Infrastructure Engineer

Gyde; New York, Austin (NY, TX); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible (Unlimited) Paid Time Off

Hybrid Work in Austin or NYC

Medical, Dental, and Vision benefits

Retirement Plan (e.g., 401K)

Job summary

Gyde is building an AI-native insurance brokerage platform and seeks an experienced infrastructure engineer to own end‑to‑end platform delivery. You will work on EKS, Pulumi, CI/CD, and security, while shaping cost models and vendor integrations.

Join a small, fast‑moving team focused on simplifying a complex, regulated, multi‑tenant environment. Expect cross‑functional collaboration with security, data, legal, and finance to defend architectural decisions.

Qualifications

• 5–10 years in infrastructure, platform, SRE, or DevOps with meaningful production ownership.
• Strong AWS fundamentals: IAM, VPC, networking, compute, storage, KMS.
• Fluency with AI coding tools and day‑to‑day AI tooling.

Responsibilities

• Own the chain from problem to running control — design, build, and instrument the fix across infra and app layers.
• Build in the monorepo — TypeScript, Temporal workflows, data models, and migrations.
• Run the cloud platform — EKS, AWS in Pulumi, CI/CD, secrets, and observability.

Skills

Cloud & Kubernetes Foundations

Application Engineering in a Shared Co

Integration & Vendor Systems

Security, Compliance & Cost as Design

Judgment, Sequencing & Written Dec

Tools

Pulumi

Terraform

CDK

PostgreSQL

TypeScript

Kubernetes

Job description

Austin, Texas, United States, New York City, New York, United States

About Us

Insurance brokers sit at the intersection of care, cost, and access — yet remain one of the most underleveraged assets in the $5T healthcare value chain. They guide millions of Americans through plan selection, coverage questions, and care navigation, yet still rely on spreadsheets, manual workflows, and outdated tools that limit their growth and impact.

Gyde is reimagining this. We’re building the first AI-native insurance brokerage platform—a system that learns from every client interaction to automate operations, power intelligent voice and chat experiences, and predict the right coverage and products for every individual or business.

Our approach combines acquisition and AI: we acquire traditional brokerages and transform them into next-generation, data-driven organizations. Through Gyde’s platform, agencies run more efficiently, serve clients more personally, and scale faster than ever before.

Join us if you’re excited to:

• Redefine how millions of people access and understand their healthcare coverage, by building systems that turn unstructured data, human conversations, and fragmented processes into intelligence.
• Build AI systems that improve how people access healthcare
• Design production-grade voice, chat, and predictive models for a highly regulated domain
• Launch technologies that augment human judgment and make complex decisions transparent and scalable
• Help reinvent an entire industry from the inside out

You own the infrastructure that Gyde’s AI-native brokerage platform runs on — but at our size, the title undersells the job. We acquire insurance agencies and fold them onto one platform, which means our environment grows in scale and in tenancy every quarter, and it has to stay secure, auditable, and predictable while it does. You sit on the Infrastructure team and report to our Head of Infrastructure.

The work deliberately blurs the usual line between infrastructure and application engineering. The cloud layer — EKS, AWS in Pulumi, CI/CD, the observability stack — is table stakes, but it is rarely the whole deliverable. A typical project runs the full chain: a business problem lands (“we can’t tell which agency this contract belongs to”, “we can’t tell whether that email arrived”, “we don’t know what we’re spending on LLMs”), and you own it from audit and data model through to the TypeScript that ships in a shared package, the Temporal workflow that runs it, the IAM role behind it, and the dashboard that proves it works.

So this is real application engineering as well as platform work — TypeScript in our monorepo, Temporal workers, Postgres and SQL migrations, packages other engineers depend on. A third part of the job is neither infrastructure nor application code: evaluating a vendor’s permission model closely enough to know what it can actually enforce, designing an approval workflow with named humans and SLAs, and treating HIPAA and cost as design inputs rather than review gates. Because we’re small, you are often the interface to security, data, finance, and legal at once. You will write the decision doc, then defend it in a comment thread with someone who cares about the price rather than the architecture.

The throughline is simplification. Anyone can add another tool. We want someone who takes a complex, regulated, multi‑tenant environment and makes it feel simple to the people using it — and who knows that the mechanism is usually the short part, while the carve‑outs, the sequencing, and the question of whether a control is truly enforced are the job.

