Software Engineer, Infrastructure

Hebbia AI•San Francisco, CA

17d•$160,000 - $300,000•Onsite

About The Position

Hebbia is seeking an infrastructure engineer who approaches cloud infrastructure as a software problem. The successful candidate will be responsible for Hebbia's AWS footprint, including accounts, networking, container orchestration, and all code-defined infrastructure. They will also manage the developer platform used by engineering teams. A core aspect of this role is infrastructure-as-code, ensuring all provisioned resources are defined and managed through code. This is a build-focused role, not a support role, involving the design of multi-account architecture, writing IaC and automation for reproducible environments, optimizing cloud spend, enhancing infrastructure security for enterprise and financial-services clients, and streamlining the path from development to production. The engineer will own the foundational infrastructure and platform upon which all Hebbia engineers build, test, and ship their work.

Requirements

5+ years building and operating cloud infrastructure at a venture-backed startup or top technology firm
Deep expertise with infrastructure-as-code tooling, and a track record of managing a real production estate entirely in code
Cloud platform fluency, with production depth in AWS (we are an AWS shop) — networking, IAM, and account architecture, not just compute
Strong command of containerization and orchestration technologies
Production-grade proficiency in at least one scripting or backend language for automation and internal tooling: Python, Go, or similar
Strong CI/CD pipeline expertise and a demonstrated record of improving developer velocity without sacrificing safety
Working knowledge of OS-level and networking concepts, and the ability to debug problems that span the boundary between infrastructure and application
Experience instrumenting infrastructure with monitoring and observability tooling, and surfacing the signals engineering teams need to understand platform health and cost
Hands-on experience securing cloud infrastructure to an enterprise compliance bar: least-privilege IAM, secrets management, hardening, and audit readiness

Nice To Haves

Experience managing cloud cost at scale, or building the tooling and guardrails that keep spend predictable, is a strong plus

Responsibilities

Own Hebbia's AWS footprint: multi-account architecture, networking, IAM, and the container orchestration layer our services run on
Define all infrastructure as code, with the same review, testing, and versioning standards we hold application code to
Own cloud cost and capacity: model growth, right-size infrastructure, and write the automation that prevents over-provisioning before it shows up on the bill
Build and own the developer platform — build pipelines, ephemeral and preview environments, and development tooling that every engineer at Hebbia depends on
Continuously improve CI/CD so teams ship quickly and safely, and treat build times and pipeline throughput as products with owners and metrics
Harden our infrastructure for the security and compliance bar our financial-services customers hold us to: threat modeling, least-privilege access, secrets management, and automated compliance and audit tooling
Architect for scale readiness — multi-region capability, network and account isolation, and the growth headroom enterprise deployments demand
Partner with product engineering as a peer engineer, co-designing infrastructure alongside the systems that run on it
Evaluate and integrate new infrastructure technology where it measurably improves scalability, security, or engineering velocity