
[DELETE IF NOT APPLICABLE TO ROLE] For CAN/GBR roles use the template below:
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. [IF APPLICABLE] For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, which includes the annual base pay and the sales incentive target.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
(CHOOSE ONE - CAN or GBR) base pay range per year: $X - $X
[DELETE IF NOT APPLICABLE TO ROLE] For POL roles use the template below:
Total Rewards
We believe the people building honest financial products at Affirm should share in its success. That's why our total rewards are designed to support your health, growth, financial well-being, and future.
In service of our mission, we reward employees through a combination of base pay, equity (from parent company), and comprehensive benefits.
Base Pay Grade – N
$XXX-$XXX
Base pay ranges and placement within those ranges are determined based on several factors, including role, experience, and job-related skills.
In addition to base pay, all employees in this role are eligible to receive equity from the parent company each year. This means as Affirm’s parent company grows, employees have the opportunity to share in that growth financially.
Equity Grade – 4 (awarded in US Dollars)
Affirm Holdings, Inc. Equity Grade example
Equity grade: 2
New hire equity: $16,000-$24,000
Annual Refresh: $5,000
Reward equity: $0-$75,000
Affirm also provides flexible spending wallets to all employees for technology and wellbeing related needs, which are reimbursable up to 1390 zł per month.
In addition to your compensation, our comprehensive benefits are designed to support you and the people who matter most. Benefits include:
Competitive paid time off, paid public holidays, and additional paid Away Days to rest and recharge.
Comprehensive private healthcare through Lux Med's Platinum package.
A MultiSport card to support your health and well-being.
Learning and development programs to help you grow professionally.
Family healthcare support through Maven and parental leave support through Parentaly.
Mental well-being support through Lyra, including up to 12 confidential counseling or coaching sessions each year for you and your household members.
Financial well-being support through Northstar, with unlimited access to Certified Financial Advisors and planning tools at no cost to you.
Employee Resource Groups (ERGs) that foster connection and inclusion.
Eligibility for creative tax benefits, subject to applicable law, role, and company policy.
Location - Remote Poland
The majority of our roles can be located anywhere in Poland.
**This job description is not a contractual document, and is not intended to have binding force.**
LI-Remote
[DELETE IF NOT APPLICABLE TO ROLE] For ESP roles use the template below:
Compensation & Benefits
Base Pay Grade -
Equity Grade -
Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
ESP base pay range per year: €X - €X
Additional benefits include:
• Flexible Spending Wallets for tech, food and lifestyle
• Away Days - wellness days to take off work and recharge
• Learning & Development programs
• Parental benefits
• Employee Resource & Community Groups
[ONLY KEEP THIS IF WE DO NOT SPONSOR THE ROLE] Please note that visa sponsorship is not available for this position.
[REMOVE IF POSTING IS NOT REMOTE] LI-Remote
Remote-first with flexibility built in
Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.
Benefits designed for you
Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:
Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.
We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.
For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
By clicking "Submit Application," you acknowledge that you have read Affirm's
Global Candidate Privacy Notice
and consent to the use of your personal information as described.
Задачи:
— Разработка масштабируемых платформ управления облачной инфраструктурой.
Требования:
— Опыт работы с Kubernetes, Java, C#, Go, Rust.
— Знания в области управления конфигурациями, распределённых систем, автоматизации, облачной безопасности и обеспечения доступности и масштабируемости систем.
Условия:
— Работа в офисе в Сан-Франциско, Калифорния, США.
Зарплата: $209,000 - $253,000 в год.
Location: Canada (Remote)
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at
grafana.com
and follow us on
LinkedIn
and
X
.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote opportunity for candidates located in Canada and US.
The Opportunity:
The Grafana Search & Storage squad is developing Grafana’s next-generation storage layer. As a key component of our App Platform, Unified Storage enables developers to build innovative applications using a Kubernetes-inspired Operator pattern to interact with data directly.
In addition to operating Unified Storage at scale within Grafana Cloud, our team manages two essential features for discovery and organization: Search, the unified engine for finding and querying all Grafana data, and Folders, for hierarchical content management.
What You’ll Be Doing:
Take an active role in influencing our roadmap and your own career objectives
Work with your team to deliver new features, then use the results to iterate and improve.
