Senior DevOps Engineer: Scale, Security & AWS

Doist; San Francisco (CA); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Scanner is hiring a DevOps Engineer to own deployment, upgrades, and operation across our SaaS and Bring-Your-Own-Cloud platforms. You’ll manage multi-account workloads on AWS, using Pulumi/Terraform/CDK, and own end-to-end CI/CD pipelines with a focus on least-privilege security and scalable observability.

We value pragmatic, fast-paced work in a low-ceremony environment. Strong TypeScript experience with Pulumi code and Rust literacy to debug services is a plus.

Qualifications

• Minimum 5 years in infrastructure, DevOps, SRE, or platform engineering.
• Strong AWS capabilities (IAM, VPC, networking, ECS, Lambda, S3).
• Experience with infrastructure-as-code (Pulumi, Terraform, or CDK).
• End-to-end CI/CD ownership and security-focused operations.
• Observability, incident response, and cost efficiency at scale.
• Comfort with TypeScript and reading Rust; Rust shipping not required.

Responsibilities

• Own deployment, upgrade, and operation of Scanner across environments.
• Maintain low-privilege security posture and cross-account isolation.
• Develop and maintain Pulumi code and supporting IaC tooling.
• Ensure observability, reliability, and on-call readiness.
• Collaborate with teams to improve deployment velocity and security.

Skills

DevOps

SRE

Platform engineering

AWS fluency

CI/CD

Rust

TypeScript

Pulumi

Terraform

CDK

Tools

Pulumi

Terraform

CDK

Job description

Scanner is hiring a DevOps Engineer to own deployment, upgrades, and operation across our SaaS and Bring-Your-Own-Cloud platforms. You’ll manage multi-account workloads on AWS, using Pulumi/Terraform/CDK, and own end-to-end CI/CD pipelines with a focus on least-privilege security and scalable observability.

We value pragmatic, fast-paced work in a low-ceremony environment. Strong TypeScript experience with Pulumi code and Rust literacy to debug services is a plus.