Sr. Infrastructure Engineer

Yubico Inc.; Stockholms kommun; Hybrid; SEK 900,000 - 1,400,000; Full time

Job summary

Yubico Inc. is seeking a seasoned infrastructure engineer to design and operate scalable, secure cloud infrastructure across Sweden and the US. You will manage GKE clusters, write Terraform, and optimize GitOps workflows to improve developer experience.

Join a mission-driven team driving identity security with hardware-backed authentication, contributing to a resilient platform and on-call operations.

Qualifications

• 5–8 years designing and operating highly available production infrastructure.
• Deep experience with GCP or another major public cloud.
• Strong experience managing infrastructure as code with Terraform and Kubernetes in production.
• Experience building and maintaining CI/CD workflows and monitoring with Prometheus/Grafana.

Responsibilities

• Design and operate secure infrastructure across GKE and managed GCP services.
• Build and maintain infrastructure as code with Terraform.
• Manage Kubernetes platform components and generate their configuration with CUE.
• Build monitoring, dashboards, and alerts with Prometheus and Grafana.
• Design least-privilege access controls and use keyless authentication for workloads and automation.
• Evaluate technologies and make architecture decisions for our shared infrastructure.
• Build self-service infrastructure to automate processes for the infra and dev teams.
• Create clear platform guidance to help engineering deploy and operate services.
• Maintain and enhance CI/CD workflows with GitHub Actions.
• Participate in the team’s on-call rotation.
• Maintain a small footprint of specialized, hardware-backed infra.

Skills

GCP / cloud experience

Terraform

Kubernetes (production)

CI/CD workflows

Prometheus / Grafana

Linux administration

Scripting (Bash/Go/Python)

AI for platform development

Tools

Terraform

Kubernetes

GitHub Actions

Prometheus

Grafana

CUE

Go

Python

Bash

Job description

Meet Yubico

Yubico is a global leader in identity security and creator of the YubiKey, the original hardware-backed passkey. We are publicly traded on Nasdaq Stockholm; our global footprint includes headquarters in Stockholm, Sweden, Silicon Valley, California; and Singapore.

Why Join Our Mission?

At Yubico, we are guided by a shared belief that your work matters. We operate under a cultural philosophy of Speed with Integrity, pushing the boundaries of technology to secure the AI frontier—protecting both human and agentic AI interactions—and leading the transition to post-quantum cryptography. In everything we do, we live by our core values:

• Battle Friction: We constantly look for new ways to simplify our products, our work, and the user experience.
• Inspire Higher: We think big, champion the open internet, and strive to do the right thing even when it is difficult.
• One Team: We are open, responsive, and collaborative, overcoming challenges and celebrating our successes together.

Aligned with our commitment to open standards, we foster a thriving builder ecosystem through the Yubico Developer Program, offering free open-source repositories, libraries, and SDKs to help developers rapidly integrate strong hardware authentication into any application. Through close collaborations with technical partners like Google, Microsoft, and Amazon, as well as newer frontiers like OpenAI, we continue to shape a safer digital world while donating security keys to protect vulnerable communities, journalists, and humanitarian groups worldwide through our Secure it Forward program.

The Role

Join the team in charge of the infrastructure that supports our engineering teams. Working across Sweden and the US, we build and operate secure, reliable cloud platforms and software delivery systems.

You will design and operate shared infrastructure, eliminate toil, and improve the developer experience. Our platform runs on GCP, focused on multi-tenant GKE clusters and managed cloud services. We manage cloud infrastructure with Terraform and generate Kubernetes configuration with CUE for GitOps workflows.

Tasks & Responsibilities:

• Design and operate secure infrastructure across GKE and managed GCP services.
• Build and maintain infrastructure as code with Terraform.
• Manage Kubernetes platform components and generate their configuration with CUE.
• Build monitoring, dashboards, and alerts with Prometheus and Grafana.
• Design least-privilege access controls and use keyless authentication for workloads and automation.
• Evaluate technologies and make architecture decisions for our shared infrastructure.
• Build self-service infrastructure to automate processes for the infrastructure team and our development teams.
• Create clear platform guidance that helps engineering teams deploy and operate their services.
• Maintain and improve CI/CD workflows with GitHub Actions.
• Participate in the team’s on-call rotation.
• Maintain a small footprint of specialized, hardware-backed infrastructure.

Basic Qualifications:

• Extensive experience (5 - 8 years) designing and operating highly-available production infrastructure.
• Deep experience with GCP or another major public cloud.
• Strong experience managing infrastructure as code with Terraform.
• Strong experience operating Kubernetes in production.
• Experience building and maintaining CI/CD workflows.
• Experience building monitoring and alerting with Prometheus, Grafana, or similar tools.
• Strong understanding of cloud networking, IAM, and workload identity.
• Strong Linux administration and troubleshooting skills.
• Experience automating infrastructure tasks with Bash, Go, and Python.
• Experience using AI for platform development, testing or other experience.

We are an equal opportunity employer, we value diversity and uphold an inclusive environment where all people feel that they are equally respected and valued. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity or expression, age, marital status, religion, national origin, disability, protected Veteran status or any other characteristic protected by law. We'd love to learn about what you can add to our diverse team. We are an E-Verify Participating Employer.

Personal data submitted through this form is used for managing Yubico’s recruitment activities, which include facilitating any application you make, setting up and conducting interviews and tests for applicants, evaluating and assessing results and selecting candidates, and as otherwise needed in our recruitment and onboarding processes. The use of your personal data may also be necessary prior to entering into a contract with you (that is prior to offering you a job with Yubico). Your personal data will only be used for the purposes for which it was collected and in accordance with the Yubico Privacy Notice. We only keep your personal data for as long as necessary and in compliance with Yubico’s record retention policies. If you have asked us to, we will keep you informed of other opportunities at Yubico. We do this in various ways, including email and by phone. If at any time you do not want us to contact you or use your information as described herein please contact us at [e-mail] to let us know and we will delete all such information. Providing your personal data is voluntary, but necessary to join our talent community, and if you do not agree to provide your data, we will not be able to consider you as part of our talent community.

As part of providing the requested service, we will transfer your data to be processed by Greenhouse Software Inc.,a service provider contracted by Yubico AB and/or its subsidiaries that meets legally mandated privacy requirements. The Yubico Privacy Notice offers more information about Yubico privacy practices, including the lawful basis for processing of personal data, how to lodge a complaint with the supervisory authority, and how to contact Yubico to exercise your data subject rights. In this notice, when we refer to "Yubico", "us", "we" or "our", we mean the Yubico group company or companies that you apply to, or correspond with, and which are responsible for any personal data collected about you.