Senior Infrastructure Engineer

Level; Auckland; On-site; NZD 180,000 - 230,000; Full time

Job summary

Level is a learning technology company seeking a Senior Infrastructure Engineer to design, build, and operate the cloud foundation for all Level products. You will own the Kubernetes platform, IaC workflows, and GitOps delivery, ensuring reliable, scalable infrastructure with strong security posture.

You will work on a small, senior-leaning team, driving capacity planning, cost optimization, and platform improvements while mentoring engineers and improving developer velocity across the stack.

Qualifications

• 5+ years operating large-scale cloud infrastructure (AWS strongly preferred).
• Deep IaC experience with Terraform/OpenTofu; CloudFormation/Pulumi/CDK also relevant.
• Strong Docker/Kubernetes (EKS) production experience.
• Scripting/automation proficiency (Python, Go, or Bash).
• Solid cloud networking fundamentals (VPC, DNS, load balancing, ingress, firewalls/WAF, VPNs).
• Proven CI/CD and GitOps experience (GitHub Actions or similar).
• Observability experience (metrics/logs/traces) used to drive real decisions.
• Track record leading infrastructure projects independently, end to end.
• Strong communication across technical and non-technical audiences.

Responsibilities

• Cloud Infrastructure & IaC — Design, build, and operate AWS infrastructure with Terraform/OpenTofu in a GitOps workflow.
• Kubernetes & Platform Operations — Manage EKS, autoscaling, upgrades, add-ons, and ArgoCD delivery.
• CI/CD & Developer Enablement — Maintain GitHub Actions pipelines and self-service tooling.
• Networking, Ingress & DNS — Own ingress/egress, service mesh, DNS, edge TLS, and routing.
• Observability & Reliability — Build OpenTelemetry/SigNoz observability for reliable, cost-efficient systems.
• Security & Compliance — Enforce cloud security best practices across identity, secrets, and network boundaries.
• Ownership & Mentorship — Set standards, mentor engineers, and improve platform quality.

Skills

Cloud infrastructure

IaC

Kubernetes

CI/CD

GitOps

Observability

Security

Leadership

Communication

Automation

Scripting

Tools

Terraform/OpenTofu

AWS

EKS

Docker

Karpenter

ArgoCD

Atlantis

GitHub Actions

Linkerd

Envoy

Traefik

Route 53

OpenTelemetry

SigNoz

Grafana

Datadog

Prometheus

Backstage

Job description

About Level

Level is a learning technology company dedicated to helping students build real academic and life skills with confidence and joy. We combine proven curriculum principles with world class interactive design to make meaningful practice something students want to come back to, not something they struggle through. We support what teachers, schools, and parents are already doing by increasing student engagement with high quality, standards aligned practice that reinforces classroom learning.

As an Senior Infrastructure Engineer on the Platform team, you will architect, build, and operate the cloud infrastructure and developer platform that every Level product runs on. You will own critical infrastructure end-to-end — the Kubernetes platform, infrastructure-as-code, CI/CD and GitOps delivery, networking (ingress and egress), DNS, observability, and cloud security posture — and provide the reliable, self-service foundations the rest of engineering builds on. You will work on a small, senior-leaning team where infrastructure decisions have direct, visible impact on reliability, performance, cost, and developer velocity.

What You'll Do

• Cloud Infrastructure & IaC — Design, build, and operate secure, highly available AWS infrastructure using Terraform/OpenTofu with a GitOps workflow (Atlantis). Own capacity planning, DR, and cost optimization for the systems you run.
• Kubernetes & Platform Operations — Operate and evolve EKS: autoscaling (Karpenter), upgrades, core add-ons, and Helm-based delivery (ArgoCD).
• CI/CD & Developer Enablement — Build and maintain GitHub Actions pipelines that let platform and product teams ship fast and safely, with self-service tooling where it makes sense.
• Networking, Ingress & DNS — Own ingress/egress (Traefik), service mesh and mTLS (Linkerd/Envoy), load balancing, edge TLS, and DNS (Route 53, Terraform-managed).
• Observability & Reliability — Build observability with OpenTelemetry and SigNoz; use telemetry to drive reliability, performance, and cost decisions. Serve as an escalation point for complex incidents, leading troubleshooting and post-mortems.
• Security & Compliance — Apply cloud security best practices across identity, secrets, and network boundaries, with particular care for student data and K-12 privacy. Operate posture/vulnerability tooling (Security Hub, GuardDuty, Inspector, Snyk) and org guardrails (Control Tower, SCPs).
• Ownership & Mentorship — Set standards, mentor engineers, and leave the platform better than you found it.

What You Need

• 5+ years operating large-scale cloud infrastructure (AWS strongly preferred)
• Deep IaC experience (Terraform/OpenTofu; CloudFormation/Pulumi/CDK also relevant)
• Strong Docker/Kubernetes (EKS) production experience
• Scripting/automation proficiency (Python, Go, or Bash)
• Solid cloud networking fundamentals (VPC, DNS, load balancing, ingress, firewalls/WAF, VPNs) and security best practices
• Proven CI/CD and GitOps experience (GitHub Actions or similar)
• Observability experience (metrics/logs/traces) used to drive real decisions
• Track record leading infrastructure projects independently, end to end
• Strong communication across technical and non-technical audiences

Nice to Have

• ArgoCD, Atlantis, Linkerd/Envoy, Traefik, Karpenter, Helm
• OpenTelemetry, SigNoz (our stack), Grafana, Datadog, or Prometheus
• Backstage or other internal developer platform experience
• AI/ML infra experience (GPU scheduling, model/agent hosting, inference gateways)
• Rust service CI/CD, CloudFront/CDN experience
• AWS Solutions Architect / DevOps Engineer – Professional certification
• Distributed-systems background, OSS infrastructure contributions