Bare - metal infrastructure engineer building Render’s cloud hardware platform from colocation deployment through fleet automation. Scaling server infrastructure, Kubernetes integration, and operations across thousands of hosts.
About the role
- Staff infrastructure engineer owning Keycard’s BYOC deployments and cloud cells. Building secure, repeatable infrastructure for its agent identity and access platform.
Responsibilities
- Own the BYOC product lifecycle, including installation, upgrades, support, security reviews, and documentation
- Define compatibility across clouds, regions, Kubernetes versions, SCPs, egress proxies, and deprecation policies
- Build repeatable infrastructure-as-code cell deployments, account bootstrapping, and network patterns such as PrivateLink and certificates
- Deliver releases to independently versioned cells with staged promotion, approval gates, rollback, observability, runbooks, and audited break-glass access
- Build scoped-credential agents for pre-install checks, installations, failed-upgrade triage, and runbook drafting
- Optimize engineering time and cloud spend per installation
- Establish cell guardrails covering credential scope, isolation, workload identity, and PKI
- Collaborate with founders, identity and policy engineers, customers, and customer security teams
- Participate in escalation and on-call rotations
- Take the first customer-hosted deployment from pre-production to production
- Install a second customer deployment without bespoke work
- Publish the first BYOC support matrix and upgrade policy
- Agree a BYOC roadmap with product and engineering
Requirements
- Staff-level software engineering experience
- Experience building infrastructure as software with Pulumi, Terraform, or CDK
- Ability to write Go or TypeScript tooling
- Production experience with Kubernetes and Helm
- Deep AWS experience, especially IAM, permission boundaries, Organizations, SCPs, and VPC networking
- Experience running software in accounts or environments not directly controlled, such as customer VPCs, on-premises, or regulated networks
- Experience supporting customer-managed software through upgrades
- Experience shipping versioned releases with support matrices and deprecation policies
- Ability to debug across infrastructure and networking layers
- Experience working directly with customers’ platform and security teams
- Experience making product-versus-custom-work trade-offs
- Ability to write clear plans and asynchronous updates
- Experience using coding agents in infrastructure work and understanding where human review is required
- Authorization to work in the United States or Canada is required
- GCP or Azure experience, workload identity and PKI, OAuth/OIDC/mTLS, or MCP experience are strong-candidate additions
Benefits
- Generous equity package with 4-year vesting and a 1-year cliff
- Health, dental, vision, and paramedical coverage for you and your family
- 4 weeks vacation
- 11 statutory holidays
- 1 volunteer day annually
- Encouraged to take at least 2 weeks off each year to recharge
- New MacBook Pro
- $500 stipend for peripherals
- Best AI tools available
- Remote-first flexibility
- Asynchronous collaboration
- Huge autonomy and opportunity to gain mastery
- Team accountability culture
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Industrial systems specialist administering ICS infrastructure for Gibson Energy’s oil and gas operations. Securing servers, networks, control systems and field integrations from Calgary Head Office.
Senior Infrastructure Engineer building distributed systems, cloud tooling, and real - time data infrastructure. Supporting Liftoff’s AI - powered performance marketing platform for the mobile app economy.
Telco infrastructure architect designing Red Hat cloud, virtualization, and automation solutions. Advising telecommunications customers and leading integrated architecture implementations.
Staff Engineer designing secure Azure, Meraki, and FortiGate infrastructure for EQ Bank, Canada’s challenger bank. Defining network architectures, governance, and disaster recovery solutions.
Senior Frontend Infrastructure Engineer evolving React infrastructure, design systems, and reusable patterns. Building foundations for Seeq’s industrial process data insight software.
Infrastructure Security Engineer securing LiveKit’s production cloud infrastructure and customer - deployed voice AI agents. Building security guardrails, remediating risks, and automating PCI - DSS and ISO 27001 evidence.
Senior Infrastructure Security Engineer securing Zapier’s automation platform and production cloud environments. Improving IaC, Kubernetes, CI/CD security, data governance, and incident response.
Verification and validation developer building Python/C++ automation, telemetry, and CI/CD infrastructure. Supporting Octasic’s wireless SoC platforms and mission - critical communication systems.
Ingénieur logiciel chez Octasic, concevant l’infrastructure d’automatisation et d’observabilité V&V. Soutien aux systèmes sans fil et embarqués critiques via CI/CD, télémétrie et validation.