Staff Software Engineer (DevOps / Platform Engineering)

Liberate; Boston, San Francisco (MA, CA); Remote; USD 180,000 - 240,000; Full time

Job summary

Liberate is seeking a seasoned Staff DevOps and Platform Engineer to own the infrastructure powering our real-time AI voice and workflow automation. Based in Boston or SF (remote within the U.S.), you will lead AWS-based platform design, CI/CD, security, and reliability for multi-agent runtimes, mentoring engineers and shaping scalable infrastructure.

You will drive incidents, SLOs, toolchains, and compliance initiatives, partnering with product teams to enable rapid product expansion while

Qualifications

• 8+ years of DevOps, SRE, or platform engineering at scale.
• Deep AWS expertise (EKS, IAM, VPC, ALB/NLB, CloudWatch, KMS).
• Strong Kubernetes experience and multi-environment mgmt.
• Proficiency with Terraform or IaC and GitOps workflows.
• High proficiency in Python, Go, or TypeScript for tooling and automation.
• Experience with Traefik, HAProxy, or similar load balancers.
• Familiarity with MTLS, certificates, and service-to-service auth.
• Strong CI/CD experience (GitHub Actions, CodeBuild).
• Ability to lead incidents and define SLOs for reliability.
• Excellent communication and leadership in distributed teams.

Responsibilities

• Lead architecture and operation of core AWS infrastructure (PBX, EKS, networking, IAM).
• Own Canary routing Infrastructure for LRA via Traefik and GitOps.
• Maintain and optimize CI/CD flows with GitHub CodeBuild and pipelines.
• Manage MTLS proxy infrastructure and carrier integrations.
• Own HAProxy fleet, cert lifecycle, and secure ingress patterns.
• Ensure secure access to production systems, tokens, and root accounts.
• Lead incident response, on-call rotations, and postmortems.
• Improve reliability metrics (SLA/SLO/SLI) for voice and runtime systems.
• Partner with AWS Support to optimize pricing and scaling.
• Mentor engineers and raise operational maturity.

Skills

DevOps leadership

AWS (EKS, IAM, VPC)

Kubernetes

Terraform

Python/Go/TS tooling

Traefik/HAProxy

CI/CD (GitHub Actions, CodeBuild)

Incident management

Distributed-team communication

Tools

Kubernetes

Traefik

HAProxy

CodeBuild

GitHub Actions

EKS

IAM

VPC design

Job description

Boston / San Francisco

About Liberate

Liberate builds AI agents to automate manual tasks for the $2.7T insurance industry. We started with voice, the hardest and most valuable channel in insurance, and are now expanding into full workflow automation across sales, servicing, and claims. Our long-term vision is to build reasoning agents capable of handling the entire spectrum of insurance carrier and broker operations. We've raised $72M to date, including a $50M Series B in October 2025, backed by top-tier venture firms.

About The Role

We are looking for a seasoned Staff DevOps and Platform Engineer to own and evolve the infrastructure that powers Liberate’s real-time AI voice and workflow automation systems. This is a critical technical leadership role. You will inherit and advance a modern AWS-based platform that spans PBX telephony, canary routing, MTLS-based integrations with carriers, secure production environments, CI/CD, and compliance posture.

You will drive reliability, scalability, and operational rigor across our multi-agent runtime. You will also mentor engineers, design forward-looking system improvements, and create the platform foundations that enable Liberate’s rapid product expansion.
Key Responsibilities

Infrastructure Architecture and Ownership

• Lead architecture and operation of core AWS infrastructure including PBX systems, EKS, networking, IAM, VPC design, and secure environment isolation.
• Own and improve Canary routing infrastructure for LRA (LLM REST API) via Traefik and GitOps patterns.
• Maintain and optimize CI/CD flows including GitHub-based CodeBuild jobs, artifact pipelines, and environment promotion workflows.

Secure Integrations and Network Edge

• Manage and evolve MTLS proxy infrastructure used to integrate with carrier systems like Frontline.
• Own HAProxy-based proxy fleet, certificate lifecycle, root CA management, and IP-restricted ingress patterns.
• Ensure secure, audited access to production systems, tokens, and root-level accounts.

Operational Excellence

• Lead incident response, on-call rotations, and postmortems. Improve reliability metrics (SLA/SLO/SLI) for voice, agent runtime, and workflow systems.
• Maintain and improve non-obvious production infra details including external service dependencies, version pinning, and update cadences.
• Partner with AWS Support to optimize pricing, scaling configs, and resource utilization.

CI/CD, Tooling, and Developer Experience

• Modernize developer workflows: streamlined builds, repeatable environments, safe deployment strategies (blue/green, canary, feature flags).
• Build internal tools and abstractions to make engineers productive while enforcing safety, configuration hygiene, and compliance requirements.

Compliance and Security

• Lead infrastructure-related components of SOC2, pen-testing, and Vanta-driven controls.
• Ensure auditability, traceability, secure storage of credentials, and alignment with enterprise customer expectations.

Cross-Functional Leadership

• Work closely with AI Platform, Forward Deployed Engineering, and Product teams to translate business goals into scalable infrastructure decisions.
• Mentor engineers across DevOps, platform, and backend areas. Help set engineering standards and raise operational maturity across the org.

Required Qualifications

• 8+ years of DevOps, SRE, or platform engineering experience operating production systems at scale.
• Deep hands-on AWS expertise (EKS, IAM, VPC, ALB/NLB, CloudWatch, KMS).
• Strong experience with Kubernetes, container orchestration, and multi-environment management.
• Proficiency with Terraform or other IaC tools and GitOps workflows.
• High proficiency in Python, Go, or Typescript for tooling, automation, and internal platform services.
• Experience with Traefik, HAProxy, or similar load-balancing and routing systems.
• Familiarity with secure network architectures, MTLS, certificate hierarchies, and service-to-service authentication.
• Strong background managing CI/CD systems such as GitHub Actions and CodeBuild.
• Ability to lead incidents, design SLOs, and drive reliability across mission-critical systems.
• Excellent communication and leadership skills in distributed teams.

Preferred Qualifications

• Experience with PBX or telephony systems in AWS, SIP routing, or real-time communication pipelines.
• Experience with voice agents, WebRTC, or low-latency streaming services.
• Prior work in regulated or enterprise environments where compliance is a first-class requirement.
• Experience scaling infra in fast-growth startups.
• Contributions to open source, infrastructure design talks, or technical publications.

Why This Role Matters

Our platform supports real-time, multi-agent reasoning and voice workflows that depend on low latency, reliability, and airtight security. This role is the backbone of that capability. If you're excited to own mission-critical infrastructure in a company where infrastructure is product, we’d love to talk.

Strong preference for Boston or San Francisco based, but open to remote within the U.S.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Liberate’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.