What You'll Do

Design and maintain AWS IAM roles, policies, and least-privilege boundaries across our accounts
Triage and resolve security issues; harden production against common threat vectors
Build cost monitoring and optimization for Cloud services and APIs
Own the API key and secrets lifecycle — issuance, rotation, scoping, revocation
Drive our SOC 2 Type II program: controls, evidence collection, audit prep
Ship preview deployment infrastructure so every PR gets a reviewable environment

Must-haves

3-5 years in a DevOps, SRE, or platform engineering role
Production AWS experience (IAM, VPC, ECS/EKS or Lambda, RDS, CloudWatch)
Infrastructure-as-code with Terraform (or CloudFormation/Pulumi)
CI/CD pipeline ownership (GitHub Actions, CircleCI, or similar) including preview/ephemeral environments
Containerization with Docker and a working knowledge of Kubernetes or ECS
Hands-on secrets management with a tool like AWS Secrets Manager, HashiCorp Vault, or Doppler
Demonstrated cost-optimization work — right-sizing, savings plans, usage dashboards
Comfort with a scripting language (Python, Go, or Bash) for automation
Security mindset: you've handled vulnerability scanning, patching, and incident response

Nice-to-haves

Direct experience taking a company through SOC 2 Type I or II (controls, auditor coordination, evidence automation with Vanta/Drata/Secureframe)
Experience optimizing spend on LLM/AI APIs (OpenAI, Anthropic, etc.) or real-time voice infrastructure (Twilio, Daily, LiveKit)
Observability stack work — Datadog, Grafana, Prometheus, OpenTelemetry
Background supporting low-latency or real-time systems (voice, streaming, WebRTC)
Exposure to SSO/identity federation
Open-source contributions to infra tooling
Prior early-stage startup experience where you wore multiple hats

Synth (YC S21)

New Jobs