Senior Staff Software Engineer- Infrastructure and Security

generac; City of Pewaukee (WI); On-site; USD 150,000 - 190,000; Full time

Job summary

Generac seeks a Senior Staff Software Engineer focused on Infrastructure and Security to shape the cloud foundation behind the Home Software Platform (HSP). You will lead architectural decisions on AWS, drive security across the stack, and mentor teams to improve secure development practices.

You will collaborate with SRE and engineering to define patterns, guardrails, and reference architectures, while building scalable, cost-efficient infrastructure for high-volume data and device-to-cloud

Qualifications

• 10+ years of progressive software engineering with a strong focus on cloud infrastructure.

Responsibilities

• Provide architectural leadership over HSP-wide infrastructure decisions on AWS.
• Design scalable, cost-efficient infrastructure for a high-volume cloud platform.
• Shape infrastructure-as-code standards for reproducible, auditable environments.
• Drive security posture as a core design consideration: threat modeling, secrets management, and data protection.
• Lead cloud security architecture across AWS account structure: IAM, encryption, key management, audit logging.
• Collaborate with SRE to strengthen observability, reliability, and SLIs/SLOs.
• Review designs with product engineering, remove blockers, and elevate secure coding practices.
• Contribute to multi-year platform architecture and security roadmaps.
• Lead build-vs-buy evaluations for infra and security tooling.
• Drive cost visibility and optimization without compromising reliability or security.

Skills

Cloud infrastructure

AWS expertise

Terraform

AWS CDK

Security engineering

SRE collaboration

Observability tooling

CI/CD pipelines

Kubernetes

Threat modeling

Data protection

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

AWS CDK

Kubernetes (EKS)

CloudTrail

GuardDuty

WAF

Job description

We believe power is a promise - a shared commitment to be there for others when it matters most.

For more than 65 years, we've turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future.

Ready to Power a Smarter World with us?

We believe power is a promise - a shared commitment to be there for others when it matters most. For more than 65 years, we've turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future. Ready to Power a Smarter World with us?

The Home Software Platform (HSP) is the shared cloud foundation behind Generac's connected home energy products - PWRcell, PWRmicro, HSB Generator, Load Management, and HEMS. As a Senior Staff Software Engineer focused on Infrastructure and Security, you will shape how that platform is architected and defended: designing the cloud infrastructure behind Generac's home energy software - the applications, services, data, and connected devices it spans - and embedding security into every layer of it. You will work closely with SRE and engineering teams to lead and influence technical direction across the platform. This is a hands‑on, individual‑contributor role with organization‑wide technical influence.

Responsibilities:

• Provide architectural leadership and direct technical influence over HSP-wide infrastructure decisions on AWS, defining the patterns, guardrails, and reference architectures that engineering teams build on across the platform.
• Design scalable, resilient, cost‑efficient infrastructure for a high-volume cloud platform - APIs and services, data and streaming pipelines, compute and storage, and device‑to‑cloud data flows.
• Help shape infrastructure‑as‑code standards (Terraform, AWS CDK, or equivalent) so that environments are reproducible, reviewable, and auditable end to end.
• Drive the platform's security posture as a first‑class design concern: threat modeling, secrets management, network segmentation, and data protection for device and consumer data.
• Lead cloud security architecture across the AWS account structure: IAM boundaries, least‑privilege access, encryption in transit and at rest, key management, and tamper‑evident audit logging.
• Partner with SRE teams to strengthen the observability and reliability backbone - metrics, tracing, logging, alerting, and SLOs.
• Partner with product engineering teams to review designs, unblock hard infrastructure and security problems, and raise the bar on operational and secure‑coding practices through mentorship and technical leadership.
• Contribute to multi‑year platform architecture and technology strategy, translating platform capabilities into concrete, buildable infrastructure and security roadmaps.
• Lead build‑vs‑buy evaluations for infrastructure and security tooling, and guide the technical integration of selected third‑party services.
• Partner with SRE teams to drive cost visibility and optimization across the cloud estate without compromising reliability or security.

Basic Qualifications:

• Bachelor of Science degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.
• 10+ years of progressive software engineering experience, with a substantial focus on cloud infrastructure and platform engineering.
• Deep, hands‑on expertise architecting production systems on a major public cloud, preferably AWS.
• Several years of hands‑on security engineering across secure architecture, identity and access management, and threat modeling, applied to large‑scale distributed systems.
• Strong proficiency with infrastructure‑as‑code, containers and orchestration, CI/CD, and modern observability tooling.

Preferred Qualifications:

• Deep familiarity with the AWS security and networking stack (IAM, KMS, VPC design, GuardDuty, Security Hub, CloudTrail, Config, WAF).
• Experience with infrastructure‑as‑code at scale using Terraform and/or AWS CDK, including module design and policy‑as‑code guardrails.
• Track record of building high‑volume distributed cloud platforms; experience with device‑to‑cloud patterns (OTA update, edge computing, telemetry pipelines) is a plus.
• Experience securing consumer data and connected‑device fleets, including relevant privacy and compliance frameworks (SOC 2, ISO 27001, or similar).
• Proficiency with container orchestration (Kubernetes / EKS) and event‑driven and streaming architectures.
• Practitioner‑level experience building or deploying AI/LLM‑powered applications and tooling, including hands‑on use of Claude via Amazon Bedrock.
• Familiarity with the home energy domain - HEMS, demand response, utility APIs, and grid‑services integrations.
• Strong technical‑communication skills: able to translate complex infrastructure and security trade‑offs into clear, actionable narratives for engineering teams and technical stakeholders.
• A track record of raising engineering standards through mentorship, d