Staff Infrastructure & Security Engineer

• →Serve as the technical DRI for the Infra & Security group: own the architecture, set the standards, and make the technical calls across infrastructure, DevOps, and security engineering.
• →Own the cloud platform end-to-end: infrastructure reliability, CI/CD and delivery automation, and the infrastructure-as-code beneath them.
• →Drive a simpler, isolated architecture through shrinking the surface area we defend and maintain: Retire legacy and unused services, consolidate SaaS and vendors, and unwind standing external dependencies.
• →Own infra & security incident-response: a staffed rotation with no single point of failure, severity-matched response, actionable alerting, and runbooks.
• →Bring identity and access under a single source of truth: human, service, machine, and agent identity.
• →Build the Production-agent Infrastructure that lets autonomous agents run and self-verify safely in production.
• →Drive and maintain our security-compliance and supply-chain scanning programs.

• Deep cloud engineering experience, primarily in AWS: designing, building, and operating production infrastructure at scale.
• Strong in CI/CD and delivery automation (CircleCI, Nomad, or equivalent) and infrastructure-as-code (Terraform), with ownership of a real production system's reliability.
• Apply security pragmatically:  isolation, least-privilege, RBAC, blast-radius containment.
• A formal background in information security or cybersecurity, including having led a SOC 2 (or similar) compliance audit.
• Has led at least one enterprise security-breach or data-leak incident response.
• Comfortable as a hands-on technical lead and DRI:  work through architecture, standards, and code review, set technical direction, and raise the bar across a team.
• A bias toward simplicity and subtraction.
• AI-forward: build for isolation, safe data, and non-human identity, and the infrastructure behind it.
• Communicate crisply across engineering, IT/Security, Legal, and Finance.

• Experience operating Temporal or similar durable-workflow infrastructure in production.
• Hands-on with supply-chain / dependency vulnerability scanning (Endor Labs, Snyk, or equivalent).
• Compliance-as-code experience:  treating controls and evidence as an engineering artifact.
• Familiarity with agent / sandbox isolation patterns: dedicated accounts, scoped tokens, ephemeral environments, and data masking.
• Secrets and credential management at scale (1Password, AWS SSM, or equivalent).
• Experience in insurance, fintech, or another regulated domain.
• A university degree in cybersecurity or a related field.

(Please note these steps may vary slightly depending on the role)

• 30-minute phone call with our recruiting team
• 30-45 minute video interview with the hiring manager
• Case study/technical screen
• Meet the team! 30-45 min 1:1 video discussion with 3-4 team members you’d work closely with in the role
• Executive chat