Senior Infrastructure Security Engineer

• Support incident management and resolution, play a leading role in refining our incident management procedures, ensure adherence to those procedures, and facilitate activities for those procedures.
• Improve Secure Software Development Lifecycle, make improvements to our Software Development Lifecycle to improve security: vulnerability scanning, remediation process; ensuring that remediations are made within the prescribed timeframes; and developing educational materials for all engineers within the company
• Streamline Customer Security Questionnaire Handling, work on various projects to streamline Federato’s ability to answer Customer Security questionnaires by applying technology and developing tooling or systems
• Business Continuity/Disaster Recovery Planning, assess threats to business continuity and develop disaster recovery plans for them, ensure recurring exercises of those plans are conducted

• Collaborate with cross-functional teams to provide infrastructure support for new features and services.
• Enhance and automate infrastructure management using tools like Terraform, Argo, and GitHub Actions to streamline deployments and operational processes.
• Manage and optimize our GCP and Kubernetes (GKE) environment, ensuring performance, scalability, and reliability.
• Improve our observability stack, working with tools such as Sentry, Prometheus, Grafana, and Alert Manager to provide real-time monitoring and proactive alerting.
• Set up and maintain performance monitoring tools, including k6 and other solutions, to ensure optimal performance and capacity planning.

• 5+ years of hands-on experience managing cloud infrastructure and automation.
• Experience in achieving SOC2 Type II, ISO 27001, or similar certifications
• Experience with Node.js or Python for backend services in a microservices architecture.
• 3+ years of experience with cloud providers, preferably Google Cloud Platform (GCP).
• 3+ years of experience managing Kubernetes clusters in production environments.
• Knowledge of asynchronous processing, message queues (e.g., Kafka, Pub/Sub), and event-driven architecture for backend applications.
• Experience focused on the internal engineer team success

$170,000 - $210,000 a year
Final offer amounts are determined by multiple factors including candidate location, experience and expertise and may vary from the amounts listed above. Total compensation package does include stock options, benefits and additional perks.