THE ROLE

You will be the architect of risk reduction, transforming raw vulnerability data into a prioritized roadmap for a secure enterprise. Your mission is to move beyond "fixing everything" to strategically eliminating the specific vulnerabilities that pose the highest risk to our global infrastructure. By collaborating across Cloud, DevSecOps, and Product teams, you will ensure our security posture is proactive, measurable, and deeply integrated into our delivery lifecycle. This role is a high-impact opportunity to influence how we define "safe" across a modern, multi-cloud environment.

WHAT YOU’LL DO

• Drive Risk-Based Prioritization: Shift the organization from volume-based reporting to intelligence-driven action by correlating vulnerability data with exploitability, asset criticality, and attack surface exposure to ensure teams focus on what matters most.
• Operationalize Global Scanning: Lead the end-to-end operation and continuous improvement of enterprise scanning across AWS, Azure, GCP, and containerized environments to maintain 100% visibility of our digital footprint.
• Enable Cross-Functional Remediation: Partner directly with Infrastructure and Engineering owners to drive remediation efforts against established SLAs, identifying root causes like base-image drift or patching gaps to prevent recurring risks.
• Integrate Defense Context: Collaborate with Detection and Incident Response teams to map vulnerability classes to active threats, helping determine if known exposures contributed to incidents and identifying where new detections are required.
• Engineer Operational Excellence: Automate the lifecycle of a vulnerability—from discovery and Jira ticket creation to final reporting—providing leadership with "Fix Impact Reports" that clearly quantify how our security efforts reduce business risk.

WHAT YOU BRING

The Core Essentials

• 5+ years of experience in security operations, vulnerability management, or security engineering in an enterprise environment (or equivalent practical experience).
• Hands-on experience running vulnerability management programs and working with asset discovery and/or secrets detection tools (e.g., runZero, TruffleHog, GitLeaks, or similar).
• Experience configuring and operating a Zero Trust / secure web gateway platform (e.g., Zscaler ZIA/ZPA or similar) and securing at least one major cloud provider (AWS, GCP, or Azure).
• Proficiency in SIEM detection engineering (preferably Splunk) and scripting or programming in at least one of: Python, PowerShell, or Bash.
• Demonstrated ability to partner with engineering teams to prioritize and drive remediation, and to explain technical risk in clear, business-relevant language.
• We are primarily an in-office environment and therefore, you will be expected to work from the Prague office in compliance with Pure’s policies, unless you are on PTO, or work travel, or other approved leave.

Bonus Points (Preferred Skills)

• Experience with Zscaler ZIA/ZPA specifically, including SSL inspection design, certificate management, and policy tuning in a global environment.
• Experience integrating secrets scanning into CI/CD pipelines and automating remediation.
• Exposure to threat emulation / adversary simulation (e.g., Atomic Red Team) and deception technologies mapped to MITRE ATT&CK.
• Background in penetration testing, red team, or purple team activities that inform defensive control design.

THE ROLE

…. Do you lie awake at night, thinking of NIST SP800-63-3? Do you get shivers when you hear the words “service account”? Does “zero trust” actually mean something to you? As they say, Identity is the new perimeter, and it could be your new frontier here at Pure Storage.

The Global Information Security Office (GISO) at Pure Storage is seeking an experienced IAM Operations Engineer to operate and continuously improve our enterprise Identity and Access Management services. This role is responsible for ensuring the stability, scalability, and operational effectiveness of IAM platforms while delivering secure, compliant access across on-premises and multi-cloud environments.

In this role, you will own the day-to-day operation of authentication and identity lifecycle services, supporting incident, problem, and change management processes. You will ensure IAM services meet defined SLAs, adhere to security policies, and maintain compliance with regulatory and audit requirements while enabling a seamless end-user experience.

