SRE/DevOps Engineer

Magnet Forensics

18h•$110,000 - $160,000•Hybrid

About The Position

We are building a SRE-DevOps team for the GrayKey cloud platform: the services that license, provision, and support GrayKey and VeraKey devices used by law enforcement and government agencies around the world. You will own day-to-day reliability during Pacific and Mountain hours, extending the team's coverage well into the Eastern evening. As a result you will often be the person on point: you need to work independently, make sound calls, and hand off clearly. The focus of this role is SRE and infrastructure operations responsibility. You will write automation and code (AI-assisted tooling is encouraged), but your core strength is keeping production AWS environments, identity, and network security healthy, secure, and well documented. NOTE: Candidates must reside in The United States or Canada and be located within the Pacific or Mountain Time Zone.

Requirements

3+ years in an SRE, DevOps, or Linux/cloud systems administration role.
Hands-on AWS experience: VPC networking, IAM, EC2, RDS, and Lambda.
Proficiency in Linux administration and scripting in Python and Bash.
Infrastructure as Code with Terraform.
Working experience with Kubernetes (EKS), Argo CD, Helm, GitLab CI/CD, and Datadog (or comparable observability tooling).
Hands-on Okta administration: SAML/OIDC integrations, provisioning, and MFA.
Practical security experience: least-privilege IAM, secrets handling, patch management, and network segmentation. Certifications such as CompTIA Security+, CySA+, or AWS Certified Security – Specialty count toward this.
Solid networking fundamentals: TCP/IP, DNS, TLS, routing, firewalls, and VPNs.
Clear written communication and a track record of working independently across time zones.
Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
Must reside in the United States or Canada & be located within the Pacific or Mountain Time Zone.

Nice To Haves

Exposure to SOC 2, CJIS, or FedRAMP compliance work.
Experience with Active Directory / Azure AD (Entra ID).
Experience with Ansible, Docker, PostgreSQL, and Redis.
Experience using AI coding assistants for infrastructure and automation work.
Background in IT operations or on a security-focused team.

Responsibilities

Monitoring and incident response: watch alerts and dashboards during your hours, triage incidents, resolve what you can, and escalate with clear context when you cannot.
Patching and vulnerability remediation: keep Linux hosts, containers, and dependencies current, and work scanner findings through to closure.
Network and access: manage VPCs, security groups, VPN, DNS, TLS certificates, IAM, and Fortigate firewalls; diagnose subnet and security-group connectivity issues. Cloud changes go through Terraform and GitLab merge requests.
Identity: administer Okta, including SAML/OIDC app integrations, user and application provisioning, group-based access, and MFA troubleshooting.
Kubernetes operations: support EKS clusters (node groups, upgrades, scaling, cluster health), troubleshoot workloads (pods, deployments, services, ingress, PVCs), and resolve Argo CD sync and deployment errors.
Backup and recovery: maintain backup strategies for critical systems and data, and regularly test restore procedures.
Runbooks and documentation: write and maintain the operating procedures the team relies on.
Cost and automation: track AWS spend, remove waste, and script away repetitive toil.
Compliance support: gather evidence and maintain controls for customer and audit requirements.
Team practice: take part in code reviews, planning, and post-incident reviews.
Travel: less than 5%.