Senior Software Engineer, Infrastructure

• Contribute to backend services (FastAPI, SQLAlchemy) in Python and TypeScript.
• Work alongside product engineers as a first-class contributor, making architecture decisions that balance speed, cost, and reliability.
• Build developer experience tooling: local dev environments, CI pipeline improvements, and automated testing scaffolds that make the whole team faster.
• Support and extend Temporal-based workflow orchestration for background processing.

• Implement least-privilege IAM policies, IRSA (IAM Roles for Service Accounts), and network segmentation in a GovCloud environment.
• Manage secrets through AWS Secrets Manager and the External Secrets Operator with automated rotation.
• Maintain TLS automation via cert-manager and OIDC authentication flows.
• Enable SOC2, CMMC, and FedRAMP compliance activities: GRC platform integration, audit logging pipelines, FIPS-validated endpoint configuration, system boundary documentation, and evidence collection for third-party assessments.
• 5+ years of professional experience in infrastructure, DevOps, SRE, or platform engineering.
• Deep hands-on experience with AWS services in production (EKS, IAM, Secrets Manager, ECR, RDS).

with or strong working knowledge of AWS GovCloud is a significant plus.

• Strong Kubernetes expertise: you've operated clusters, debugged networking issues, managed Helm charts, and tuned workloads.
• Proficiency in Python and/or TypeScript with a genuine interest in writing application code alongside infrastructure work.
• Experience with GitOps workflows: ArgoCD, GitHub Actions, and Helm-based deployments.
• Solid understanding of networking fundamentals (DNS, load balancing, TLS, Kubernetes Gateway API).
• Comfort with Linux systems administration and shell scripting.
• Familiarity with compliance-driven infrastructure: audit logging, access controls, and evidence collection for frameworks like CMMC, FedRAMP, and SOC 2.
• A collaborative, low-ego mindset: you thrive in small, fast-moving teams.

Nice to Have

• Experience with Envoy Gateway or the Kubernetes Gateway API.
• Background in PostgreSQL administration and schema-based multi-tenancy.
• Familiarity with the Grafana observability stack (Loki, Tempo, Prometheus).
• Experience with Karpenter for node autoscaling or cost optimization strategies for cloud spend.
• Experience with Temporal for workflow orchestration.
• Experience in a startup or high-growth environment where you wore many hats.