Senior Software Engineer, DevOps & Security

Socket.dev; Vancouver; On-site; CAD 110,000 - 140,000; Full time

Job summary

Klue’s Engineering team is hiring in Vancouver to build the next generation of platform infrastructure for an AI-first engineering org. You’ll own real infrastructure at scale, shaping IaC, GKE, and CI/CD architecture, while ensuring security, cost visibility, and reliability across production.

We are seeking systems-minded, proactive engineers who can balance proactive improvements with firefighting, always seeking improvements that reduce toil and improve velocity.

Qualifications

• Deep, hands-on experience in DevOps, SRE, platform, or infrastructure engineering with production systems.
• Deep, practical Kubernetes knowledge.
• Infrastructure as code treated as software (Pulumi or Terraform).
• Strong_GCP or AWS fundamentals.

Responsibilities

• Own the paved road for infrastructure and extend Pulumi components for disaster-recovery-ready infra.
• Manage GKE like a product: upgrades, in-cluster services, right-sizing, policy enforcement.
• Own core CI/CD building blocks to reduce time and flake rate and standardize the golden path for shipping services.
• Improve internal developer platform surfaces to show what's happening under the hood.
• Own observability: instrumentation, alerts, and reduce on-call noise.
• Drive cost efficiency in GCP and LLM through attribution and right-sizing.
• Extend security controls in the software supply chain and automate SOC 2/compliance controls.

Skills

DevOps experience

Kubernetes

IaC

GCP/AWS

Systems engineering

CI/CD as product

Security tooling

SOC 2 compliance

Ownership mindset

Fluent English

Job description

At Klue, We’re Building the Future of Competitive Intelligence

The Engineering team is hiring

This role exists to make the correct way to build and ship at Klue the easy way. When the paved road, shared infrastructure, CI/CD, and guardrails are solid, every engineer at Klue gets faster, safer, and more cost effective to support, without having to think about it.

You'll work alongside the rest of the DevOps team, as well as engineering managers across Product, Data, and AI, and our Security and Compliance stakeholders.

This is a role for someone who is systems-minded, pragmatic, security-aware, and allergic to toil. Someone who'll jump in when the platform's on fire, but always ask what change stops the next one from starting. You balance proactive and reactive work, and when you get to choose, you choose proactive. That's what moves the ratio in the right direction.

What’s In It for You?

You'll own real infrastructure at real scale and have deep, hands-on experience across cloud, platform engineering, infrastructure, and developer experience, with authority over the IaC, GKE, and CI/CD architecture every team depends on. You'll help shape how a fast-moving, AI-first engineering org ships software safely.

Klue moves fast and builds AI-first. This role involves keeping engineering fast, the platform scalable and secure, and costs fully visible. The four areas below are where most of that lives, not where it ends:

What You’ll Do

• Own the paved road for infrastructure. Build and extend our Pulumi component library so teams get correct, disaster-recovery-ready infrastructure by default instead of hand-rolling stacks across our GCP environments.

• Run GKE like a product. Handle cluster and node pool upgrades, in-cluster services, workload right-sizing, and policy enforcement so Kubernetes stays reliable as we scale.

• Make CI/CD something engineers never think about. Own the core building blocks of our CI/CD workflows, cut CI time and flake rate fleet-wide, and standardize the golden path for shipping services.

• Give engineers real visibility into their own systems. Improve the internal developer platform surfaces that show what's actually happening under the hood.

• Keep production legible. Own the health of our observability stack: consistent instrumentation, actionable alerts, and less noise on-call.

• Treat cost like an engineering problem. Drive GCP and LLM cost reduction through attribution, right-sizing, commitment planning, and killing off orphaned resources.

• Make the secure path the fast path. Extend our software supply chain controls, own infrastructure identity and access, and build SOC 2 and other compliance requirements into automated, evidenced controls, so audits are a byproduct of how we build.

What Success Looks Like

We want you to love the role you are in and believe these skills and experiences will help you to be successful!

• Self-Serve Platform: New services are provisioned from standardized components without DevOps writing bespoke infrastructure

• Reactive Load Trends Down: DevOps spends less time on reactive work every quarter, on-call page volume moves in the same direction.

• CI Speed & Trust: Median pipeline duration and flaky-failure rate both drop measurably across the fleet

• Security & Audit Readiness: Controls are automated and evidenced, with audit findings in your areas trending to zero.

• Cost Efficiency: GCP spend per unit of workload declines through right-sizing and cleanup, with clear per-team attribution that makes tradeoffs visible to their owners.

• Reliability: The services that matter have published SLOs, real error budgets, and incident reviews that produce durable platform fixes.

• Automation Over Repetition: Recurring manual work gets automated, not repeated.

What You Bring

Must-Haves

• Deep, hands-on experience in DevOps, SRE, platform, or infrastructure engineering, operating production systems that paying customers depend on, including being on-call for them.

• Deep, practical Kubernetes knowledge.

• Infrastructure as code treated as software. Pulumi or Terraform.

• Strong GCP or AWS fundamentals.

• You have a background in systems engineering and writing software.

• CI/CD owned as a product. You've built and maintained pipelines used by other teams, GitHub Actions or Buildkite preferred, GitLab CI / CircleCI transfers.

• Hands-on experience with security tooling as an engineering practice.

• Compliance engineering for SOC 2 or enterprise partner security programs implemented as automated controls; threat modeling, etc

• Ownership under ambiguity. You scope a vague problem, ship it incrementally, and tell people clearly what changed and why.

• Fluent