Senior Staff Software Engineer- Infrastructure and Security

Generac Power Systems•Toronto, ON

2d•$141,400 - $190,900

About The Position

The Senior Staff Software Engineer focused on Infrastructure and Security will shape the architecture and security of Generac's Home Software Platform (HSP), the shared cloud foundation for connected home energy products including PWRcell, PWRmicro, HSB Generator, Load Management, and HEMS. This hands-on individual-contributor role designs cloud infrastructure spanning applications, services, data, and connected devices, while embedding security throughout the platform. The engineer works closely with SRE and engineering teams and provides organization-wide technical influence.

Requirements

Bachelor of Science degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.
10+ years of progressive software engineering experience, with substantial focus on cloud infrastructure and platform engineering.
Deep, hands-on expertise architecting production systems on a major public cloud, preferably AWS.
Several years of hands-on security engineering experience across secure architecture, identity and access management, and threat modeling for large-scale distributed systems.
Strong proficiency with infrastructure-as-code, containers and orchestration, CI/CD, and modern observability tooling.

Nice To Haves

Deep familiarity with the AWS security and networking stack, including IAM, KMS, VPC design, GuardDuty, Security Hub, CloudTrail, Config, and WAF.
Experience with infrastructure-as-code at scale using Terraform and/or AWS CDK, including module design and policy-as-code guardrails.
Track record building high-volume distributed cloud platforms; device-to-cloud experience such as OTA updates, edge computing, or telemetry pipelines is a plus.
Experience securing consumer data and connected-device fleets, including privacy and compliance frameworks such as SOC 2 or ISO 27001.
Proficiency with container orchestration such as Kubernetes or EKS and event-driven and streaming architectures.
Practitioner-level experience building or deploying AI/LLM-powered applications and tooling, including hands-on use of Claude via Amazon Bedrock.
Familiarity with the home energy domain, including HEMS, demand response, utility APIs, and grid-services integrations.
Strong technical communication skills, including translating complex infrastructure and security trade-offs into clear, actionable narratives for engineering teams and technical stakeholders.
Track record of raising engineering standards through mentorship, design review, and pragmatic technical leadership.

Responsibilities

Provide architectural leadership and technical influence over HSP-wide AWS infrastructure decisions, defining patterns, guardrails, and reference architectures.
Design scalable, resilient, and cost-efficient infrastructure for APIs, services, data and streaming pipelines, compute and storage, and device-to-cloud data flows.
Shape infrastructure-as-code standards so environments are reproducible, reviewable, and auditable.
Drive platform security through threat modeling, secrets management, network segmentation, and protection of device and consumer data.
Lead cloud security architecture across AWS accounts, including IAM boundaries, least-privilege access, encryption, key management, and tamper-evident audit logging.
Partner with SRE teams to strengthen observability and reliability, including metrics, tracing, logging, alerting, and SLOs.
Partner with product engineering teams to review designs, resolve difficult infrastructure and security problems, and improve operational and secure-coding practices through mentorship and technical leadership.
Contribute to multi-year platform architecture and technology strategy, translating platform capabilities into infrastructure and security roadmaps.
Lead build-versus-buy evaluations for infrastructure and security tooling and guide integration of selected third-party services.
Partner with SRE teams to improve cloud cost visibility and optimize costs without compromising reliability or security.