Note: The job is a remote job and is open to candidates in USA. AuthZed creates and maintains SpiceDB and authorization infrastructure for companies worldwide. The Senior Site Reliability Engineer, Security will operate production Kubernetes and cloud infrastructure, strengthen infrastructure and software supply-chain security, build automated platform guardrails, improve vulnerability management and threat detection, respond to incidents, and partner with engineering on secure architecture and strategy.
Responsibilities
- Operate AuthZed's production infrastructure. Build, operate, and evolve the Kubernetes and cloud infrastructure that powers our managed services, with a focus on availability, scalability, performance, and security
- Advance our infrastructure security. Help evolve our approach to Kubernetes, cloud infrastructure, networking, IAM, secrets management, encryption, and service-to-service communication as our platform and customer base grow
- Secure the software supply chain. Continue strengthening security throughout the path from source code to production, including CI/CD, dependencies, container images, build artifacts, provenance, vulnerability scanning, and deployment controls
- Build security into the platform. Develop automated guardrails, policies, and secure defaults that make strong security practices part of the engineering platform rather than an additional manual process
- Evolve vulnerability management. Help us continuously improve how we identify, prioritize, and address vulnerabilities across containers, dependencies, infrastructure, and cloud services based on exposure and risk
- Improve detection and response. Expand security telemetry, logging, alerting, and detection capabilities and help develop and exercise security incident-response playbooks
- Respond to incidents. Participate in the SRE on-call rotation, lead or contribute to production incidents, and help continuously improve our operational practices
- Partner with engineering. Collaborate on architecture and infrastructure design, contribute to threat modeling, and help teams make strong security decisions early in the engineering lifecycle
- Help shape our security engineering strategy. Bring technical security expertise to engineering priorities, architecture decisions, customer security requirements, and the continued evolution of AuthZed's security posture
Skills
- Experience: 5+ years
- Visa: US citizen/visa only
- * Significant experience operating production systems as a **Site Reliability Engineer, Platform Engineer, Infrastructure Engineer, or Security Engineer**
- * Deep hands-on experience with Kubernetes and containerized production environments
- * Strong experience with at least one major cloud provider (AWS, GCP, Azure) and its security model
- * Strong understanding of IAM, workload identity, networking, TLS/PKI, encryption, secrets management, and cloud-native security
- * Experience with Infrastructure as Code; we use Pulumi, but experience with equivalent tooling such as Terraform or AWS CDK is welcome
- * Experience designing, operating, and securing CI/CD and software delivery pipelines
- * Strong understanding of Linux and container security fundamentals
- * Experience with observability, monitoring, logging, and production incident response
- * Strong software engineering skills and an inclination to solve operational and security challenges through automation
- * Strong security judgment and the ability to evaluate risk in the context of real-world distributed systems
- * Ability to operate independently, drive projects across engineering boundaries, and provide technical leadership in a small, highly technical organization
- * Experience operating distributed databases or other stateful distributed systems in production
- * Experience securing multi-tenant SaaS or cloud infrastructure
- * Experience contributing to security architecture, threat modeling, penetration testing, or security assessments
- * Relevant certifications such as Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), AWS Certified Security – Specialty, Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP)
Benefits
- Stock options at an early-stage startup.
- Comprehensive benefits including healthcare (US-based) and other insurance.
- A full remote and flexible schedule to accommodate different time zones
- Twice-yearly travel for team off-sites focused on team bonding, collaboration, and having fun!
Company Overview