Drive projects from initial ideation all the way to operations once it is in the hands of customers
Embrace our open-source culture and contribute to other projects that may not directly fall within your team’s scope
Design, build, operate, and maintain critical systems, owning the reliability, performance, and
availability
Be a part of your team’s on-call rotations and take ownership of the services you’re running
Mentor and support other team members, participate in design discussions and collaborate with the team
Learn new skills by gaining a deeper understanding of our cloud product and our customers and getting to know the codebase of a large distributed system
As we are remote-first and our engineering organization is largely remote, we provide guidance and meet regularly using video calls, so an independent attitude and good communication skills are a must.
What Makes You a Great Fit:
You are a motivated self starter with a bias towards action
You are customer focused
We build everything with our users in mind.
You have a passion for creating intuitive products that fit customers’ needs
Pragmatism: You are able to take on complex challenges and break them down to achieve short feedback loops: to analyze, design, and build modular solutions, deliver MVPs, gather data and feedback and then progress iteratively
Collaboration and communication: The smallest unit we have is a team. You’ll be working with your teammates in a fully remote setup. Good communication skills are a must
Solid experience with Go, Rust, Python, or other similar programming languages
Demonstrated knowledge of and experience working with large distributed systems
Experience with delivering projects from gathering requirements, brainstorming ideas all the way to shipping a product to the customer’s hands in a self-driven way
Experience with developing software that runs in the Cloud o r experience with systems engineering
Experience writing clean, robust, and performant software that is easily maintained by others
We invest heavily in developer productivity. You can use modern AI coding assistants as part of your daily workflow (your choice of tools, within security guidelines), backed by a company-funded usage budget so you can iterate quickly without unnecessary friction. We encourage pragmatic AI-assisted development: faster prototyping, test generation, refactors, documentation, and incident follow-ups—always with strong code review and quality standards. You'll also have access to the latest frontier models from OpenAI, Anthropic, and Google.
Bonus Points For:
Have been a user of Grafana and Prometheus in operational roles (including on-call for your team at a previous employer or just using these tools on hobby/homelab projects)
Familiarity with being on-call and performing operations/SRE tasks or with the concept of infrastructure as code
In Canada, the OTE (On-Target Earnings)/Base compensation range for this role is CAD $170,247 - $204,297. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
100% Remote, Global Culture -
As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose.
Scaling Organization
– Tackle meaningful work in a high-growth, ever-evolving environment.
Transparent Communication
– Expect open decision-making and regular company-wide updates.
Innovation-Driven
– Autonomy and support to ship great work and try new things.
Open Source Roots
– Built on community-driven values that shape how we work.
Empowered Teams
– High trust, low ego culture that values outcomes over optics.
Career Growth Pathways
– Defined opportunities to grow and develop your career.
Approachable Leadership
– Transparent execs who are involved, visible, and human.
Passionate People
– Join a team of smart, supportive folks who care deeply about what they do.
In-Person onboarding
- We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it.
Balance is Key
- We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect.
*We will comply with local legislation where applicable.
Equal Opportunity Employer:
Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our
privacy policy
.
Location: United States (Remote)
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at
grafana.com
and follow us on
LinkedIn
and
X
.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote opportunity for candidates located in Canada and US.
The Opportunity:
The Grafana Search & Storage squad is developing Grafana’s next-generation storage layer. As a key component of our App Platform, Unified Storage enables developers to build innovative applications using a Kubernetes-inspired Operator pattern to interact with data directly.
In addition to operating Unified Storage at scale within Grafana Cloud, our team manages two essential features for discovery and organization: Search, the unified engine for finding and querying all Grafana data, and Folders, for hierarchical content management.
What You’ll Be Doing:
Take an active role in influencing our roadmap and your own career objectives
Work with your team to deliver new features, then use the results to iterate and improve.
