Senior DevOps Engineer

Scanner•San Francisco, CA

3d•Hybrid

About The Position

Scanner is seeking a Senior DevOps Engineer to own the deployment, upgrading, and operation of their systems across various environments. This includes a managed SaaS offering and a Bring Your Own Cloud deployment where the data plane is provisioned directly into customer AWS accounts. The infrastructure managed by this role handles indexing and querying hundreds of terabytes to petabytes of logs daily across numerous accounts, making efficiency, observability, and uptime critical. The role requires a strong candidate with at least 5 years of experience in infrastructure, DevOps, SRE, or platform engineering, deep AWS expertise, and production experience with infrastructure-as-code tools. A focus on security best practices, operational excellence, and the ability to work in a fast-paced, low-process environment are essential. The engineer will also be expected to write TypeScript for Pulumi and be able to debug Rust code.

Requirements

A minimum of 5 years of professional experience in infrastructure, DevOps, SRE, or platform engineering.
Deep AWS fluency (IAM, VPC and networking, ECS, Lambda, S3).
Production experience with infrastructure-as-code like Pulumi, Terraform, or CDK across multiple accounts and regions.
Experience owning CI/CD end to end.
A strong focus on building systems using the principle of least privilege, and focusing on a security posture that enterprises expect: tightly scoped roles, minimal cross-account trust, private networking, compliance evidence for SOC 2 Type II.
A strong operations instinct for observability, incident response, and cost efficiency at scale.
Comfort writing TypeScript (our Pulumi code) and reading Rust well enough to debug a service you didn't write.
Comfort working in a fast-paced and low process environment.

Nice To Haves

Shipped Rust before.

Responsibilities

Own how Scanner gets deployed, upgraded, and operated everywhere it runs.
Manage infrastructure that indexes and queries hundreds of terabytes to petabytes of logs per day, across dozens of accounts.
Ensure efficiency, observability, and uptime of the infrastructure.
Own CI/CD end to end.
Build systems using the principle of least privilege, focusing on a security posture that enterprises expect (tightly scoped roles, minimal cross-account trust, private networking, compliance evidence for SOC 2 Type II).
Apply a strong operations instinct for observability, incident response, and cost efficiency at scale.
Write TypeScript for Pulumi and debug Rust code.