Senior Infrastructure Security Engineer

Federato; United States; Remote; USD 170,000 - 210,000; Full time

Job summary

Federato, an AI-native platform redefining insurance operations, is hiring a security and infrastructure engineer in the United States. You’ll manage cloud infrastructure, automate with Terraform, Argo, and GitHub Actions, and ensure secure software practices at scale.

You’ll work with GCP, Kubernetes (GKE), and observability stacks (Sentry, Prometheus, Grafana). A strong background in SOC2/ISO27001 and backend tech (Node.js or Python) is essential.

Qualifications

• 5+ years of hands-on experience managing cloud infrastructure and automation.
• Experience in achieving SOC2 Type II, ISO 27001, or similar certifications
• Experience with Node.js or Python for backend services in a microservices architecture.
• 3+ years of experience with cloud providers, preferably Google Cloud Platform (GCP).
• 3+ years of experience managing Kubernetes clusters in production environments.
• Knowledge of asynchronous processing, message queues (e.g., Kafka, Pub/Sub), and event-driven architecture for backend applications.
• Experience focused on the internal engineer team success

Responsibilities

• Support incident management and resolution
• Improve Secure Software Development Lifecycle, including vulnerability scanning and remediation
• Streamline Customer Security Questionnaire handling with tooling
• Business Continuity/Disaster Recovery planning and exercises
• Collaborate with cross-functional teams to support new features
• Automate infrastructure using Terraform, Argo, and GitHub Actions
• Manage and optimize GCP and Kubernetes (GKE) environments
• Improve observability with Sentry, Prometheus, Grafana, and Alert Manager
• Set up and maintain performance monitoring tools like k6

Skills

Cloud infra

Automation

SOC2/ISO27001

Node.js/Python

Kubernetes

Event-driven

Kafka/Pub/Sub

Education

Bachelor's degree

Tools

Terraform

Argo

GitHub Actions

GCP

Kubernetes

Sentry

Prometheus

Grafana

Alertmanager

k6

Job description

There's nothing more exciting than transforming an industry that's been stagnant for decades.

Federato is an AI-native platform that’s bringing agentic AI to the full policy lifecycle. We’re aggressively transforming how insurance work gets done, and the world is paying attention: we've raised $180 million, including a $100 million Series D from Goldman Sachs. We have powerful product-market fit, and we're growing fast globally.

You'll get to work on complex problems with one of the most advanced AI teams you'll find anywhere. If you're the person we need, you know that AI bolted onto legacy systems is too weak to matter. That's why we built our platform to be AI-native from day one. That's why you can do here what you can never do at a legacy software company. move fast and prove it, not theorize it. We think from first principles. You’ll work on problems that matter, building software that fundamentally changes how insurance operates.

What you'll do

In your security engineer capacity:

• Support incident management and resolution, play a leading role in refining our incident management procedures, ensure adherence to those procedures, and facilitate activities for those procedures.
• Improve Secure Software Development Lifecycle, make improvements to our Software Development Lifecycle to improve security: vulnerability scanning, remediation process; ensuring that remediations are made within the prescribed timeframes; and developing educational materials for all engineers within the company
• Streamline Customer Security Questionnaire Handling, work on various projects to streamline Federato’s ability to answer Customer Security questionnaires by applying technology and developing tooling or systems
• Business Continuity/Disaster Recovery Planning, assess threats to business continuity and develop disaster recovery plans for them, ensure recurring exercises of those plans are conducted

In your infrastructure engineer capacity:

• Collaborate with cross-functional teams to provide infrastructure support for new features and services.
• Enhance and automate infrastructure management using tools like Terraform, Argo, and GitHub Actions to streamline deployments and operational processes.
• Manage and optimize our GCP and Kubernetes (GKE) environment, ensuring performance, scalability, and reliability.
• Improve our observability stack, working with tools such as Sentry, Prometheus, Grafana, and Alert Manager to provide real-time monitoring and proactive alerting.
• Set up and maintain performance monitoring tools, including k6 and other solutions, to ensure optimal performance and capacity planning.

Who We Hope You Have:

• 5+ years of hands-on experience managing cloud infrastructure and automation.
• Experience in achieving SOC2 Type II, ISO 27001, or similar certifications
• Experience with Node.js or Python for backend services in a microservices architecture.
• 3+ years of experience with cloud providers, preferably Google Cloud Platform (GCP).
• 3+ years of experience managing Kubernetes clusters in production environments.
• Knowledge of asynchronous processing, message queues (e.g., Kafka, Pub/Sub), and event-driven architecture for backend applications.
• Experience focused on the internal engineer team success

$170,000 - $210,000 a year
Final offer amounts are determined by multiple factors including candidate location, experience and expertise and may vary from the amounts listed above. Total compensation package does include stock options, benefits and additional perks.

Here at Federato, your capabilities are important, but culture fit is essential. We move fast, are eager to listen to our users, take a first principles approach to solving problems, and value learning and the ability to change our minds. Most importantly, we're here to have fun. Our ability to make a difference starts with our people. We would love to work with you!

We are an equal-opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will provide reasonable accommodation to individuals with disabilities to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at [e-mail]

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Federato’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.