Drive projects from initial ideation all the way to operations once it is in the hands of customers
Embrace our open-source culture and contribute to other projects that may not directly fall within your team’s scope
Design, build, operate, and maintain critical systems, owning the reliability, performance, and
availability
Be a part of your team’s on-call rotations and take ownership of the services you’re running
Mentor and support other team members, participate in design discussions and collaborate with the team
Learn new skills by gaining a deeper understanding of our cloud product and our customers and getting to know the codebase of a large distributed system
As we are remote-first and our engineering organization is largely remote, we provide guidance and meet regularly using video calls, so an independent attitude and good communication skills are a must.
What Makes You a Great Fit:
You are a motivated self starter with a bias towards action
You are customer focused
We build everything with our users in mind.
You have a passion for creating intuitive products that fit customers’ needs
Pragmatism: You are able to take on complex challenges and break them down to achieve short feedback loops: to analyze, design, and build modular solutions, deliver MVPs, gather data and feedback and then progress iteratively
Collaboration and communication: The smallest unit we have is a team. You’ll be working with your teammates in a fully remote setup. Good communication skills are a must
Solid experience with Go, Rust, Python, or other similar programming languages
Demonstrated knowledge of and experience working with large distributed systems
Experience with delivering projects from gathering requirements, brainstorming ideas all the way to shipping a product to the customer’s hands in a self-driven way
Experience with developing software that runs in the Cloud o r experience with systems engineering
Experience writing clean, robust, and performant software that is easily maintained by others
We invest heavily in developer productivity. You can use modern AI coding assistants as part of your daily workflow (your choice of tools, within security guidelines), backed by a company-funded usage budget so you can iterate quickly without unnecessary friction. We encourage pragmatic AI-assisted development: faster prototyping, test generation, refactors, documentation, and incident follow-ups—always with strong code review and quality standards. You'll also have access to the latest frontier models from OpenAI, Anthropic, and Google.
Bonus Points For:
Have been a user of Grafana and Prometheus in operational roles (including on-call for your team at a previous employer or just using these tools on hobby/homelab projects)
Familiarity with being on-call and performing operations/SRE tasks or with the concept of infrastructure as code
In US, the OTE (On-Target Earnings)/Base compensation range for this role is USD $154,445 - $185,334. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
100% Remote, Global Culture -
As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose.
Scaling Organization
– Tackle meaningful work in a high-growth, ever-evolving environment.
Transparent Communication
– Expect open decision-making and regular company-wide updates.
Innovation-Driven
– Autonomy and support to ship great work and try new things.
Open Source Roots
– Built on community-driven values that shape how we work.
Empowered Teams
– High trust, low ego culture that values outcomes over optics.
Career Growth Pathways
– Defined opportunities to grow and develop your career.
Approachable Leadership
– Transparent execs who are involved, visible, and human.
Passionate People
– Join a team of smart, supportive folks who care deeply about what they do.
In-Person onboarding
- We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it.
Balance is Key
- We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect.
*We will comply with local legislation where applicable.
Equal Opportunity Employer:
Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our
privacy policy
.
Команда безопасности ИИ ищет специалиста для whitebox-анализа LLM-приложений, AI-агентов, RAG и векторных БД. Нужно выявлять prompt injection и другие AI-угрозы, проверять защитные фильтры и контроль вызовов инструментов.
Location: Global
We are the creators of a new fintech era!
Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey.
We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT and VISA.
The future of Web3 starts with you: join us as an Application Security Engineer!
Requirements
2+ years of experience in Application Security, Product Security, or a related security role.
Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices.
Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing.
Ability to review source code and identify security vulnerabilities.
Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools.
Understanding of CI/CD pipelines and experience integrating security checks into the SDLC.
Knowledge of API security, authentication, authorization, and common security protocols.
Familiarity with cloud, container, or Kubernetes security.
Basic knowledge of Web3 and smart contract security.
Basic scripting or programming skills, preferably in Python or another relevant language.
Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders.
Responsibilities
Perform application security assessments, source-code reviews, and penetration testing.
Participate in threat modeling and security architecture reviews for new and existing products.
Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess their severity and business impact, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams.
Identify, prioritize, and track vulnerabilities throughout the remediation process.
Provide developers with clear remediation guidance and secure coding recommendations.
Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines.
Participate in defining and reviewing security requirements throughout the software development lifecycle.
Validate security-tool findings and help reduce false positives.
Support investigations and remediation of application-related security incidents.
