Senior Staff Software Engineer- Infrastructure and Security

Generac•Santa Monica, WI

About The Position

The Senior Staff Software Engineer focused on Infrastructure and Security will help architect and defend Generac’s Home Software Platform (HSP), the shared cloud foundation for connected home energy products including PWRcell, PWRmicro, HSB Generator, Load Management, and HEMS. This hands-on individual-contributor role has organization-wide technical influence and works closely with SRE and engineering teams to guide technical direction across the platform. The role provides architectural leadership for AWS infrastructure and platform security, establishing patterns, guardrails, and reference architectures. It shapes infrastructure-as-code standards, strengthens reliability and observability, and contributes to multi-year platform architecture and technology strategy. The engineer also guides tooling evaluations and integrations, supports cost optimization, and mentors teams on operational and secure-coding practices.

Requirements

Bachelor of Science in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.
At least 10 years of progressive software engineering experience, with substantial focus on cloud infrastructure and platform engineering.
Deep, hands-on expertise architecting production systems on a major public cloud, preferably AWS.
Several years of hands-on security engineering across secure architecture, identity and access management, and threat modeling applied to large-scale distributed systems.
Strong proficiency with infrastructure-as-code, containers and orchestration, CI/CD, and modern observability tooling.

Nice To Haves

Deep familiarity with the AWS security and networking stack, including IAM, KMS, VPC design, GuardDuty, Security Hub, CloudTrail, Config, and WAF.
Experience with infrastructure-as-code at scale using Terraform and/or AWS CDK, including module design and policy-as-code guardrails.
Track record of building high-volume distributed cloud platforms; device-to-cloud experience such as OTA updates, edge computing, or telemetry pipelines is a plus.
Experience securing consumer data and connected-device fleets, including privacy and compliance frameworks such as SOC 2 or ISO 27001.
Proficiency with Kubernetes/EKS and event-driven and streaming architectures.
Practitioner-level experience building or deploying AI/LLM-powered applications and tooling, including hands-on use of Claude via Amazon Bedrock.
Familiarity with the home energy domain, including HEMS, demand response, utility APIs, and grid-services integrations.
Strong technical communication skills and ability to explain infrastructure and security trade-offs clearly to engineering teams and technical stakeholders.
Track record of raising engineering standards through mentorship, design review, and pragmatic technical leadership.

Responsibilities

Provide architectural leadership and technical influence over HSP-wide AWS infrastructure decisions, defining patterns, guardrails, and reference architectures.
Design scalable, resilient, cost-efficient infrastructure for APIs, services, data and streaming pipelines, compute and storage, and device-to-cloud data flows.
Help shape infrastructure-as-code standards so environments are reproducible, reviewable, and auditable.
Drive platform security through threat modeling, secrets management, network segmentation, and protection of device and consumer data.
Lead cloud security architecture across AWS accounts, including IAM boundaries, least-privilege access, encryption, key management, and tamper-evident audit logging.
Partner with SRE teams to strengthen observability and reliability through metrics, tracing, logging, alerting, and SLOs.
Partner with product engineering teams to review designs, unblock infrastructure and security problems, and improve operational and secure-coding practices through mentorship and technical leadership.
Contribute to multi-year platform architecture and technology strategy and develop concrete infrastructure and security roadmaps.
Lead build-versus-buy evaluations for infrastructure and security tooling and guide integration of selected third-party services.
Partner with SRE teams to improve cloud cost visibility and optimize costs without compromising reliability or security.