Cloud Infrastructure & Security Engineer

Vendra (YC S24); San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Vendra, a San Francisco-based YC-backed company, is seeking a Cloud Infrastructure & Security Engineer to own the infrastructure behind our products, from deployment to security. You will work closely with the CTO and the founding team, turning efforts into a reliable, automated foundation that speeds up product delivery with confidence.

You will manage cloud deployments, CI/CD pipelines, and security controls, building scalable solutions while reducing manual toil.

Qualifications

• 2+ years of production cloud infrastructure experience.
• Experience with AWS and cloud security practices.
• Experience with deployment pipelines and automation.

Responsibilities

• Own deployments, CI/CD pipelines, and infrastructure as code.
• Improve reliability, security, and observability.
• Collaborate with CTO and engineering to define cloud architecture.

Skills

AWS

DevOps

SRE

Python

TypeScript

Bash

IaC

Security engineering

CI/CD

Monitoring

Tools

Github Actions

Pulumi

CDK

CloudFormation

Job description

Vendra is building the AI-native operating system for manufacturing procurement and supply chain. Our goal is simple: build platforms, both external and internal, that allow fewer people to accomplish dramatically more.

Think about what Claude Code did for engineers. We are doing that for supply chain.

We are looking for a Cloud Infrastructure & Security Engineer to take ownership of the infrastructure behind our products: how we deploy, how our systems scale, how we protect customer data, and how we keep everything running reliably.

Today, our core engineering team shares these responsibilities alongside building products. You will turn that work into a reliable, automated foundation that lets the entire team ship faster with confidence.

This is a hands-on engineering role with meaningful ownership. You will work directly with the CTO, make architectural decisions, write code, improve our deployment pipelines, and build security into the way we operate.

We already work with ambitious companies across aerospace, defense, robotics, and advanced manufacturing, including teams at Anduril, Mach Industries, and Relativity Space. See some of our customers here.

What You Will Do

Within days

• Get familiar with our AWS infrastructure, applications, deployment workflows, and data systems.
• Work directly with Anish and the founding team to identify the highest-priority reliability, security, and deployment improvements.
• Start removing manual steps and recurring infrastructure issues that slow down engineering.
• Review production access, secrets management, monitoring, and backups, and address the most urgent gaps.

Within weeks

• Take ownership of cloud deployments and CI/CD pipelines across our customer platform, supplier portal, internal tools, and AI workflows.
• Make deployments repeatable, observable, and easy to roll back.
• Manage infrastructure as code and improve consistency across development, staging, and production.
• Strengthen cloud security through least-privilege access, network isolation, encryption, secrets management, and audit logging.
• Implement useful monitoring and alerting so we catch problems early and diagnose them quickly.
• Give engineers clear, automated ways to deploy and operate services without needing manual infrastructure support for every change.

Within months

• Help define and evolve our cloud architecture as our products, customers, and workloads grow.
• Establish tested backup and recovery procedures, incident-response runbooks, and a shared operational support process.
• Improve system performance, availability, and cloud cost efficiency.
• Automate vulnerability detection, patching workflows, and recurring security checks.
• Partner with the engineering team on application security, data access, and the safe operation of AI workflows.
• Support customer security reviews and relevant compliance work with documented controls and evidence.
• Make infrastructure and security a foundation for faster product development.

Who You Are

• You have 2+ years of relevant experience in cloud infrastructure, DevOps, platform engineering, SRE, or security engineering. We care most about what you have independently owned in production.
• You have operated real production systems on AWS. You understand compute, networking, IAM, storage, databases, and the tradeoffs involved in connecting them.
• You built and debugged systems before AI tools became part of your workflow. You have the fundamentals to reason through a networking issue, understand a permissions policy, or recover a failed deployment yourself.
• You use AI aggressively, and you understand what it produces. Claude Code, Cursor, and similar tools should make you faster. You can explain the code and infrastructure changes you ship, catch incorrect assumptions, and troubleshoot when the generated solution fails.
• You have built and maintained deployment pipelines. You know how to ship changes safely, debug failed releases, and recover when something goes wrong.
• You understand practical cloud security. You can identify risks, prioritize them, and implement fixes.
• You can write code and automate repetitive work. You are comfortable with Python, TypeScript, Bash, or similar languages.
• You have experience with infrastructure-as-code tools such as Github Actions, Pulumi, CDK, or CloudFormation.
• You understand Linux, DNS, TLS, and networking well enough to troubleshoot across the stack.
• You have worked with monitoring, logging, alerting, backups, and incident response.
• You know when a managed service is the right answer and when additional infrastructure complexity is justified.
• You document decisions and build systems other engineers can understand and operate.
• We don’t care about your degree. Tell us about the systems you have deployed, secured, scaled, or recovered.
• You do not need experience in supply chain or hardware. You need strong engineering judgment and a willingness to learn.

Bonus Points

• Systems administration experience: employee onboarding and offboarding, SSO, device management, endpoint security, and internal IT tooling.
• Experience owning infrastructure at an early-stage startup.
• Experience supporting security audits or operating systems with demanding customer security requirements.
• Experience with AWS GovCloud or infrastructure serving aerospace and defense customers.
• Experience operating Postgres, Redis, MongoDB, background workers, or production AI workflows.
• Experience with security reviews, vulnerability remediation, or penetration-test findings.

Our Tech Stack

• Cloud: AWS
• Applications: React, Next.js, TypeScript, Node.js, Python
• Data and storage: Postgres, Redis, S3, MongoDB
• AI: OpenAI models, Anthropic models, custom fine-tuned models, agentic workflows
• You will help choose and improve the infrastructure, deployment, observability, and security tooling around this stack.

How We Work

We build and ship features many times in a single day. Your work will help us maintain that speed as our systems become more connected and our customers depend on us for more.

You will work closely with product engineers and the CTO to make deployment straightforward, infrastructure understandable, and security part of the development process.

We value practical decisions, clear ownership, and automation that eliminates recurring work. Success in this role means fewer manual deployments, fewer avoidable incidents, faster recovery, and more engineering time spent building products.

Why Vendra

The hardest part of building hardware is often finding and working with the right suppliers. We are building the software and AI workflows that make that process dramatically easier, from supplier discovery and quoting through ordering, tracking, and fulfillment.

You will own an essential part of that foundation and directly shape how our engineering team builds as we grow.