Staff Infrastructure Engineer, Cloud Deployments & BYOC

KeyCard; Canada; Remote; CAD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Dental, Vision, and Paramedical

4 weeks vacation

11 statutory holidays

1 volunteer day annually

MacBook Pro

$500 peripherals stipend

Remote-first culture

Job summary

Keycard is hiring two staff-level Software Engineers, Infrastructure to own build, release, and run of the control plane for agent-native environments. You will manage BYOC deployments, enforce compatibility guardrails, and lead releases across customer clouds with a focus on reliability and security.

You’ll build on AWS (EKS), Pulumi, Terraform, and Helm, collaborating with founders, engineers, product, and customers. Remote-first, North/South America focus.

Qualifications

• You build infrastructure as software using Pulumi, Terraform or CDK and write Go or TypeScript tooling around it.
• You have run Kubernetes and Helm in production environments.
• Deep AWS experience, especially IAM, permission boundaries, Organizations/SCPs, and VPC networking.
• You’ve operated software in customer accounts or regulated networks and supported upgrades.
• You ship versioned releases with deprecations and a customer upgrade path.
• You debug across layers, from security groups to TLS handshakes and proxy issues.
• You’ve worked with customer platform/security teams and can advocate for product changes.
• You think in terms of control plane vs data plane with independent upgrade paths.
• You have experience with agents in infrastructure work and audited changes.

Responsibilities

• BYOC product: install, upgrade, and support Keycard in customer clouds with documented versions.
• Define compatibility scopes for clouds, regions, Kubernetes versions, and guardrails.
• Deployments: manage infrastructure as code, account bootstrap, and network patterns.
• Releases: own a pipeline from commit to deployment with staged promotion and rollback.
• Reliability: set availability targets, runbooks, and incident response for hosted and customer deployments.
• Agent operations: build agents for pre-install checks, installs, and runbook drafts with audited actions.
• Cost per install: optimize engineering time and cloud spend; standardize where possible.
• Deployment guardrails: work with customers' cloud/security teams to enforce security scopes.

Skills

Pulumi

Terraform

CDK

Go

TypeScript

Kubernetes

Helm

AWS

Education

Bachelor's degree in CS or related field

Tools

EKS

Kubernetes tooling

Terraform tooling

Job description

Keycard is hiring two staff-level Software Engineers, Infrastructure to own build, release, and run of the control plane for agent-native environments. You will manage BYOC deployments, enforce compatibility guardrails, and lead releases across customer clouds with a focus on reliability and security.

You’ll build on AWS (EKS), Pulumi, Terraform, and Helm, collaborating with founders, engineers, product, and customers. Remote-first, North/South America focus.