DevOps & Security Engineer

StudyFetch•Beverly Hills, CA

9d•$170,000 - $270,000•Onsite

About The Position

We're a technology company building AI-native learning products used by more than seven million students worldwide, alongside Honen, our workforce-learning platform for organizations. Both run on the Learn Engine, the intelligence that moves a learner from initial understanding to demonstrated mastery. We work with partners like NVIDIA to bring responsible, learning-first AI to the students who need it most. All of that runs on a mature, infrastructure-as-code platform: cloud, Kubernetes, networking, deploy tooling, databases, and the GPU serving that powers our AI. We already operate with a strong security and DevOps foundation, and we're scaling the team so we can keep raising that bar as the company and the platform grow. You'll work alongside our Lead Infrastructure & Platform Engineer as a partner, not a report. They set the direction of the platform; you focus on the security and DevOps side, deepening our posture and the automation that keeps us shipping safely. As we build out our own GPU infrastructure inside a colocation facility, you'll help make sure it's secured, monitored, and operable from day one. If you want deep ownership of security and operations for a product that reaches millions of learners, this is it.

Requirements

5+ years in security engineering, DevOps, SRE, or infrastructure, with real depth in securing and operating production systems, or You were an early engineer who owned security and operations for a real product as it grew, and can demonstrate what you built and defended.
You've secured and operated production systems that real users depend on. You can walk us through an environment you hardened, an incident you ran, which parts were yours, and what you changed afterward.
You think like an attacker and build like an operator. You understand cloud and Kubernetes security, identity and access, secrets, and network security, and you close gaps without grinding the team to a halt.
You've carried real compliance. SOC 2 or similar isn't a mystery to you, and you know how to make controls that hold up in an audit without becoming theater.
You automate by default. Manual, click-through processes bother you; you'd rather codify them. Infrastructure-as-code and pipelines are how you work.
You use AI every day and have informed opinions about it, including how to operate and secure AI workloads. Genuine curiosity is the one thing we can't teach.
You're candid about tradeoffs and steady under pressure, including launch crunch and live incidents.
The mission is why you're here. What sustains you through the hard weeks is the learner on the other end, the one whose data you protected and whose experience stayed up because of something you built.

Nice To Haves

You don't need every item below, but you should be deep in most and able to ramp quickly on the rest: Security: IAM and least-privilege access, secrets management and rotation, network security, zero-trust access, vulnerability management, audit logging
Compliance: SOC 2 and continuous compliance tooling; awareness of frameworks like FedRAMP
DevOps & CI/CD: build and deploy pipelines (Jenkins or similar), container builds, GitOps-style automation, infrastructure-as-code (Pulumi or Terraform)
Cloud & orchestration: GCP, Cloudflare, Vercel; Kubernetes (GKE), Helm
Networking: VPC design, firewalls, DNS/TLS, and — for the colo work — datacenter and network segmentation
Observability & operations: monitoring, alerting, incident response, on-call
Data & AI ops: PostgreSQL and MongoDB, managed caches, plus operating and securing GPU/model-serving workloads

Responsibilities

Security posture, end to end. Identity and least-privilege access across our cloud and tooling, secrets management and rotation, network security, and the day-to-day work of keeping the platform hard to break into and easy to audit.
Compliance, made real. We hold ourselves to a serious bar (SOC 2, continuous scanning, evidence you can actually produce). You own the controls, the audit readiness, and the roadmap toward frameworks like FedRAMP, without turning the team into a ticket queue.
The DevOps backbone. CI/CD, build and deploy pipelines, and the automation that lets engineers ship safely and often. You make the paved road, and you make the secure way the easy way.
Reliability and incident response. Monitoring, alerting, on-call, and the postmortems that make the next incident less likely. When something breaks at 2am, you're calm, methodical, and the reason it doesn't happen twice.
Securing the GPU and colocation buildout. As we stand up GPU capacity in a colo facility, you own its security and operability: network segmentation, access controls, monitoring, and hardening across the hybrid of on-prem and cloud.
Raising the security bar for the team. The practices you set for how we handle secrets, access, and incidents are the ones everyone else follows.