Senior DevSecOps Engineer

Klarity•San Francisco, CA

2d•Onsite

About The Position

Klarity is seeking a Senior DevSecOps Engineer to take ownership and drive the evolution of the company's cloud infrastructure, security posture, and deployment operations. This is a hands-on role where the engineer will architect multi-tenant and single-tenant deployment models, enhance security and compliance, automate processes using AI, and ensure platform scalability for enterprise customers. The role involves working at the intersection of infrastructure engineering, application security, and platform reliability, collaborating with backend engineers, product teams, and leadership to ensure secure, observable, and scalable infrastructure. Klarity values practical experience and execution over formal degrees, seeking individuals with strong systems thinking and a proven ability to deliver.

Requirements

Infrastructure engineer with a security-first mindset – You design, build, and operate cloud infrastructure that is secure by default, not secured as an afterthought. You think in terms of blast radius, least privilege, and defense in depth.
You’ve built and maintained production infrastructure on AWS (and ideally GCP or Azure) serving enterprise-grade workloads.
You know how to make infrastructure reproducible, auditable, and self-healing.
You’ve built CI/CD pipelines that teams actually trust, written infrastructure as code that other engineers can read and extend, and designed deployment workflows that make shipping safe and fast.
You’ve worked across tenancy patterns – You’ve designed or operated platforms that serve multiple tenants with strong data isolation and can articulate the tradeoffs between shared infrastructure, siloed namespaces, and fully dedicated environments.
You understand tenant isolation at every layer: network, compute, storage, and application.
You’ve navigated the complexity of deploying the same application across multi-tenant SaaS, single-tenant dedicated, and hybrid (split control-plane / data-plane) topologies.
Security engineer who thinks like an attacker – You proactively identify and close security gaps before they become incidents.
You’ve implemented secrets management, vulnerability scanning, SAST/DAST pipelines, runtime threat detection, and incident response playbooks.
You understand supply chain security, container hardening, and network segmentation at a deep level.
You’ve been the person the team turns to when a security incident needs triaging at 2 AM.
Well versed with compliance and governance – You’ve worked in environments that require SOC 2, ISO 27001, HIPAA, FedRAMP, or similar frameworks and you understand how to translate compliance requirements into engineering controls.
You can build audit trails, access logs, and policy-as-code systems that satisfy auditors without slowing down developers.
You’ve helped a company achieve or maintain at least one major compliance certification.
Ship with velocity and craft – You wield tools like Claude Code, Cursor, and Copilot as extensions of your craft.
You use AI to generate Terraform modules, scaffold pipeline configurations, draft runbooks, and automate toil.
You’ve built custom workflows around AI-assisted infrastructure development that others on your team have adopted.
You believe speed and quality aren’t opposites—they happen together when you’re thoughtful about how you build.
Bring energy that elevates the entire team – You see gnarly infrastructure and security challenges as puzzles waiting to be solved.
Your optimism, intensity, and passion for craft are contagious.
You make everyone around you faster and more ambitious.
You create leverage by unblocking developers—through clear documentation, self-service tooling, and proactive communication that turns infrastructure from a bottleneck into an accelerant.
5+ years in infrastructure, DevOps, or platform engineering with strong security focus

Nice To Haves

Ideally GCP or Azure experience

Responsibilities

Own and evolve Klarity’s cloud infrastructure – Design, build, and operate Klarity’s cloud infrastructure that powers everything our customers use. You’ll own the full stack: networking, compute, storage, container orchestration, databases, message queues, and deployment architecture. You’ll make foundational decisions on service boundaries, resource topology, and cost optimization that shape the platform’s trajectory.
Architect multi-tenant and single-tenant deployment models – Design and implement the infrastructure patterns that let Klarity serve customers across multiple deployment topologies: shared multi-tenant SaaS, fully isolated single-tenant environments on Klarity’s cloud, hybrid architectures with separated control and data planes, and single-tenant deployments on a customer’s own cloud provider. You’ll build the automation and tooling that makes spinning up a new tenant environment fast, repeatable, and secure.
Harden security and build compliance infrastructure – Implement defense-in-depth security across the entire platform: secrets management, IAM policies, network segmentation, container hardening, vulnerability scanning, SAST/DAST in CI/CD, runtime threat detection, and comprehensive audit logging. Build the controls and evidence collection systems that let Klarity achieve and maintain SOC 2 and other industry-specific compliance certifications required by regulated customers.
Build bulletproof CI/CD and deployment automation – Design and maintain CI/CD pipelines that make shipping safe, fast, and auditable. Implement progressive deployment strategies (blue-green, canary, feature flags), automated rollback, environment promotion workflows, and infrastructure-as-code practices that the entire engineering team can confidently use. Ensure that every deployment is traceable, reversible, and compliant.
Build observability and incident response capabilities – Implement comprehensive monitoring, alerting, and observability across infrastructure and application layers. Build dashboards that give the team real-time visibility into system health, performance, and security posture. Design and document incident response playbooks, runbooks, and post-mortem processes. Establish SLOs and error budgets that align with enterprise customer expectations.
Multiply your impact across the engineering team – You’ll be among the foundational infrastructure hires on the team. Build self-service tooling, clear documentation, and developer-friendly workflows that let every engineer ship with confidence. Partner with backend engineers to ensure application architecture aligns with infrastructure capabilities.