Sr. Infrastructure Engineer / Pulumi

Description

We are hiring a Senior Infrastructure Engineer to help build, scale, and secure our core platform and developer operations.

This role sits at the intersection of production reliability and system design. You’ll own our AWS infrastructure, accelerate developer workflows, implement robust CI/CD pipelines, and ensure our systems meet rigorous compliance and security standards. The team values automation—building through code rather than manual configuration—and treating infrastructure as a reliable product.

This is hands-on engineering in a system where correctness and clarity matter.

English fluency is a MUST for this role! Only candidates with level C1 or C2 will be considered:

A1 Beginner

A2 Elementary

B1 Intermediate

B2 Upper-Intermediate

C1 Advanced

C2 Proficient

Responsibilities

Infrastructure Management with AWS

• Maintain AWS infrastructure, including ECS, Aurora RDS (Gel), VPC networking, and monitoring stack (OpenTelemetry, Honeycomb, Sentry → but soon Datadog), and AWS access provisioning
• Implement role-based access policies, manage admin privileges in internal systems, and coordinate with user management frameworks

CI/CD Operations

• Improve GitHub Actions workflows, implement faster CI runners, enhance caching strategies, and manage multi-environment deployments (dev/prod) using Pulumi

TypeScript (Backend) & Developer Experience

• Enhance our TypeScript monorepo performance, optimize Nx build system, migrate from CommonJS to ESM, and improve our Docker-based DevContainers

MDM & Security & Compliance

• Support HIPAA compliance initiatives, including RBAC implementation, encryption standards, and security monitoring
• Set up stricter standards for MDM and implement robust monitoring with GuardDuty and CloudTrail

Monitoring & Observability

• Optimize our observability stack across web and mobile platforms
• Assist with on-call load reduction and enhance performance monitoring capabilities

AI Integration

• Accelerate developers and internal operations by exposing or configuring API and MCP access to our infrastructure, while keeping costs and security under control

Requirements

6+ Years of Infrastructure Engineering Experience

• Bring 6–10+ years of experience in infrastructure or platform engineering
• Ability to build and automate through code, not just configure systems manually

Security & Compliance Knowledge

• Expertise in SaaS administration, MDM solutions, and IT security best practices
• Strong understanding of SOC2 and HIPAA compliance requirements

Modern CI/CD & IaC Operations

• Deep engineering knowledge of GitHub Actions workflows, implementing faster CI runners, enhancing caching strategies, and orchestrating multi-environment deployments (dev/prod) using Pulumi.

Advanced Monorepo & Tooling Optimization

• Practical experience enhancing TypeScript monorepo performance, optimizing Nx build systems, migrating codebases from CommonJS to ESM, and improving Docker-based DevContainers.

Functional Programming Paradigms

• Strong comfort with immutability, explicit error handling, declarative composition, and designing highly predictable, testable systems.

AWS Infrastructure Management

• Proven track record of maintaining robust AWS infrastructure, including ECS, Aurora RDS (Gel), VPC networking, and managing AWS access provisioning.

AI & MCP Infrastructure

• Experience accelerating developer and internal operations by exposing or configuring API and MCP (Model Context Protocol) access to infrastructure, while keeping costs and security strictly controlled.

Nice To Have

The Effect Ecosystem

• Prior experience with Effect is a strong plus. If not, you should be excited to learn it and work day-to-day within a composable, typed effect system.

Observability Tooling

• Deep familiarity with open-source and enterprise monitoring stacks, specifically OpenTelemetry, Honeycomb, Sentry, or migrating/optimizing systems over to Datadog.

Automation & Orchestration

• Experience with workflow orchestration platforms (Temporal or similar), browser automation (Playwright), or reverse-engineering APIs via browser devtools.

Advanced Threat Detection

• Familiarity with setting up strict Mobile Device Management (MDM) standards and security monitoring tools like AWS GuardDuty and CloudTrail.