Contribute to application security standards, guidelines, and reusable security controls.
Help deliver security training and promote secure development practices across engineering teams.
Collaborate with developers, DevOps, QA, product teams, and other security specialists.
Monitor emerging application security threats and contribute to improving AppSec processes.
Ukrainian (Native)
English (B1)
Working terms
Immerse yourself in Crypto & Web3:
Master cutting-edge technologies and become an expert in the most innovative industry.
Work with the Fintech of the Future:
Develop your skills in digital finance and shape the global market.
Take Your Professionalism to the Next Level:
Gain unique experience and be part of global transformations.
Drive Innovations:
Influence the industry and contribute to groundbreaking solutions.
Join a Strong Team:
Collaborate with top experts worldwide and grow alongside the best.
Work-Life Balance & Well-being:
Modern equipment.
Comfortable working conditions, and an inspiring environment to help you thrive.
24 calendar days of paid leave.
Additional days off for national holidays.
With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career!
Let’s Build the Future Together!
WhiteBIT offers all candidates an equal opportunity to join the team. All hiring decisions are made without regard to race, national origin, gender identity or sexual orientation, age, religion, disability, medical condition, marital status, familial status, veteran status, or any other legally protected characteristic of an individual.
Your privacy matters to us. You can learn more about how we handle your personal data with regard to your application in our
Candidate Privacy Notice
.
Location: Remote - APAC
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role:
As a Site Reliability Engineer at Alpaca, you'll help keep our brokerage platform reliable, observable, and operable as we grow - working across our cloud infrastructure, Kubernetes platform, observability stack, messaging layer, and data layer. We're especially interested in candidates with strong PostgreSQL fundamentals who'd like to grow into deeper ownership of our database reliability posture: PostgreSQL sits on the trading-critical path, and we want this person to spend a meaningful share of their time leveling it up while still being a well-rounded SRE the rest of the week.
Things You Get To Do
Operate production day-to-day
- oncall, incident response, postmortems, and the follow-ups that actually close the loop.
Own reliability practice
- define and refine SLIs/SLOs and error budgets, and help product teams live within them.
Strengthen our observability
across metrics, logs, traces, and alerting.
Ship infrastructure through code
in a GitOps workflow - cloud resources and Kubernetes workloads alike.
Look after PostgreSQL
: performance tuning, schema and migration review, online migrations on large tables, HA/DR, and CDC pipelines.
Mentor engineers
on reliability and database fundamentals through code review, design review, and pairing.
Who You Are (must-haves)
4+ years
in SRE, DevOps, Platform/Infrastructure, or backend engineering with significant production operations ownership.
Hands-on experience operating production services on
Kubernetes
, and shipping infrastructure as code in a GitOps workflow.
Solid working knowledge of PostgreSQL in production
— query plans, pg_stat_*, indexing and schema trade-offs, and what a safe online migration looks like on a non-trivial table.
Cloud networking fundamentals
(VPCs, routing, L4/L7 load balancing, DNS, TLS) and comfort debugging cross-service connectivity.
Comfortable with a modern observability stack and
proficient with Linux
at the operator level.
Practiced in
incident response
- calm under pressure, structured debugging, postmortems that drive change.
At least working proficiency in
Go or Python
, plus strong written and verbal communication.
Genuine interest in databases and in growing your PostgreSQL/DBA expertise.
Who You Might Be (Nice-to-Haves):
Deeper PostgreSQL experience: large clusters at OLTP load, online migrations on big tables, HA/DR ownership, connection pooling at scale, or change-data-capture pipelines.
Experience with typed SQL access layers in Go (e.g. pgx, gorm, sqlc).
Production experience with messaging systems at scale (e.g. RabbitMQ, Kafka, Redpanda).
Security & compliance experience in a regulated environment (SOC 2, secrets management, audit logging).
Familiarity with trading, brokerage, or other regulated fintech domains.
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
Компания: Lagrange Labs Формат: remote Уровень ЗП: от 5 000 до 7 000 USD Занятость: full-time 🖥 Формат Удалённая 🕹 Работодатель Lagrange Labs 🕹 Список обязанностей: — Развертывание и эксплуатация инфраструктуры для генерации ZK-доказательств в промышленном масштабе. — Управление парком блокчейн-нод (Full nodes, Archive nodes) в различных сетях.
