SRE/DevOps Engineer

Magnet Forensics develops digital investigative software for acquiring, analyzing, and sharing evidence from digital devices. The SRE/DevOps Engineer will support the reliability and infrastructure operations of the GrayKey cloud platform, independently managing production AWS environments, identity, network security, incident response, automation, and documentation.

Responsibilities:

• Monitoring and incident response: watch alerts and dashboards during your hours, triage incidents, resolve what you can, and escalate with clear context when you cannot
• Patching and vulnerability remediation: keep Linux hosts, containers, and dependencies current, and work scanner findings through to closure
• Network and access: manage VPCs, security groups, VPN, DNS, TLS certificates, IAM, and Fortigate firewalls; diagnose subnet and security-group connectivity issues. Cloud changes go through Terraform and GitLab merge requests
• Identity: administer Okta, including SAML/OIDC app integrations, user and application provisioning, group-based access, and MFA troubleshooting
• Kubernetes operations: support EKS clusters (node groups, upgrades, scaling, cluster health), troubleshoot workloads (pods, deployments, services, ingress, PVCs), and resolve Argo CD sync and deployment errors
• Backup and recovery: maintain backup strategies for critical systems and data, and regularly test restore procedures
• Runbooks and documentation: write and maintain the operating procedures the team relies on
• Cost and automation: track AWS spend, remove waste, and script away repetitive toil
• Compliance support: gather evidence and maintain controls for customer and audit requirements
• Team practice: take part in code reviews, planning, and post-incident reviews
• Travel: less than 5%

Requirements:

• 3+ years in an SRE, DevOps, or Linux/cloud systems administration role
• Hands-on AWS experience: VPC networking, IAM, EC2, RDS, and Lambda
• Proficiency in Linux administration and scripting in Python and Bash
• Infrastructure as Code with Terraform
• Working experience with Kubernetes (EKS), Argo CD, Helm, GitLab CI/CD, and Datadog (or comparable observability tooling)
• Hands-on Okta administration: SAML/OIDC integrations, provisioning, and MFA
• Practical security experience: least-privilege IAM, secrets handling, patch management, and network segmentation
• Solid networking fundamentals: TCP/IP, DNS, TLS, routing, firewalls, and VPNs
• Clear written communication and a track record of working independently across time zones
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience
• Must reside in the United States or Canada & be located within the Pacific or Mountain Time Zone
• Certifications such as CompTIA Security+, CySA+, or AWS Certified Security – Specialty count toward this
• Exposure to SOC 2, CJIS, or FedRAMP compliance work
• Experience with Active Directory / Azure AD (Entra ID)
• Experience with Ansible, Docker, PostgreSQL, and Redis
• Experience using AI coding assistants for infrastructure and automation work
• Background in IT operations or on a security-focused team