WHAT YOU'LL DO

• Manage IAM service performance by defining, tracking, and analyzing operational KPIs, SLAs, and SLOs to ensure high availability, reliability, and continuous improvement.
• Administer and support enterprise IAM platforms, including:
• Identity Providers (IdP)
• Privileged Access Management (PAM)
• Identity Governance & Administration (IGA)
• Secrets Management and PKI
  (e.g., Okta, Lumos, Okta Privileged Access, 1Password, HashiCorp Vault, Keyfactor, etc.)
• Perform day-to-day IAM operational activities while contributing to the strategic IAM roadmap.
• Provide advanced technical support and serve as an escalation point for IAM-related issues.
• Own the lifecycle management of IAM services, including maintenance, upgrades, backups, monitoring, imaging, and patching.
• Partner with business stakeholders to adapt IAM controls and policies in alignment with evolving business processes while ensuring a seamless end-user experience.
• Develop and maintain documentation, operational procedures, and runbooks to ensure service sustainability and operational readiness.
• Deliver new IAM services and features in support of evolving business and security requirements.
• Oversee access reviews, RBAC implementations, and identity lifecycle management processes to maintain compliance and governance standards.
• Identify and implement automation opportunities to improve efficiency, reduce manual processes, and strengthen security posture.
• Lead problem management efforts by conducting root cause analysis, resolving recurring issues, and improving overall platform reliability and user experience.
• Participate in a scheduled on-call rotation to provide 24/7 support for production systems.
• We are primarily an in-office environment and therefore, you will be expected to work from the Prague office in compliance with Everpure's policies, unless you are on PTO, or work travel, or other approved leave.

WHAT YOU BRING

• 3-5+ years of experience supporting enterprise IAM platforms (Okta, PAM solutions, IGA tools, Vault, PKI systems, etc.).
• Proven ability to define, govern, and report on SLAs, SLOs, OLAs, and KPIs to ensure service performance, reliability, and customer satisfaction.
• Familiarity with leading incident and problem management efforts, conducting root cause analysis (RCA), and implementing corrective and preventive actions to strengthen service resilience.
• Experience participating in structured change governance processes, risk assessment, and release oversight.
• Hands-on experience with observability, logging, and monitoring tools (e.g., Splunk, Prometheus, Datadog, etc.).
• Strong understanding of identity lifecycle management, RBAC, and access governance principles.
• Nice to have experience in Infrastructure as Code and automated configuration management using tools like Terraform and/or Ansible.
• Technical experience with scripting and automation (e.g., Python, PowerShell, Bash, Tines) to improve operational efficiency and streamline IAM services.
• Experience driving service reviews, performance reporting, and stakeholder communications across technical and business audiences.
• Strong documentation and governance experience, including maintaining service catalogs, service charters, SOPs, and operational runbooks.

#LI-ONSITE

THE ROLE

We are looking for a Lead Technical Support Engineer to guide our support operations. In this "player-coach" role, you will be responsible for the daily leading of the support team—managing ticket triage, overseeing SLAs, and mentoring engineers—while remaining hands-on with our most complex technical challenges.

You will act as the technical anchor for the team, troubleshooting intricate issues across Kubernetes, Linux, and Cloud environments, and serving as the primary point of escalation for critical customer incidents.

WHAT YOU'LL DO

Daily Team Leadership & Operations:

• Workflow Management: Oversee the daily support queue, prioritising tickets, assigning tasks based on technical expertise, and ensuring workload balance across the team.
• SLA Monitoring: Ensure the team meets response and resolution times (SLAs) and manage handovers between shifts/regions.
• Mentorship: Provide technical guidance and code reviews (scripts/configs) to junior support engineers.
• Escalation Point: Act as the first point of internal escalation for stalled tickets or frustrated customers before they reach Engineering.
• Process Improvement: Identify gaps in support workflows and refine "follow-the-sun" procedures, ensuring the knowledge base and runbooks are up to date

Advanced Technical Troubleshooting:

• Deep Dive Analysis: Perform root-cause analysis on logs, traces, and dumps for the platform deployed in complex VPC, private cloud, and physical data center environments.
• Infrastructure Support: Troubleshoot connectivity issues across firewalls, hybrid cloud setups, and Kubernetes clusters.
• Engineering Liaison: Collaborate closely with Engineering and DevOps to reproduce bugs, test hotfixes, and advocate for product reliability improvements.
• We are primarily an in-office environment and therefore, you will be expected to work from the Prague office in compliance with Everpure's policies, unless you are on PTO, or work travel, or other approved leave.

