Senior DevOps Engineer San Francisco, CA (Hybrid)

Scanner; San Francisco, Northern (CA, KY); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Remote-friendly

Equity

Medical, Dental, Vision

401k

Commuter benefits

Job summary

Scanner is hiring a DevOps Engineer to own deployment, upgrades, and operation of our data platform. You will manage a multi-account AWS environment, implement IaC, and own CI/CD pipelines end-to-end while enforcing least-privilege security and strong observability.

You’ll work in a fast-paced, low-ceremony setting, collaborating with teams to ensure scalable, secure, and cost-efficient operations across the stack. Remote-friendly with in-person options in SF and nearby campuses.

Qualifications

• Minimum 5 years of professional experience in infrastructure, DevOps, SRE, or platform engineering.
• Deep AWS fluency (IAM, VPC and networking, ECS, Lambda, S3) and production experience with infrastructure-as-code like Pulumi, Terraform, or CDK across multiple accounts and regions.
• Experience owning CI/CD end to end.
• Strong focus on building systems using the principle of least privilege, and a security posture that enterprises expect: tightly scoped roles, minimal cross-account trust, private networking, compliance evidence for SOC 2 Type II.
• Strong operations instinct for observability, incident response, and cost efficiency at scale.
• Comfort writing TypeScript (our Pulumi code) and reading Rust well enough to debug a service you didn't write. You don't need to have shipped Rust before.

Responsibilities

• Own how Scanner is deployed, upgraded, and operated across all environments.
• Manage infrastructure across multiple AWS accounts and regions, including CI/CD pipelines end-to-end.
• Design and enforce security posture with least privilege and private networking across accounts.
• Collaborate with teams to optimize observability, reliability, and cost efficiency at scale.

Skills

DevOps

SRE

Platform engineering

AWS

CI/CD

Security best practices

Observability

Cost optimization

TypeScript

Rust

Tools

Pulumi

Terraform

CDK

AWS

S3

ECS

MySQL

Lambda

Job description

To help avoid bots and fake submissions we require email authentication after you submit your application

About Scanner

At Scanner, we’re committed to building the best tools in the world (in Rust!) for teams to search and query through enormous piles of data. Whether you're debugging a distributed system, or monitoring a sprawling backend deployment for security risks, so many problems that modern engineering teams face are ultimately about sifting through giant haystacks in search of small but valuable needles. Scanner provides a magical user experience with fast queries, allowing teams to manage massive data sets with far more ease than they can with existing tools.

What We Built

We believe Data Lakes are the future of security data. Scanner is the world's fastest full-text search and detection platform for Security Data Lakes.

Security teams can now search years and petabytes of logs in seconds (up to 700x faster than alternatives), eliminate SIEM coverage blind spots at 70-80% lower cost, and deploy in a day, all while maintaining full custody of their data in their own S3 buckets.

We believe security tools should scale with your data, not your budget. Teams shouldn't have to choose between comprehensive coverage and financial sustainability.

The Team

We're an early-stage team where every person has outsized impact on what we build and how we serve customers.

People join Scanner because they want to:

• Solve genuinely hard technical problems - Making petabyte-scale search feel instant requires deep systems thinking and novel approaches.
• Work pragmatically and move fast - We ship quality products quickly by focusing on what actually matters to customers.
• Have direct impact - Talk to users, shape product direction, and see your work make a difference immediately

We're builders focused on creating genuinely transformative tools for security teams dealing with massive data challenges.

The Role

We're looking for a DevOps Engineer to own how Scanner gets deployed, upgraded, and operated everywhere it runs. We currently ship two ways: a managed SaaS where we run every piece of the infrastructure in our own AWS accounts, and a Bring Your Own Cloud deployment where we provision the data plane directly into the customer's AWS account. You'll own that system end to end. The infrastructure you’ll run indexes and queries hundreds of terabytes to petabytes of logs per day, across dozens of accounts, so efficiency, observability, and uptime are all paramount.A strong candidate will have:

• A minimum of 5 years of professional experience in infrastructure, DevOps, SRE, or platform engineering.
• Deep AWS fluency (IAM, VPC and networking, ECS, Lambda, S3) and production experience with infrastructure-as-code like Pulumi, Terraform, or CDK across multiple accounts and regions.
• Experience owning CI/CD end to end.
• A strong focus on building systems using the principle of least privilege, and focusing on a security posture that enterprises expect: tightly scoped roles, minimal cross-account trust, private networking, compliance evidence for SOC 2 Type II.
• A strong operations instinct for observability, incident response, and cost efficiency at scale.
• Comfort writing TypeScript (our Pulumi code) and reading Rust well enough to debug a service you didn't write. You don't need to have shipped Rust before.
• Comfort working in a fast-paced and low process environment.

Talented engineers can pick up new languages and frameworks quickly. Here’s what our tech stack looks like today, but if you come with a better way of doing things we’re flexible and committed to building the best tools for our customers no matter what!

• We use infrastructure-as-code tools like Pulumi to manage our deployments and cloud infrastructure.
• Our query system leverages highly burstable compute provided by serverless components like Amazon Lambdas.
• We use S3 to store logs at scale and MySQL to store metadata.
• Our log ingestion pipeline runs in Amazon Elastic Container Service (ECS).
• We use Rust throughout the backend, giving us extremely fast performance with strong security guarantees.
• Our frontend is written using Svelte and TypeScript.

Why you’ll love working here

• Impact & ownership: Join a small, high-trust team where your work directly impacts our users.
• Ambitious product:We solve hard problems with massive scale log search, threat hunting, and observability for cloud-native infrastructure.
• Fast-paced team & culture: We’re lean, collaborative and high-velocity.
• Growth & autonomy:We trust you to take major ownership, give you the space to grow, and we’ll support your professional development.

Competitive salary, meaningful equity, and comprehensive benefits (Medical, Dental, Vision, 401k, commuter). Remote-friendly with optional in-person collaboration in San Francisco, Mountain View, and Seattle.

To help avoid bots and fake submissions we require email authentication after you submit your application