Devsecops Engineer

Osition title: Senior Software Engineer, DevOps & SecurityWhat’s In It for You?
You'll own real infrastructure at real scale and have deep, hands-on experience across cloud, platform engineering, infrastructure, and developer experience, with authority over the IaC, GKE, and CI/CD architecture every team depends on. You'll help shape how a fast-moving, AI-first engineering org ships software safely.Klue moves fast and builds AI-first. This role involves keeping engineering fast, the platform scalable and secure, and costs fully visible. The four areas below are where most of that lives, not where it ends:What You’ll DoOwn the paved road for infrastructure. Build and extend our Pulumi component library so teams get correct, disaster-recovery-ready infrastructure by default instead of hand-rolling stacks across our GCP environments.Run GKE like a product. Handle cluster and node pool upgrades, in-cluster services, workload right-sizing, and policy enforcement so Kubernetes stays reliable as we scale.Make CI/CD something engineers never think about. Own the core building blocks of our CI/CD workflows, cut CI time and flake rate fleet-wide, and standardize the golden path for shipping services.Give engineers real visibility into their own systems. Improve the internal developer platform surfaces that show what's actually happening under the hood.Keep production legible. Own the health of our observability stack: consistent instrumentation, actionable alerts, and less noise on-call.Treat cost like an engineering problem. Drive GCP and LLM cost reduction through attribution, right-sizing, commitment planning, and killing off orphaned resources.Make the secure path the fast path. Extend our software supply chain controls, own infrastructure identity and access, and build SOC 2 and other compliance requirements into automated, evidenced controls, so audits are a byproduct of how we build.What Success Looks Like
We want you to love the role you are in and believe these skills and experiences will help you to be successful!Self-Serve Platform: New services are provisioned from standardized components without DevOps writing bespoke infrastructureReactive Load Trends Down: DevOps spends less time on reactive work every quarter, on-call page volume moves in the same direction.CI Speed & Trust: Median pipeline duration and flaky-failure rate both drop measurably across the fleetSecurity & Audit Readiness: Controls are automated and evidenced, with audit findings in your areas trending to zero.Cost Efficiency: GCP spend per unit of workload declines through right-sizing and cleanup, with clear per-team attribution that makes tradeoffs visible to their owners.Reliability: The services that matter have published SLOs, real error budgets, and incident reviews that produce durable platform fixes.Automation Over Repetition: Recurring manual work gets automated, not repeated.What You Bring
Must-HavesDeep, hands-on experience in DevOps, SRE, platform, or infrastructure engineering, operating production systems that paying customers depend on, including being on-call for them.Deep, practical Kubernetes knowledge.Infrastructure as code treated as software. Pulumi or Terraform.Strong GCP or AWS fundamentals.You have a background in systems engineering and writing software.CI/CD owned as a product. You've built and maintained pipelines used by other teams, GitHub Actions or Buildkite preferred, GitLab CI / CircleCI transfers.Hands-on experience with security tooling as an engineering practice.Compliance engineering for SOC 2 or enterprise partner security programs implemented as automated controls;
threat modeling, etcOwnership under ambiguity. You scope a vague problem, ship it incrementally, and tell people clearly what changed and why.Fluent with AI coding tools, with experience working with AI-first teams.Nice-to-HavesYou have owned platform migrations and decommissions.Built an internal developer platform or self-service tooling that other engineers adopted.Comfort with LLM infrastructure (gateways, token cost attribution, rate limiting, provider failover).Temporal*This posting is for an existing vacancy. Artificial intelligence tools may be used to screen, assess or select applicants as part of our recruitment process Accommodations are available on request for candidates taking part in all aspects of the selection process.
#J-18808-Ljbffr