WHAT YOU BRING

• Experience:
• 5+ years of experience in Technical Support or DevOps.
• Proven experience (1+ years) in a Lead, Senior, or Mentor role with experience managing queues or guiding other engineers.
• Technical Expertise:
• Kubernetes: Advanced hands-on administration and troubleshooting (required).
• Linux: Administrator-level knowledge (system internals, networking, storage).
• Scripting: Proficiency in Bash and Python for automation and log analysis.
• Databases: Experience querying and troubleshooting MongoDB and PostgreSQL.
• Soft Skills:
• Strong capability to maintain focus on high-visibility issues while communicating clearly to stakeholders and management.
• Ability to de-escalate critical situations with customers.
• Fluent in English (Spanish or Portuguese is a plus).

#LI-ONSITE

The mission of Speechify is to make sure that reading is never a barrier to learning.

Over 50 million people use Speechify’s text-to-speech products to turn whatever they’re reading – PDFs, books, Google Docs, news articles, websites – into audio, so they can read faster, read more, and remember more. Speechify’s text-to-speech reading products include its iOS app, Android App, Mac App, Chrome Extension, and Web App. Google recently named Speechify the Chrome Extension of the Year and Apple named Speechify its 2025 Design Award winner for Inclusivity.  

Today, nearly 200 people around the globe work on Speechify in a 100% distributed setting – Speechify has no office. These include frontend and backend engineers, AI research scientists, and others from Amazon, Microsoft, and Google, leading PhD programs like Stanford, high growth startups like Stripe, Vercel, Bolt, and many founders of their own companies.

Overview

We're looking to hire for our Data side of our AI team at Speechify. This role is responsible for all aspects of data collection to support our model training operations. We are able to build high-quality datasets at petabyte-scale and low cost through a tight integration of infrastructure, engineering, and research work. We are looking for a skilled Software Engineer to join us.

What You’ll Do

• Be scrappy to find new sources of audio data and bring it into our ingestion pipeline
• Operate and extend the cloud infrastructure for our ingestion pipeline, currently running on GCP and managed with Terraform.
• Collaborate closely with our Scientists to shift the cost/throughput/quality frontier, delivering richer data at bigger scale and lower cost to power our next-generation models.
• Collaborate with others on the AI Team and Speechify Leadership to craft the AI Team’s dataset roadmap to power Speechify’s next-generation consumer and enterprise products.

An Ideal Candidate Should Have

• BS/MS/PhD in Computer Science or a related field.
• 5+ years of industry experience in software development.
• Proficiency with bash/Python scripting in Linux environments
• Proficiency in Docker and Infrastructure-as-Code concepts and professional experience with at least one major Cloud Provider (we use GCP)
• Experience with web crawlers, large-scale data processing workflows is a plus
• Ability to handle multiple tasks and adapt to changing priorities.
• Strong communication skills, both written and verbal.

What we offer

• A fast-growing environment where you can help shape the company and product.
• An entrepreneurial-minded team that supports risk, intuition, and hustle.
• A hands-off management approach so you can focus and do your best work.
• An opportunity to make a big impact in a transformative industry.
• Competitive salaries, a friendly and laid-back atmosphere, and a commitment to building a great asynchronous culture.
• Opportunity to work on a life-changing product that millions of people use.
• Build products that directly impact and support people with learning differences like dyslexia, ADD, low vision, concussions, autism, and more.
• Work in one of the fastest-growing sectors of tech, the intersection of artificial intelligence and audio.

Think you’re a good fit for this job? 

Tell us more about yourself and why you're interested in the role when you apply.
And don’t forget to include links to your portfolio and LinkedIn.

Not looking but know someone who would make a great fit? 

Refer them! 

Speechify is committed to a diverse and inclusive workplace. 

