СШАSenior/Staff Platform Engineer, Infrastructure & Security
6 дн. назад
СШАLeadRemote
cloudinfrastructuresecurityautomation
Build and operate secure cloud infrastructure and automate controls supporting AI-driven PCB design workloads.
О компании
- At , we are helping electrical engineers save time and accomplish more by automating the tedious and time-consuming task of designing printed circuit boards (PCBs). Our small team is composed of experts in electrical engineering, electromagnetic simulation, ML/AI, and high-performance computing (HPC). We are inventing and leveraging novel techniques to solve the decades-old problem of automating circuit board design where today hundreds of billions of dollars are spent. We have raised $25 million in Series B funding from some of the very best and are charging full-speed toward our goal.
- No matter where we come from, we're united by a common vision for the future and a core set of values we think will get us there:
- Curiosity
- Conviction
- Rigor
- We’re looking for a Senior or Staff Platform Engineer to build and operate secure cloud infrastructure and automate the controls we depend on.
- uses AI to automate printed circuit board placement and routing. Our Platform team builds the infrastructure that runs these compute-intensive workloads and supports our cloud service and customer-managed deployments. You’ll own systems from design through operation and help shape a growing team’s technical direction.
- Your primary focus will be cloud security, infrastructure maintenance, and control automation: access, secrets, vulnerability remediation, auditability, and repeatable evidence collection. You’ll own the engineering work behind those controls, partnering with business stakeholders on compliance scope and with Platform engineers on reliability, recovery, and efficiency improvements.
- This role suits someone who enjoys designing durable systems and operating them: investigating problems, closing security gaps, automating recurring work, and verifying that the controls we rely on actually work.
Обязанности
- Build and maintain secure infrastructure. Improve cloud and Kubernetes configuration, network boundaries, machine identities, secrets management, least-privilege access, and audit logging.
- Own the infrastructure maintenance lifecycle. Keep images, dependencies, and infrastructure components current; investigate vulnerability findings; prioritize remediation; and roll out changes safely.
- Implement and automate compliance controls. Translate agreed requirements into technical controls, validation checks, access reviews, evidence collection, and remediation tooling. Work with business stakeholders on scope and audit support for SOC 2, ISO 27001, and prospective FedRAMP work.
- Make recovery dependable. Work with service owners to implement and test backup/restore procedures, document recovery steps, and address gaps revealed by exercises and incidents.
- Improve operational readiness. Partner with service owners on useful alerts, incident playbooks, and communication. Participate in production troubleshooting and follow through on corrective work.
- Contribute to infrastructure efficiency. Help the team understand resource usage and cost, identify capacity constraints and waste, and make targeted improvements alongside security and maintenance priorities.
- Partner on safe deployment and data access. Work with the engineers building our delivery, runtime, and data platforms to embed security and operational requirements into reusable systems.
- Access and credential controls are documented and verifiable, infrastructure updates and vulnerability findings are addressed through a repeatable process, and required evidence can be produced without repeatedly reconstructing it by hand. Recovery procedures are tested with service owners, and incident follow-up leads to concrete improvements.
Требования
- Experience owning production cloud infrastructure, including the work of maintaining it, diagnosing failures, and making changes safely.
- Hands-on experience implementing security controls such as IAM, secrets management, network restrictions, audit logging, vulnerability remediation, or secure configuration.
- Practical Kubernetes, container, and infrastructure-as-code experience. AWS and Terraform are particularly relevant; comparable experience is welcome.
- Strong troubleshooting skills across Linux, networking, cloud services, and application behavior, with the judgment to choose a simple solution appropriate to the problem.
- Ability to build and maintain tested automation and small tools in a language such as Python or Go, and to work effectively with software engineers on shared systems.
- Ability to translate security requirements into technical controls and demonstrate that they work. You can explain implementation choices, validate behavior, and provide evidence for reviewers.
- Interest in owning recurring operational work and improving how it gets done, alongside larger engineering projects.
- Clear communication and prioritization: you can explain technical risks and tradeoffs, coordinate remediation across teams, and document decisions and procedures.
Будет плюсом
- Experience implementing technical controls or automating evidence for SOC 2, ISO 27001, FedRAMP, or a comparable program.
- Experience with AWS GovCloud, customer-managed infrastructure, or restricted-network environments.
- Familiarity with observability tools such as Prometheus, Grafana, OpenTelemetry, or cloud-native equivalents.
- Experience with artifact signing, software provenance, or automated verification of software supply-chain controls.
- Familiarity with GPU, ML, batch, or other compute-intensive workloads and their capacity/cost tradeoffs.
Условия
- Interesting and challenging work
- Competitive salary and equity benefits
- Health, dental, and vision insurance
- Regular team events and offsites (~4x / year)
- Unlimited paid time off
- Paid parental leave
- Want to learn more about , our vision, and our investors? Visit our About page and visit our Blog .