Senior Software Engineer, Infrastructure

vsco39; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

VSCO is seeking a Senior Software Engineer, Infrastructure to own the platform that supports product and data teams. You will design and operate the AWS/EKS stack using Terraform, Helm, and Flux GitOps, enabling scalable, secure, and reliable infrastructure.

You will lead production cutovers, manage DNS/CDN and observability, and collaborate with multiple teams to ensure shared-infra is used where appropriate, reducing snowflakes and toil.

Qualifications

• 5+ years in infrastructure, platform, or site reliability engineering with hands-on production ownership
• Strong production experience with Kubernetes/EKS, Linux, and infrastructure-as-code (Terraform)
• AWS in production: EKS, IAM/IRSA, networking (VPC, NAT, DNS), and at least one of RDS/MySQL, Elasticache/Valkey, or OpenSearch
• GitOps and CI/CD with Flux/Helm and GitHub Actions (self-hosted runners a plus)
• Experience leading technical architecture discussions, explaining tradeoffs, and driving a decision inside a small team
• Experience troubleshooting complex production issues, including network and DNS, and turning them into durable fixes
• Excellent communication: you can teach another team how to consume the platform, and you can write the cutover plan

Responsibilities

• Design, build, and operate the AWS and EKS platform using Terraform, Helm/Kustomize, and Flux GitOps across infra, shared-infra, and app-owned repos (Workspace, search, data)
• Own production cutovers end to end: ingress, DNS, workers and crons, telemetry monitors and dashboards, and a rollback plan you would actually use
• Partner with product and data teams on the right home for new infra, including namespaces, secrets (SOPS, IRSA), preview environments, and not reinventing namespace or secret wiring that already lives in shared-infra
• Build and maintain CI/CD on GitHub Actions, including self-hosted runners, image builds, and deploy pipelines that other teams can copy
• Run core data stores and caches as platform services: MySQL, Mongo, Redis, OpenSearch
• Cloudflare and CloudFront: DNS and zone moves, CDN behavior, WAF, custom domains
• Observability and autoscaling with monitors, dashboards, external-metrics HPA
• Participate in the infra on-call rotation. Debug Linux, Kubernetes, and network issues, then turn the incident into Terraform, alerts, or docs
• Review infra PRs and design docs. Help other engineers make the tradeoff, not just merge the change

Skills

Kubernetes/EKS

Terraform

AWS

GitOps

CI/CD

Linux

Pipelines languages

Tools

Terraform

Kubernetes

GitHub Actions

Flux

Helm

OpenSearch

Job description

About VSCO

For years, we've helped photographers create their work. Now we're building what comes next.

VSCO exists for photographers. Not as a side feature, not as an afterthought, but as the whole point. We build the connected system photographers rely on, and we've spent over a decade earning the trust of a global creative community that takes the craft seriously.

Photography is at an inflection point. AI is reshaping what's possible for creative work, and that's where our mission shines. VSCO is building the full photographer's workflow: from creating and editing your work, to delivering it to clients, to running your business. All of it built thoughtfully, with photographers leading the way. We believe the future of photography tools creates more space for creativity, handling the busy work so photographers can focus on the craft.

If you care about craft, community, and what technology can unlock for creative people, this is the work. We're a mission-driven and focused company where your work ships quickly, is meaningful, and reaches tens of millions of people worldwide. You'll have a real say in what we build and how we build it. We hire people who don't wait to be asked, naturally connect the dots, care about the quality of what they ship, and believe the best outcomes come from building together.

About The Role

We're looking for a Senior Software Engineer, Infrastructure to own the platform that VSCO product and data teams ship on. You'll join a small infra team that treats AWS, EKS, and GitOps as the default path for new systems, and you'll spend real time pairing with other teams so - search, Workspace, and data - land in the right Terraform, Helm, and Flux instead of one-off snowflakes.

This is a hands-on senior seat. You will design Terraform modules, cut production traffic to EKS, secure traffic with Cloudflare, look for optimizations in our AWS infrastructure, and leave on-call better than you found them. You like production ownership, you can sequence a cutover, and you can teach another team why their service belongs in shared-infra versus an app repo.

The day-to-day

• Design, build, and operate the AWS and EKS platform using Terraform, Helm/Kustomize, and Flux GitOps across infra, shared-infra, and app-owned repos (Workspace, search, data).
• Own production cutovers end to end: ingress, DNS, workers and crons, telemetry monitors and dashboards, and a rollback plan you would actually use.
• Partner with product and data teams on the right home for new infra, including namespaces, secrets (SOPS, IRSA), preview environments, and not reinventing namespace or secret wiring that already lives in shared-infra.
• Build and maintain CI/CD on GitHub Actions, including self-hosted runners, image builds, and deploy pipelines that other teams can copy. That means supporting the build and test pipelines, container images, and runners for our language ecosystems (Go, Python, PHP, Node, Java, Ruby, and similar) so those teams can compile, test, and ship, rather than writing their application code yourself.
• Run core data stores and caches as platform services: MySQL, Mongo, Valkey/Redis, OpenSearch.
• Cloudflare and CloudFront: DNS and zone moves, CDN behavior, WAF, custom domains.
• Observability and autoscaling with monitors, dashboards, external-metrics HPA, with a bias toward fixing the system so the next person doesn't page.
• Participate in the infra on-call rotation. Debug Linux, Kubernetes, and network issues, then turn the incident into Terraform, alerts, or docs.
• Review infra PRs and design docs. Help other engineers make the tradeoff, not just merge the change.

Qualifications

• 5+ years in infrastructure, platform, or site reliability engineering, including time as a hands-on owner of production systems (not only tickets and runbooks).
• Strong production experience with Kubernetes/EKS, Linux, and infrastructure-as-code (Terraform). You have shipped and operated this, not only used a chart someone else wrote.
• AWS in production: EKS, IAM/IRSA, networking (VPC, NAT, DNS), and at least one of RDS/MySQL, Elasticache/Valkey, or OpenSearch.
• GitOps and CI/CD in anger: Flux and/or Helm, plus GitHub Actions (self-hosted runners a plus).
• Familiarity with the languages our CI builds (Go, Python, PHP, Node, Java, Ruby, and similar). You do not need to be a product engineer in these languages. You do need to be comfortable supporting the pipelines, images, and runners that compile and test them.
• Experience leading technical architecture discussions, explaining tradeoffs, and driving a decision inside a small team.
• Experience troubleshooting complex production issues, including network and DNS, and turning them into durable fixes.
• Excellent communication: you can teach another team how to consume the platform, and you can write the cutover plan.

Nice to haves

• Cloudflare DNS, CDN, and zone migration experience (alongside or instead of CloudFront).
• OpenSearch, Valkey/Redis, MySQL, Mongo, Kafka.
• Datad