Senior Infrastructure Engineer - Security and DevOps

As a Senior Infrastructure Engineer - Security and DevOps at Kodex, you'll be responsible for designing, implementing, and managing infrastructure through Infrastructure as Code tools like Terraform. You'll build and maintain security-oriented products, drive DevOps practices by automating CI/CD pipelines, and manage AWS infrastructure with a focus on security policies. Engaging in performance testing, enforcing access controls, and participating in on-call rotations to address critical system issues will also be integral parts of your role.

To qualify for the Senior Infrastructure Engineer - Security and DevOps role at Kodex, you should possess solid experience in DevOps, particularly in managing CI/CD pipelines. A strong background in security practices related to building security-oriented products is essential, along with expertise in scripting languages like Bash. Familiarity with AWS, especially in IAM and Security Policies, is crucial, as is proficiency in Docker and container orchestration tools.

Kodex offers a range of fantastic benefits for the Senior Infrastructure Engineer - Security and DevOps position, including a fully remote work environment with no return-to-office mandates. You'll receive a competitive salary coupled with equity options, unlimited PTO, and comprehensive medical, dental, and vision coverage. The team also enjoys offsite meetings in various locations throughout the year, fostering a vibrant team culture.

Kodex is looking to fill positions at the E5 (senior) and E6 (staff) levels for the Senior Infrastructure Engineer - Security and DevOps role. Candidates should have substantial hands-on experience in relevant fields, particularly in DevOps processes and security practices. Additionally, a proactive attitude towards learning and a willingness to adapt to new challenges is highly valued.

Yes! The Senior Infrastructure Engineer - Security and DevOps role at Kodex is a fully remote position, allowing you to work from wherever you are most comfortable. The company promotes a flexible work environment with no mandatory in-office days, making it easier for you to balance work and life commitments.

When answering about your AWS experience, highlight specific projects where you managed security policies using IAM, optimized resources for cost efficiency, and leveraged various services for app deployment. Discuss any automation or monitoring tools you used, and emphasize your understanding of best practices in securing AWS environments.

Discuss your approach to security by addressing threat modeling, the implementation of a defense-in-depth strategy, and how you integrate security into the CI/CD pipeline. Mention tools or practices, such as automated security testing and regular audits, that you've used to maintain a secure environment.

In your response, outline your methodology for performance testing, such as identifying key metrics, selecting appropriate tools, and analyzing results. Mention any experiences where you collaborated with development teams to address identified bottlenecks and improve overall system performance.

Share specific examples of projects where you implemented Docker for containerization and the orchestration tools you used to manage these containers. Discuss challenges faced during the deployment and how you automated your processes to improve operational efficiency.

Mention your familiarity with compliance frameworks such as GDPR, HIPAA, or SOC 2. Share instances where you have worked to ensure compliance, perhaps through audits, implementing security controls, or responding to security questionnaires, while highlighting your understanding of the legal implications involved.

Focus on the tools you've used for CI/CD pipelines, such as Jenkins, GitHub Actions, or CircleCI. Provide insights into how you automate deployment processes, manage version control, and maintain a smooth collaboration between development and operations teams.

Discuss your experience with Terraform, particularly how you use it to define infrastructure as code to ensure consistent environments. Illustrate your knowledge of modules, remote state, and how you manage infrastructure changes effectively.

Share a specific scenario where you dealt with performance degradation. Explain the tools you used to monitor system health, the analysis process you undertook, and the corrective actions that led to improved system stability.

Mention the resources or communities you engage with to stay informed, such as attending webinars, following industry leaders, or participating in forums. This showcases your commitment to ongoing education and adaptability in a fast-paced field.

Discuss the strategies you employ to prepare for on-call duties, such as documentation, tool familiarity, and knowledge sharing. Emphasize the importance of mental readiness and factors you consider to minimize alert fatigue and ensure effective incident response.