Location: Kazakhstan
OUR HIRING PROCESS:
We will review your application against our job requirements. We do not employ machine learning technologies during this phase as we believe every human deserves attention from another human. We do not think machines can evaluate your application quite like our seasoned recruiting professionals—every person is unique. We promise to give your candidacy a fair and detailed assessment.
We may then invite you to submit a video interview for the review of the hiring manager. This video interview is often followed by a test or short project that allows us to determine whether you will be a good fit for the team.
At this point, we will invite you to interview with our hiring manager and/or the interview team. Please note: We do not conduct interviews via text message, Telegram, etc. and we never hire anyone into our organization without having met you face-to-face (or via Zoom). You will be invited to come to a live meeting or Zoom, where you will meet our INFUSE team.
From there on, it’s decision time! If you are still excited to join INFUSE and we like you as much, we will have a conversation about your offer. We do not make offers without giving you the opportunity to speak with us live.
INFUSE is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our
Privacy Policy
INFUSE is looking for a
Senior DevOps Engineer
to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization.
We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.
As part of our dynamic team, your responsibilities in this role will include:
Design, build and run secure
AWS infrastructure
(EC2 with Docker Compose, EKS) with
Terraform and Ansible
; move suitable workloads from EC2 to EKS
Build and maintain
CI/CD in GitHub Actions
; move remaining Jenkins jobs to GitHub Actions
Keep new and existing services at our security baseline:
Cloudflare proxy with WAF
and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root
Own monitoring, alerting and logs on our standard stack (
Grafana, OpenTelemetry, Sentry
); on-call, incident response, post-incident reviews
Own backups and regular restore tests
Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects
Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket
Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards
Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review
Work with internal teams and contractors
; set and enforce standards; mentor other engineers.
Our ideal candidate possesses the following skills:
5+ Years in DevOps / SRE:
Proven background operating mission-critical production environments, including
3+ years of hands-on experience running AWS
at scale
IaC & CI/CD Mastery:
Expert with
Terraform
, highly proficient with
Ansible
, and experienced in designing production workflows with
GitHub Actions
Containerization & Kubernetes:
Strong production experience with
Docker
and
Kubernetes
(specifically managed AWS
EKS
and
Helm
)
Production Security & Incident Management:
Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and
Cloudflare WAF/proxy
configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills
English proficiency
at
B2 level or higher
.
What Else We Expect & Value:
Application Ecosystem Familiarity:
Experience supporting Node.js and Python microservices
paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare
Modern Observability:
Practical setup and maintenance of
Grafana
,
Prometheus
, and
OpenTelemetry
pipelines
Core Scripting & Systems:
Deep fluency in
Linux
administration,
Bash
, and
Python
scripting.
Collaborative Leadership:
Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.
AI-Augmented Workflow:
Daily experience leveraging modern AI developer tools and agents (
Claude Code preferred
) to accelerate engineering output.
Proactive & Autonomous Mindset:
A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table.
Nice to have:
Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications.
What we offer:
Fully remote
work format
Schedule:
Monday–Friday, 2 PM – 11 PM Eastern European Time
(including 1 hour break)
A collaborative, innovation-first environment that values initiative and experimentation
Paid time off and sick leave
Reduced working hours on Fridays during the summer
Days off on US national holidays and your birthday.
Hiring process:
Interview with Recruiter
Technical Interview
Interview with Hiring Manager
Offer.
If you meet these criteria and are excited about contributing to our team, we encourage you to apply.
We look forward to meeting you!
👋
Location: Paris
Workplace: Remote
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
THE TEAM
Mistral is building a sovereign AI cloud for Europe. Our customers in finance, healthcare, and the public sector run frontier models on European-jurisdiction infrastructure, and the Cloud Platform team builds the systems that make that possible — compute orchestration, Kubernetes, bare metal, storage, networking, and the datacenter fleet that runs it all.
We run it all on our own metal, our own network, our own datacenters — which means when something breaks, the fix is ours to write.
