Staff Infrastructure Engineer - DevSecOps

GridCARE • Redwood City, CA

2d • Hybrid

About The Position

The ideal candidate will be responsible for designing, implementing, and maintaining robust cloud infrastructure with security measures for our B2B SaaS platform, which leverages machine learning models and cloud-native technologies. This role requires deep expertise in cloud security (GCP/AWS/Azure), infrastructure-as-code, and securing complex, data-intensive environments.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 7+ years of experience in Infrastructure Security, DevOps, or a related field.
• Extensive experience with at least one major cloud provider (GCP, AWS, or Azure).
• Proficiency with Infrastructure as Code (IaC) tools such as Terraform.
• Strong understanding of network security, identity and access management (IAM), and endpoint security.
• Experience with vulnerability management tools and Security Information and Event Management (SIEM) systems.
• Experience with container security (Kubernetes).

Nice To Haves

• Experience securing machine learning infrastructure and model deployment pipelines.
• Relevant industry certifications (e.g., CISSP, SANS GIAC certifications).
• Experience implementing controls for SOC 2 Type II attestation.
• Experience improving IT tooling across an organization
• Proven ability to work with cross-functional teams to drive security initiatives.
• Proven experience in building and shipping B2B SaaS platforms for startups

Responsibilities

• Develop and maintain our cloud infrastructure and the infrastructure as code (IaC) tooling to manage it
• Design, implement, and manage security controls for our cloud infrastructure and CI/CD pipelines.
• Implement security measures to protect data-in-transit and data-at-rest, particularly sensitive customer data.
• Collaborate with engineering and ML teams to embed security throughout the development lifecycle.
• Maintain compliance with industry standards and regulations particularly SOC 2 Type II.
• Serve as the technical lead for our SOC 2 compliance program, managing automated evidence collection through platforms like Vanta or Drata and remediating infrastructure gaps identified by these tools.
• Design and evolve the internal SaaS and productivity stack to scale with the company’s growth
• Mentor junior engineers and contribute to the overall security posture of the organization.
• Stay engaged with the latest infrastructure and security engineering news, standards, and emerging AI-driven solutions.

Benefits

• Competitive salary and equity.
• Comprehensive benefits package: 401k, healthcare, dental, vision, etc.
• Hybrid work environment with catered lunches and snacks.
• The chance to work at the intersection of AI, automation, data systems, and the Power Industry alongside experienced engineers and leading researchers.
• A mission-driven team focused on shaping the future of the energy transition.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level