Key skills
AWSTerraformContainerizationDockerCI/CDCircle CIGitHub ActionsFirewallsLoad BalancersDNSVPC ArchitectureVPC PeeringZero-trust Network AccessTailscaleCloud Security StandardsIAMSecrets ManagementAPI AuthenticationAudit LoggingNetwork SegmentationVulnerability TriageNetworking FundamentalsNoSQLPostgreSQLMySQLMongoDBGitHubCloud Security
About this role
Chromatic is dedicated to improving the UX of the internet and safeguarding the world's pixels by building tools for front-end teams. They are seeking a Senior DevOps Engineer to secure, stabilize, and architect their systems to meet the growing infrastructure and security challenges.
Responsibilities:
- Own and continuously improve our security posture — from access controls and secrets management to vulnerability triage and audit logging — ensuring our systems meet the standards our enterprise customers require
- Design, build, and maintain secure, scalable infrastructure in AWS using Terraform that enables millions of browser sessions daily
- Embed with product and engineering teams to assess infrastructure needs, conduct security reviews, and ensure that developer tooling and CI/CD workflows ship with security built in rather than bolted on
- Participate in the engineering team's on-call rotation, responding to incidents and taking ownership of mitigation through to resolution
Requirements:
- 5+ years of hands-on experience deploying and operating containerized applications in AWS
- 5+ years of hands-on experience using Infrastructure as Code (IaC) technologies (we use Terraform)
- Intermediate working knowledge of networking fundamentals, including firewalls, load balancers, DNS, VPC architecture and peering, and zero-trust network access (we use Tailscale)
- Intermediate working knowledge of cloud security standards, including least-privilege IAM, secrets management, API authentication and abuse prevention, audit logging, network segmentation, and proactive vulnerability triage, etc
- Demonstrable hands-on experience with CI/CD (Circle CI, GitHub Actions), containerization (Docker), and orchestration tools
- Working knowledge of legal/compliance frameworks such as SOC2, GDPR, etc
- Intermediate knowledge and working experience with NoSQL document databases (MongoDB) and/or relational databases (PostgreSQL, MySQL, etc.) systems
- Have worked effectively in a distributed, remote-first team environment
- Have followed a non-traditional path into software and bring insight from experiences beyond engineering