Speechify does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

About the Role

We are the leader in Kubernetes Backup and Disaster Recovery. Veeam Kasten, our data management platform purpose-built for Kubernetes, provides enterprise operations teams with an easy-to-use, scalable, and secure system for backup and restore, disaster recovery, and application mobility with unparalleled operational simplicity. We are constantly optimizing and extending the functionality of our Kubernetes offerings to meet the needs of our customers. We are now further integrating our tools with SaaS services and building up support for virtual machines hosted in Kubernetes. 

We are looking for a Senior Software Developer to contribute to our Veeam Kasten data management platform, ensuring top-tier security and excellence. 

What You’ll Do

• Owning (designing, developing in Go, and testing) significant features in the Veeam Kasten product related to backup and recovery of Kubernetes applications, databases, and storage systems
• Integrating Veeam Kasten with other Veeam products and expanding it’s capabilities
• Collaborating with distributed teams across different time zones and regions
• Working with and contributing to the cloud-native open-source community
• Participating in technical design discussions, reviewing code, and providing feedback to other engineers

Technologies we work with

Kubernetes, Helm, Docker, Golang, Bash, Git, OpenShift, Rancher, Google GKE, AWS EKS, Azure AKS, VMware TKG(s), etc. Our team is passionate about code quality, extensibility, coding standards, testing, and automation. 

What You’ll Bring

• 5+ years of experience developing enterprise solutions in a high-level programming language such as C++, Java, or C#, and a willingness to code in Go
• Experience with distributed systems concepts and client-server architectures
• Expertise in developing, testing, and debugging production-quality, scalable, multi-threaded, and concurrent systems
• Strong knowledge of computer science fundamentals (data structures, algorithms, and concurrency)
• Strong sense of ownership, delivering work end-to-end, aligning with stakeholders, maintaining high level of quality and following up with the delivered solutions in production
• A university degree in a technical field or equivalent industry experience

Bonus Skills

• Experience developing in Go
• Experience developing for and on containers, container scheduler, and orchestration platforms
• Experience developing complex systems with AI coding agent tools at scale
• Active contribution to OSS projects in the Kubernetes/Cloud-Native ecosystem
• Participation in CNCF Technical Advisory Groups (TAGs) or Kubernetes Special Interest Groups (SIGs)

What You’ll Get 

• 25 vacation days, 4 sick days, 21 paid medical leave days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares
• Premium private medical insurance for employees and dependents
• Daily meal vouchers for restaurants and groceries (180 CZK per working day)
• Flexible cafeteria platform with thousands of lifestyle benefit options
• Multisport Card for gym and wellness, with family add-on options
• Annual public transport reimbursement up to a set limit
• Corporate mobile plan with optional family tariff
• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops and learning events like our annual Global Day of Learning

#LI-TK1

Token Factory is a part of  Nebius Cloud, one of the world’s largest GPU clouds, running tens of thousands of GPUs. We are building an inference platform that makes every kind of foundation model — text, vision, audio, and emerging multimodal architectures — fast, reliable, and effortless to deploy at massive scale. To deliver on that promise, we need an engineer who can make the platform behave flawlessly under extreme load and recover gracefully when the unexpected happens.

In this role you will own the reliability, performance, and observability of the entire inference stack. Your day starts with designing and refining telemetry pipelines — metrics, logs, and traces that turn hundreds of terabytes of signal into clear, actionable insight. From there you might tune Kubernetes autoscalers to squeeze more efficiency out of GPUs, craft Terraform modules that bake resilience into every new cluster, or harden our request-routing and retry logic so even transient failures go unnoticed by users. When incidents do arise, you’ll rely on the automation and runbooks you helped create to detect, isolate, and remediate problems in minutes, then drive the post-mortem culture that prevents recurrence. All of this effort points toward a single goal: scaling the platform smoothly while hitting aggressive cost and reliability targets.

