Senior DevOps Engineer

Scanner; San Francisco (CA); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Scanner is hiring a DevOps Engineer to own deployment, upgrades, and operation across our SaaS and Bring-Your-Own-Cloud platforms. You’ll manage multi-account workloads on AWS, using Pulumi/Terraform/CDK, and own end-to-end CI/CD pipelines with a focus on least-privilege security and scalable observability.

We value pragmatic, fast-paced work in a low-ceremony environment. Strong TypeScript experience with Pulumi code and Rust literacy to debug services is a plus.

Qualifications

• Minimum 5 years in infrastructure, DevOps, SRE, or platform engineering.
• Strong AWS capabilities (IAM, VPC, networking, ECS, Lambda, S3).
• Experience with infrastructure-as-code (Pulumi, Terraform, or CDK).
• End-to-end CI/CD ownership and security-focused operations.
• Observability, incident response, and cost efficiency at scale.
• Comfort with TypeScript and reading Rust; Rust shipping not required.

Responsibilities

• Own deployment, upgrade, and operation of Scanner across environments.
• Maintain low-privilege security posture and cross-account isolation.
• Develop and maintain Pulumi code and supporting IaC tooling.
• Ensure observability, reliability, and on-call readiness.
• Collaborate with teams to improve deployment velocity and security.

Skills

DevOps

SRE

Platform engineering

AWS fluency

CI/CD

Rust

TypeScript

Pulumi

Terraform

CDK

Tools

Pulumi

Terraform

CDK

Job description

About Scanner

At Scanner, we’re committed to building the best tools in the world (in Rust!) for teams to search and query through enormous piles of data. Whether you're debugging a distributed system, or monitoring a sprawling backend deployment for security risks, so many problems that modern engineering teams face are ultimately about sifting through giant haystacks in search of small but valuable needles. Scanner provides a magical user experience with fast queries, allowing teams to manage massive data sets with far more ease than they can with existing tools.

What We Built

We believe Data Lakes are the future of security data. Scanner is the world’s fastest full-text search and detection platform for Security Data Lakes. Security teams can now search years and petabytes of logs in seconds (up to 700x faster than alternatives), eliminate SIEM coverage blind spots at 70-80% lower cost, and deploy in a day, all while maintaining full custody of their data in their own S3 buckets. We believe security tools should scale with your data, not your budget. Teams shouldn't have to choose between comprehensive coverage and financial sustainability.

The Team

We're an early-stage team where every person has outsized impact on what we build and how we serve customers. People join Scanner because they want to:

• Solve genuinely hard technical problems – Making petabyte‑scale search feel instant requires deep systems thinking and novel approaches.


• Work pragmatically and move fast – We ship quality products quickly by focusing on what actually matters to customers.


• Have direct impact – Talk to users, shape product direction, and see your work make a difference immediately.

The Role

We're looking for a DevOps Engineer to own how Scanner gets deployed, upgraded, and operated everywhere it runs. We currently ship two ways: a managed SaaS where we run every piece of the infrastructure in our own AWS accounts, and a Bring Your Own Cloud deployment where we provision the data plane directly into the customer's AWS account. You'll own that system end to end. The infrastructure you’ll run indexes and queries hundreds of terabytes to petabytes of logs per day, across dozens of accounts, so efficiency, observability, and uptime are all paramount.

A strong candidate will have:

• A minimum of 5 years of professional experience in infrastructure, DevOps, SRE, or platform engineering.


• Deep AWS fluency (IAM, VPC and networking, ECS, Lambda, S3) and production experience with infrastructure‑as‑code like Pulumi, Terraform, or CDK across multiple accounts and regions.


• Experience owning CI/CD end to end.


• A strong focus on building systems using the principle of least privilege, and focusing on a security posture that enterprises expect: tightly scoped roles, minimal cross‑account trust, private networking, compliance evidence for SOC2TypeII.


• A strong operations instinct for observability, incident response, and cost efficiency at scale.


• Comfort writing TypeScript (our Pulumi code) and reading Rust well enough to debug a service you didn't write.


• You don't need to have shipped Rust before.


• Comfort working in a fast‑paced and low process environment.

Our Tech Stack

• Infrastructure-as-code tools like Pulumi to manage our deployments and cloud infrastructure.


• Query system leverages highly burstable compute provided by serverless components like Amazon Lambdas.


• S3 to store logs at scale and MySQL to store metadata.


• Log ingestion pipeline runs in Amazon Elastic Container Service (ECS).


• Rust throughout the backend, giving us extremely fast performance with strong security guarantees.


• Frontend is written using Svelte and TypeScript.

Why you’ll love working here

• Impact & ownership: Join a small, high-trust team where your work directly impacts our users.


• Ambitious product: We solve hard problems with massive scale log search, threat hunting, and observability for cloud-native infrastructure.


• Fast-paced team & culture: We’re lean, collaborative and high‑velocity.


• Growth & autonomy: We trust you to take major ownership, give you the space to grow, and we’ll support your professional development.

Compensation & Benefits

Competitive salary, meaningful equity, and comprehensive benefits (Medical, Dental, Vision, 401k, commuter). Hybrid-friendly with regular in‑person collaboration in San Francisco.