Key Responsibilities

• Own the chain from problem to running control — take an ambiguous business or platform problem, establish what is actually true today rather than what the docs claim, design the fix, build it, and instrument it so you can prove it works. Most projects here cross the infra/app line and you own both sides.
• Build in the monorepo — production TypeScript in shared packages other engineers import, Temporal workers and scheduled workflows, data models and SQL migrations, internal services and tooling. Not just YAML wrapped around someone else’s code.
• Run the cloud platform — EKS, AWS defined in Pulumi, CI/CD, secrets and workload identity, and the metrics, logging, and alerting that tell us something is wrong before a broker does.
• Evaluate and integrate the systems we buy — identity, orchestration, model gateways, warehouse and vendor APIs. Read a permission model and plan tier closely enough to know what a tool enforces versus what a person is merely promising to do, then build the glue that makes them agree.
• Make security and compliance enforceable — least‑privilege IAM and workload identity, BAA before PHI access, data classification, PHI‑aware logs and metric labels, and audit trails that hold up in a carrier audit because the system produces them, not because someone remembered.
• Own cost as an engineering surface — per‑key LLM and infrastructure spend, estimated‑versus‑billed reconciliation, and alerting that fires before a runaway job becomes an invoice.

What you bring and who you are

• Cloud & Kubernetes Foundations — Production EKS and AWS expressed in code, CI/CD you would stake a release on, and observability people actually act on. You have operated clusters through upgrades and incidents, not just deployed to them. Here this is table stakes rather than the whole job.
• Application Engineering in a Shared Codebase — You write real TypeScript, not only glue. Durable workflows, relational data modeling, migrations, and packages other engineers import. You are comfortable opening a pull request in application code you do not own, and you know when a shared abstraction earns its keep.
• Integration & Vendor Systems — You reverse-engineer an admin console rather than trusting its marketing page. You check plan tiers and API surfaces before committing to a design, and you can tell the difference between a control a system enforces and a process a human promises to follow.
• Security, Compliance & Cost as Design Inputs — Least privilege is a default, not a cleanup task. You know where PHI leaks in a stack — logs, traces, metric labels, backups, third‑party payloads — and you treat spend as something you instrument, not something finance discovers on an invoice.
• Judgment, Sequencing & Written Decisions — You verify the premise before you build. You think in blast radius, carve‑outs, and reversible‑first rollout, because the first casualty of enforcing something early is usually a business process. You write the one‑page decision doc with ranked options and open questions, and you can defend it to a non‑engineer.

Technical Requirements

• 5–10 years in infrastructure, platform, SRE, or DevOps engineering, with meaningful production ownership.
• Production Kubernetes experience — EKS preferred: cluster upgrades, autoscaling, networking, and hands‑on troubleshooting.
• Strong AWS fundamentals: IAM, VPC and networking, compute, storage, KMS, and a working grasp of the cost model.
• Infrastructure as code in a real codebase — Pulumi preferred; Terraform or CDK acceptable with a willingness to work in Pulumi.
• Production TypeScript or Node — you will ship application code in a shared monorepo, not only infrastructure definitions. We care that you have shipped real application code and will work primarily in TypeScript; which language you did it in matters less.
• Relational data modeling and SQL, Postgres preferred; comfortable writing and reviewing migrations.
• Built and owned CI/CD pipelines (GitHub Actions or comparable), including deployment strategy and rollback.
• Observability in practice — metrics, logs, and distributed tracing, plus alerting that engineers trust.
• Experience operating in a HIPAA, SOC 2, or otherwise regulated and audited environment.
• A writing habit — design docs, RFCs, or postmortems you can point to.
• Fluency with AI coding tools in day‑to‑day work — we are an AI‑native company and expect engineers to use agents well.

Nice to have

• Durable workflow engines — Temporal especially — or comparable orchestration and job systems.
• Hands‑on administration of an IdP or SaaS admin surface (Okta, Entra) including SCIM, RBAC, and API integration.
• Multi‑tenant SaaS, or M&A integration work folding acquired companies onto a single platform.
• Data warehouse pipelines (Redshift, BigQuery, Snowflake) and event‑ingestion plumbing.
• LLM infrastructure: gateways and virtual keys, provider rate limits, token and spend telemetry.
• Secrets management at scale, policy‑as‑code, and supply chain hygiene (image signing, SBOMs).

What we offer

Gyde offers a competitive benefits package to all employees.

• Flexible (Unlimited) Paid Time Off
• Hybrid Work in Austin or NYC
• Medical, Dental, and Vision benefits for you and your family
• Retirement Plan (e.g., 401K)

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.

How would you describe your gender identity? Select…

How would you describe your racial/ethnic background? Select…

How would you describe your sexual orientation? Select…

Do you identify as transgender? Select…

Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning? Select…

Are you a veteran or active member of the United States Armed Forces? Select…

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Gyde’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select…

Voluntary Self-Identification of Disability

Form CC-305 Page 1 of 1 OMB Control Number 1250‑0005 Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, we visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp .

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Intellectual or developmental disability
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and or other supports
• Nervous system condition, for example, migraine headaches,  Parkinson’s  disease  
• Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
• Short stature (dwarfism)
• Traumatic brain injury

Disability Status Select…

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements.