Site Reliability Engineer (Application Security)

ContactMonkey; Toronto; Hybrid; CAD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Hybrid Work

Employee Stock Options

Personal Development Budget

Bi-weekly Lunch & Learn

Monthly Team-building Activities

Health & Dental Coverage

Bonus Opportunities

Extended Vacation Days (34 days ofvac

Zusammenfassung

ContactMonkey Inc. is seeking a Platform Engineer to help push our production infrastructure forward. You will work with AWS, Kubernetes (EKS), Terraform, and Terragrunt to improve reliability, security, and deployment processes.

You’ll participate in on-call rotations and contribute to SOC 2 and GDPR compliance efforts while enabling AI-driven workflows across our stack. Join a fast-moving team focused on building scalable, secure, and observable systems, with hybrid work options and

Qualifikationen

• Experience with AWS and Kubernetes in production environments.
• Hands-on with Terraform and Terragrunt for IaC.
• Familiarity with SOC 2 and GDPR controls and security audits.
• Ability to participate in on-call rotations and incident reviews.

Aufgaben

• Maintain AWS and Kubernetes environments and improve availability.
• Optimize CI/CD pipelines and deployment automation.
• Collaborate with SRE and development teams to address production issues.
• Contribute to security enhancements and vulnerability remediation.
• Support AI-driven tooling and secure AI integrations.

Tools

AWS

Kubernetes (EKS)

Terraform

Terragrunt

GitHub Actions

Prometheus

Grafana

CloudWatch

Ruby on Rails

Vue.js

Node.js

MySQL

PostgreSQL

Sidekiq

Docker

Karpenter

KEDA

Jobbeschreibung

• Join us as we push engineering forward in a world that's changing fast. You'll help us evolve how we build, deploy, and secure software. Embracing new technologies, challenging the status quo, and finding better ways to ship faster without compromising reliability or security
• Working closely with our SRE and development teams, you'll help run and improve our production infrastructure, streamline deployments, investigate production issues, and address security risks
• You'll also help build the technical controls that support SOC 2 audits and GDPR compliance
• Our north star: Become an AI-first engineering team. AI coding agents are a core part of how we build and operate. We use them to write and review Terraform, debug incidents, automate repetitive operational work, and move faster without lowering the bar on quality or security
• We're looking for someone who already works this way, or is excited to: someone who knows how to direct an agent well, check its output with a critical eye, and spot where AI can remove toil from our infrastructure and security workflows
• You'll also help shape how we use AI safely, including guardrails, access controls, and keeping sensitive data protected
• Our environment includes AWS, Kubernetes on EKS, Terraform, Terragrunt, GitHub Actions, Prometheus, Grafana, and CloudWatch. Our applications use Ruby on Rails, Vue.js, and Node.js, with MySQL, PostgreSQL, and Sidekiq supporting the backend
• Infrastructure & reliability: Maintain AWS and Kubernetes environments, troubleshoot production issues, and improve availability, performance, and resource usage
• Terraform & Terragrunt: Build and maintain infrastructure as code, review plans, manage environment configuration, and address infrastructure drift
• Deployments & developer experience: Improve CI/CD pipelines, deployment automation, release checks, and rollback procedures
• Monitoring & incidents: Improve monitoring and alerts, join the on-call rotation, and contribute to incident reviews
• Application security: Work with developers to assess vulnerabilities, review security risks, and validate fixes
• CI/CD security: Maintain code, dependency, secrets, container, and infrastructure scanning
• Cloud security: Strengthen IAM, secrets management, network controls, and Kubernetes security
• SOC 2 & GDPR: Support technical controls, audit evidence, and personal data protection
• Recovery: Test backups and recovery procedures, maintain runbooks, and support production readiness
• Collaboration: Participate in code reviews, document changes, and support application, AI, and data engineering teams
• You'll work closely with SRE and application engineers, and support AI and data initiatives where they depend on shared infrastructure
• You'll take part in technical discussions and code reviews, share what you learn, and help improve how we operate
• Reducing recurring incidents, unnecessary alerts, and repetitive manual work is part of the role. We want reliable systems and sustainable operations for the people supporting them

Benefits

• Hybrid Work
• Employee Stock Options
• Personal Development Budget
• Bi-weekly Lunch & Learn
• Monthly Team-building Activities
• Health & Dental Coverage
• Bonus Opportunities
• Extended Vacation Days (34 days of vacation annually, with summer Fridays, and more)

• Hands-on experience supporting production workloads in AWS
• You hold relevant AWS, Kubernetes, Terraform, or security certifications
• Experience using logs, metrics, dashboards, and alerts to investigate production problems
• Worked with MySQL, PostgreSQL, Redis or Valkey, and Sidekiq
• Experience with GitHub Actions, Argo CD, Helm, Karpenter, or KEDA
• Familiarity with IAM, least privilege, secrets management, and encryption
• Understanding of common web application risks, including broken access control, injection, authentication weaknesses, and sensitive data exposure
• A solid understanding of Linux, networking, DNS, HTTP, and TLS
• Familiar with securing AI integrations, agent workloads, or MCP services
• Supported services across multiple AWS regions
• Built useful monitoring with Prometheus, Grafana, or CloudWatch
• We're excited to work with someone who's curious about what's next, passionate about continuous improvement, and motivated to turn new ideas into real engineering progress
• We value people who ask questions, explain their reasoning, and leave systems easier for others to understand
• Clear communication skills and good judgment about when to work independently, request a review, or escalation
• Experience with Docker and Kubernetes, including troubleshooting deployments, services, health checks, and resource limits
• Helped remediate penetration-test findings or contributed technical evidence to a SOC 2 audit
• Ability to write automation in Python, Bash, Ruby, JavaScript, or another suitable language
• Experience writing and maintaining Terraform modules and Terragrunt configuration, including reviewing plans and working with remote state
• Experience at a start up or scale up
• Working knowledge of SOC 2 controls and GDPR principles relevant to engineering, including access restrictions, data minimization, retention, and deletion
• Around 3-5 years of experience in SRE, DevOps, platform engineering, cloud operations, or a related engineering role. Equivalent practical experience is welcome
• Practical application security experience through vulnerability remediation, secure code review, threat modelling, or security tooling
• Experience with Git, pull requests, CI/CD pipelines, and deployment workflows
• Participated in backup restoration or disaster recovery exercises
• Supported Ruby on Rails or Node.js applications in production