19 hours ago
Base Salary
$180k - $250k/yr
Responsibilities
- Own and evolve Liberate’s production cloud foundation across AWS, Kubernetes/EKS, networking, compute, storage, data services, environment isolation, and production access.
- Build reusable Terraform modules, CI/CD pipelines, deployment automation, configuration standards, and self-service infrastructure paths.
- Improve reliability through observability, alerting, SLOs, capacity and cost management, backup and recovery, disaster recovery, and production-readiness standards.
- Participate in on-call operations, lead infrastructure incidents when needed, and turn incidents and operational toil into platform improvements.
- Lead threat modeling and secure design reviews for agent capabilities, tool execution, memory, integrations, multi-tenant services, and sensitive data flows.
- Build a secure SDLC with code, dependency, container, and infrastructure-as-code scanning, CI gates, security tests, and secure defaults.
- Own identity, authorization, secrets, key management, encryption, network boundaries, audit trails, production access, and tenant and data-isolation patterns.
- Establish controls for agentic AI risks such as scoped tool access, credential handling, data exfiltration, prompt injection, model and vendor risk, and traceable actions.
- Run vulnerability management, penetration tests, third-party reviews, security telemetry, detection, playbooks, tabletop exercises, and incident response.
- Own SOC 2 and related compliance programs, lead audits and customer security reviews, and translate requirements into automated technical controls.
- Maintain the security roadmap, drive mitigations, and use vendors and external specialists while retaining internal technical ownership.
Requirements
- 8+ years of experience across infrastructure engineering, platform engineering, SRE, DevOps, cloud security, or security engineering.
- 4+ years of meaningful ownership of security architecture or security programs for a production SaaS platform.
- Deep hands-on experience with AWS, Kubernetes/EKS, Terraform or equivalent infrastructure as code, CI/CD, observability, and production incident response.
- Strong working knowledge of IAM, network security, secrets and key management, vulnerability management, secure software delivery, and multi-tenant cloud architecture.
- Demonstrated ownership of SOC 2 or a comparable compliance program in a fast-moving environment.
- Proficiency in a programming or automation language such as Python, Go, or TypeScript.
- Experience in an early-stage or high-growth company where systems had to be built rather than inherited.
- Helpful experience includes securing LLM-based or agentic systems, working in regulated industries, designing disaster recovery or multi-account cloud foundations, regional or tenant isolation, and managing security or incident-response vendors.
Benefits
- Hybrid work preferred in Boston or the Bay Area, with two days per week in the office.
- Equity included.
- Opportunity to build Liberate’s security engineering function and team.
Tech Stack
About Liberate
Comprehensive AI Platform for Carriers, Agencies and Brokers Liberate enables you to provide human-like conversation that offers 24/7 support and answers 100% of calls with no wait time. Deliver 5-star service, every time.