Success in the role calls for deep fluency with Kubernetes, Prometheus, Grafana, Terraform, and the craft of infrastructure-as-code. You script comfortably in Python or Bash, understand the nuances of alert design and SLOs for high-throughput APIs, and have spent enough time in production to know how distributed back-ends fail in the real world. Experience shepherding GPU-heavy workloads — whether with vLLM, Triton, Ray, or another accelerator stack — will serve you well, as will a background in MLOps or model-hosting platforms. Above all, you care about building self-healing systems, thrive on debugging performance from kernel to application layer, and enjoy collaborating with software engineers to turn reliability into a feature users never have to think about.

If the idea of safeguarding the infrastructure that powers tomorrow’s multimodal AI energizes you, we’d love to hear your story.

At JetBrains, code is our passion. Since 2000, we’ve focused on helping developers work faster by automating routine checks and fixes.  Our tools are used by over 12.5 million people worldwide, including eighty-eight Fortune Global 100 companies.

We are seeking a detail-oriented IAM Security Specialist to lead the integration, support, and governance of our identity ecosystem. You will be the bridge between technical implementation and security compliance, ensuring that every identity, whether human or machine, has exactly the permissions it needs and nothing more. Your focus will be on building scalable RBAC models and maintaining a rigorous access review cycle.

Key responsibilities

System integration and support:

• Lead the technical integration of new applications and services into our centralized IAM platform.
• Provide expert support for complex authentication/authorization issues and serve as a technical escalation point.
• Maintain and optimize IAM infrastructure, including SSO (SAML, OAuth 2.0, OIDC), MFA, and PAM solutions.

Access governance and permission reviews:

• Execute and oversee periodic access re-certifications, ensuring compliance across periodic audit cycles (SOC 2).
• Conduct detailed permission reviews for individuals and system integrations to enforce the Principle of Least Privilege (PoLP).

RBAC and ABAC modeling:

• Design, document, and implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks across a wide range of systems.
• Partner with cross-functional teams (IT, Product, HR) to define business roles and translate them into technical entitlements.

Required skills and experience

• 3+ years of professional experience focused on Identity and Access Management (IAM) engineering or architecture.
• Proven experience administering enterprise IAM solutions and integrating them with diverse systems (e.g., Okta, Auth0, Ping Identity, Microsoft Entra ID).
• Scripting and automation skills using a scripting language such as Python, Go, Bash, or PowerShell.
• Familiarity with cloud IAM solutions (e.g., AWS IAM, GCP IAM).
• Solid understanding of networking, security protocols, and SSO technologies and standards, including SAML, OAuth 2.0, and OIDC.

Preferred qualifications

• Experience in the software development industry, particularly with managing access to source code repositories (Git/GitHub/GitLab) and CI/CD tools (TeamCity, GitLab CI).
• Hands-on experience with Privileged Access Management (PAM) concepts and tools.
• Knowledge of Zero Trust Architecture (ZTA) principles and how to apply them to developer workflows.
• Security certifications (e.g., CISSP, CISA, relevant vendor certifications).
• Familiarity with compliance frameworks relevant to software vendors (SOC 2).
  
  

Why join JetBrains?

JetBrains provides a highly technical and intellectually stimulating environment. You'll work on identity and access management systems used by millions of developers, with the opportunity to work with cutting-edge technologies every day. Help us keep our tools and systems secure. 
We offer:

• Strong base salary. We offer competitive pay that reflects your skills and experience.
• Flexible work location. Enjoy the freedom to work from home or from the office.
• Remote work. Spend up to 30 days per year working remotely from abroad.
• Extra time off. More days to relax, recharge, and do the things you love.
• Medical insurance allowance. Enjoy peace of mind for you and your family.
• Learning and development opportunities. Access to conferences, courses, and language classes.
• Relocation support. We help make your move as smooth and stress-free as possible.
• Language classes. Pick up the local language or sharpen your English skills.
• Fuel your day. Enjoy a hot meal or receive a lunch allowance on workdays.
• Mental health support. To help you feel your best, we provide easy access to professional mental health services.
• Sports benefit. Enjoy an on-site gym or sports club stipend.
• Internal events. Join company-wide celebrations and team gatherings.

*Some benefits may vary depending on location.
#LI-DNI