Lead DevSecOps Infra Engineer

Optimum

4d•Remote

About The Position

Optimum is delivering the world's first Decentralized Web3 Internet Protocol for any blockchain. Powered by Random Linear Network Coding (RLNC), Optimum scales network speed, robustness and throughput by orders of magnitude. Co-founded by Muriel Médard, co-inventor of RLNC, and a team of industry experts, Optimum introduces a breakthrough in Web3 infrastructure. Blockchains—often called world computers—lack a critical component for infinite scalability: a real-time virtual memory. Our memory infrastructure enables high-speed data propagation, fast access, and secure updates, scaling the world computer. Backers include 1kx, Spartan, Robot Ventures, Finality Capital, Triton Capital (fka Kraken Ventures), CMT Digital, SNZ and others. Learn more at getoptimum.xyz Role Overview This role goes beyond day-to-day DevSecOps: you are accountable for reliability, security, and scalability of Optimum’s decentralized network from early testnets through production mainnets. You will act as the connective layer between protocol engineering, research, product, and security—ensuring Optimum can safely operate a Web3 system at global scale under real-world, adversarial conditions.

Requirements

8+ years in Infrastructure, SRE, or DevOps roles, including ownership of DevSecOps in production systems.
Demonstrated experience operating distributed systems at scale, ideally in Web3 or similarly adversarial environments.
Proven experience leading incidents, setting reliability standards, and interfacing with non-infra teams.
Strong security mindset applied to infrastructure and delivery workflows.

Nice To Haves

Hands-on experience building security policies as code.
Experience operating blockchain infrastructure or deep familiarity with consensus mechanisms, validator ecosystems, and network-layer attacks.
AWS Security Specialty, GCP Professional Security Engineer, or equivalent
Instrumenting or profiling critical systems

Responsibilities

Own the DevSecOps of Optimum’s distributed infrastructure (P2P nodes, gateways, relays, control-plane services).
Lead DevSecOps evolution across devnets, testnets, and mainnet, including launch readiness and upgrade paths.
Own the infrastructure security posture across environments.
Integrate security into the delivery lifecycle, including: secure CI/CD pipelines, secrets and key management, access control and IAM, node and peer identity handling.
Harden infrastructure against Web3-specific threats (DDoS, eclipse/sybil patterns, replay attacks, resource exhaustion).
Set DevSecOps standards for infrastructure-as-code and orchestration (Terraform, Kubernetes, Helm).
Ensure fast, reproducible, and auditable deployments across environments.
Drive DevSecOps automation as a first-class principle.
Define and own SLOs/SLIs around: propagation latency (including tail behavior), availability and fault tolerance, peer churn, packet loss, and network stability.
Build reliability processes suitable for mission-critical mainnet systems.
Own build, release, and rollout pipelines (e.g. GitHub Actions).
Enforce artifact integrity, versioning, controlled rollouts, and fast rollback paths.
Balance velocity with production safety.
Partner closely with protocol engineers and researchers to productionize new networking and RLNC-based capabilities.
Work with product and BD to ensure infrastructure constraints and guarantees are well understood.
Provide infrastructure input to roadmap, launch planning, and external commitments.
Leading company wide security practices & provide educational awareness of new threats.
Own on-call strategy, escalation paths, runbooks, and incident communication.
Lead post-mortems focused on systemic improvement.
Establish a culture of operational discipline.
Stay hands-on where it matters: build internal tools, automation, and operators (Go, Python, Bash).
Enable infra engineers and protocol teams to debug and operate the system efficiently.