European Compute Units let enterprises commit to multi-year capacity on that infrastructure, and we are scaling toward a gigawatt of compute across Europe by 2030. You will design and ship the layer every sovereign AI deployment depends on.
THE ROLE
AI agents don't run in browsers. They run in sandboxes — and you will build ours.
We build secure, isolated, network-controlled environments with snapshotting primitives, designed for AI agents and reinforcement-learning workloads. An RL training run doesn't need one environment; it needs thousands, created and destroyed every second. An agent needs to be sandboxed from the world while still feeling fast enough to be useful. That tension — airtight isolation, at fleet scale, at low latency — is the product.
Your customers are the people building the next generation of AI software on our infrastructure; the primitives you ship become the runtime their agents live in.
WHAT YOU WILL DO
- Build the isolation layer: microVMs or containers, namespaces, cgroups, seccomp, snapshot and restore.
- Own the security boundary. Customers run code they didn't write and can't fully trust — your systems make that safe.
- Scale to fleets: creation latency, density, and lifecycle management for thousands of concurrent environments.
- Write Go and own the architecture and the hardest implementation decisions.
- Partner with Product Managers to turn frontier research needs into shippable primitives.
WHAT WE'RE LOOKING FOR
- Deep Linux internals: namespaces, cgroups, seccomp, virtualization — ideally microVMs of the Firecracker class.
- You have shipped production systems in Go. Not dabbled. Shipped.
- You understand network isolation at the packet level — not just firewall rules.
- Performance instincts: you know what a syscall costs, and you have the profiles to prove you've cared.
- 5+ years building backend or infrastructure systems.
- You have partnered with product, design, and business teams to ship software that reached real users.
- A low-ego, team-first mindset. We care less about your exact domain and more about whether you are the kind of technical force other engineers want to work alongside.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Paris
Workplace: Remote
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
THE TEAM
Mistral is building a sovereign AI cloud for Europe. Our customers in finance, healthcare, and the public sector run frontier models on European-jurisdiction infrastructure, and the Cloud Platform team builds the systems that make that possible — compute orchestration, Kubernetes, bare metal, storage, networking, and the datacenter fleet that runs it all.
We run it all on our own metal, our own network, our own datacenters — which means when something breaks, the fix is ours to write.
European Compute Units let enterprises commit to multi-year capacity on that infrastructure, and we are scaling toward a gigawatt of compute across Europe by 2030. You will design and ship the layer every sovereign AI deployment depends on.
THE ROLE
You will build storage on our cloud.
Block, filesystem, and object storage for training runs, sandboxed workloads, and general compute: you help decide what we build, what we buy, and how it adds up to storage our customers can bet a business on. Some layers we deploy and harden from best-in-class vendors. The ones that matter most we write ourselves in Go — S3-compatible object storage, tiering, backup and recovery, caching layers that put cold data on cheap spinning disks.
Storage is a strategic bet for this org: the systems you build will define how a gigawatt of European compute stores its data.
WHAT YOU WILL DO
- Build the storage stack — block, file, object — for training, sandbox, and general compute workloads.
- Design and write our own services in Go: S3-compatible APIs, tiering, backup and recovery, caching layers.
- Own the data plane: allocation, duplication, tiering, backup and recovery.
- Plan capacity across datacenters and across failure domains — petabytes, not terabytes.
- Partner with Product Managers to shape the storage roadmap and make the technical and business tradeoffs.
WHAT WE'RE LOOKING FOR
- You have built storage systems — object, block, or distributed filesystems — not just operated them. You know what happens when a disk dies mid-write and when a rebalance collides with a backup window.
- Deep distributed-systems fundamentals: durability, consistency, replication, erasure coding, failure domains.
- You have shipped production systems in Go. Systems engineers coming from C++ or Rust who are ready to write Go daily should still talk to us.
- You are comfortable with hardware reality: HDD, SSD, and NVMe tiers, and the economics of each.
- 5+ years building backend or infrastructure systems.
- You have partnered with product, design, and business teams to ship software that reached real users.
- A low-ego, team-first mindset. We care less about your exact domain and more about whether you are the kind of technical force other engineers want to work alongside.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
УдалённоseniorRemote Canada
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
УдалённоParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
УдалённоParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks