Staff Security Infrastructure Engineer, Red Team

Within the Product Security team, our Red Team delivers robust security assurance for Okta's products, services, and infrastructure.  You will be the team's dedicated infrastructure and tooling engineer, the first person in this role for a small team of operators. You will work alongside operators but not report through an operator chain; you'll collaborate as a peer focused on a different discipline.

We seek a Staff Security Infrastructure Engineer to own the engineering backbone that enables our operations. This is not a traditional operator role but a dedicated infrastructure, tooling, and automation engineering position embedded within the Red Team.  You will design, build, maintain, and continuously improve the platforms, infrastructure, and custom tooling that our operators depend on to execute engagements.

Your work directly enables the team to operate at a higher maturity level: faster infrastructure deployment, more resilient and OPSEC-aware architecture, automated workflows, and reliable custom tooling, freeing operators to focus on the mission.  Your role will also extend to cultivating stakeholder collaboration and elevating our company’s security posture through strategic engagement and proactive measures.  As the team matures, this role can evolve toward platform leadership, custom capability development, or a hybrid operator/engineer path.

What You Will Do

• Infrastructure Engineering & Automation:
• Own the full lifecycle of red team infrastructure: design, provisioning, configuration, maintenance, and teardown
• Build and maintain Infrastructure-as-Code (IaC) using Terraform (or equivalent) to automate deployment of C2 servers, redirectors, phishing infrastructure, payload-delivery systems, and supporting services.
• Resource and asset lifecycle management through tracking domains, certificates, cloud accounts, recurring expenses, and infrastructure resources; managing acquisition, rotation, and retirement.
• Tooling Development & Maintenance:
• Develop, maintain, and improve custom tools, scripts, and automation to support red team operations (e.g., payload generation pipelines, log aggregation, C2 profile management, infrastructure health checks), providing on-demand infrastructure/tooling support when issues or gaps arise.
• Collaborate closely with operators during engagement planning to understand infrastructure requirements, OPSEC constraints, and operational timelines.
• Building and maintaining a representative test environment for pre-operation validation of tools and tradecraft against a security stack similar to the target.
• Maintaining the team's source code repository with merge/pull request processes, documentation, and code quality standards.
• Ensuring engagement evidence, infrastructure logs, and operational data are centrally collected and accessible for reporting and after-action reviews.
• Contribute to and maintain metrics that demonstrate infrastructure maturity, operational efficiency, and readiness (e.g., deployment time, rebuild time, infrastructure availability during engagements).
• Security & OPSEC:
• Design infrastructure with OPSEC as a first-class requirement: network segmentation, traffic separation between operations, credential management, and access controls 
• Implement and manage secure access to red team infrastructure
• Create and update operational runbooks, infrastructure documentation, and SOPs for the team.
• Maintain clear records of infrastructure ownership and attribution to support deconfliction processes.

What You Bring

Required

• 8+ years of professional experience in infrastructure engineering, DevOps, platform engineering, or a similar role with significant automation responsibilities
• Strong familiarity with Terraform (or equivalent IaC tooling) for multi-cloud infrastructure provisioning and management
• Experience operating in cloud-native, SaaS, or identity-focused environments
• Strong proficiency with configuration management tools (Ansible, or equivalent)
• Proficiency in at least one systems programming or scripting language (Python, Go, Bash) with disciplined development practices (version control, code review, testing, documentation)
• Solid understanding of Linux systems administration, networking fundamentals (DNS, HTTP/S, TCP/IP, proxying, TLS), and cloud platforms (AWS, GCP, or Azure)
• Understanding of OPSEC principles as they apply to offensive infrastructure — you know why redirector chains, domain categorization, traffic separation, and certificate management matter.

Strongly Preferred

• Experience building and maintaining CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, or similar)
• Familiarity with containerization and orchestration (Docker, Kubernetes) as applicable to tooling and lab environments
• Familiarity with C2 frameworks (Cobalt Strike, Mythic, Sliver, or similar) from an infrastructure and deployment perspective — you don't need to operate them, but you need to understand what operators need from the infrastructure
• Familiarity with detection evasion concepts as they relate to infrastructure (e.g., traffic shaping, hosting provider reputation, certificate transparency)

Nice to Have

• Working knowledge of Blue Team operations and related technologies
• Experience with security tool development (implant development, payload engineering, evasion tooling) — this role can grow in that direction
• Familiarity with Red Team maturity models and how infrastructure/tooling capabilities map to organizational maturity 

Note: This is not an operator role. You will not be the person running hands-on-keyboard engagements as your primary function. While you may participate in operations to understand requirements or provide support, your core mission is ensuring the team's infrastructure, workflows, tooling, and automation are reliable, repeatable, and mature. You are the engineering foundation the operators build on.

#LI-TM

#LI-Hybrid

(P22302_3403905)

 Who you’ll be working with

You’ll join our fast-moving engineering team where ownership is key. You will collaborate closely with engineering leads, developers, product management, and QA while independently driving infrastructure, deployment, and system reliability initiatives.

You will be expected to take end-to-end responsibility for DevOps processes and execute effectively with minimal guidance in a high-impact environment.

What you’ll be doing

• Design, implement, and manage end-to-end CI/CD pipelines
• Build and maintain Infrastructure as Code (Terraform preferred)
• Execute and manage services in multi-cloud environments (min. 2: AWS / Azure / GCP)
• Containerize applications using Docker and orchestrate with Kubernetes
• Configure and optimize CDN, networking, and edge delivery (CloudFront, Cloudflare, etc.)
• Implement observability, logging, and monitoring systems (Prometheus, Grafana, ELK, etc.)
• Ensure security best practices (DevSecOps) across infrastructure and pipelines
• Troubleshoot production issues and drive root cause analysis independently
• Optimize systems for performance, scalability, and cost efficiency
• Automate manual processes and improve engineering productivity

What you’ll need to be successful (Requirements)

Must have skills:

• 5+ years of experience in DevOps / Platform Engineering
• 3+ years of strong hands-on experience with at least 2 cloud platforms (AWS, Azure, GCP)
• Proven experience with Terraform / Infrastructure as Code
• Deep expertise in Docker & Kubernetes
• Strong experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI)
• Solid understanding of networking, CDN, DNS, and load balancing
• Experience with monitoring & observability tools (Prometheus, Grafana, ELK, Datadog, etc.)
• Strong scripting skills (Python / Bash preferred)
• Strong understanding of security best practices (IAM, secrets, access control)
• Experience with Linux systems and production debugging

Nice to have skills:

• Relevant cloud certifications (AWS Certified Solutions Architect, Azure Administrator, Google Cloud Engineer, etc.)
• Certifications or exposure to Kubernetes (CKA/CKAD) or Terraform (HashiCorp Certified)
• Experience working in Agile environments (Scrum / Kanban)
• Experience with cost optimization practices and compliance standards (e.g., SOC 2)

Need another reason to hit the “apply” button?

• A global agency with over 200 employees, and offices in the US, UK, India and Canada. 
• A fun, diverse group of professionals that know how to have a good time on and off the job. We regularly host happy hours, dinners, excursions, and other company events to unwind after a hard day at work.  
• Offer Medical, Dental/Vision, and many more insurance types! 
• Paid Government Holidays
• An office in the heart of downtown Toronto.  
• Working hybrid for in-person collaboration and sprint-planning days

Compensation:
         $120,000-$140,000 CAD

We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

Who you are:

We are always looking for amazing talent who can contribute to our growth and deliver results! Geotab is seeking a Product Manager who will lead fuel resource management solutions, which are critical for reducing operational costs for our fleets. If you love technology, and are keen to join an industry leader — we would love to hear from you!

What you'll do:

As a Product Manager, your key area of responsibility will be managing the end-to-end user experience for Optimization and Efficiency Solutions, specifically focusing on Fuel Transactions, Fill-ups, and IFTA reporting. You will need to work closely with Product Marketing, Solutions Delivery, Software and Embedded Development, and Data Science teams to solution and advocate for resources. To be successful in this role, you will be a strategic self-starter with empathy for customer pain points and the ability to grasp complex technical concepts quickly. In addition, the successful candidate will have strong analytical skills to conduct product discovery, leverage data for story building, and manage projects from start to finish within the technical product development space.

How you'll make an impact:

• Product research / discovery with customers, leverage internal folks' for product feedback and access to customers.

• Deep technical, market, policy understanding for fleet operations, especially around fuel tax, EV charging, and general energy resource optimization (reduction) strategies.

• Responsible for improving the user experience on: Fuel Transactions, Fill-ups, IFTA Reporting, and Driver Logbook Suite.

• Work with Product Marketing, Solutions Delivery, and all adjacent technical teams from start to finish.

• Advocate for resources and prioritization when needed to deliver customer and business needs.

• Leverage research and existing product architecture to solution along with Data Science, Software, Firmware, etc. 

• Maintain existing product suite and adopt customer feedback.

What you'll bring to the role:

• 3-5 years of professional experience in technical product development, stakeholder management, or enterprise sales.

• Experience in Product Management, Project Management, or Software Development is highly valued. 

• Proficiency in AI tools (Claude, Gemini, Codex) for data exploration, story building, and code development. 

• Technical proficiency in Jira, Salesforce, and Google Suite; experience with BigQuery and GitLab is an asset. 

• Familiarity with IoT, SaaS, or Telematics industries (Automotive, Trucking, OEM, or Telco) is a plus. 

• Ability to travel up to 25% of the time (approximately 6 weeks per year). 

• Bachelor’s degree in a related field or equivalent professional experience.

Why job seekers choose Geotab:

Who you are:

We are always looking for amazing talent who can contribute to our growth and deliver results! Geotab is seeking an AI Agent Developer who will design, build, and maintain AI-powered "skills" — modular, executable agents that integrate with enterprise systems and surface through a shared internal agent platform. If you love technology, and are keen to join an industry leader — we would love to hear from you!

What you'll do:

As an AI Agent Developer, your key area of responsibility will be contributing to both the core platform and the growing ecosystem of agents deployed across the organization, and playing a meaningful role in shaping the standards and practices that enable other teams to build their own agents. You will need to work closely with business units to identify high-value automation opportunities, as well as collaborate with security, compliance, and data governance teams to ensure agents operate within established guardrails.

To be successful in this role you will be a self-directed communicator who is comfortable operating with autonomy in a fast-moving, platform-oriented environment and able to explain agent capabilities to both technical and non-technical stakeholders. In addition, the successful candidate will have sound software engineering fundamentals with the ability to scope ambiguous problems, ship iteratively, and balance quality with delivery speed to ensure timely results.

How you'll make an impact:

• Design and build production AI agent skills in Go (and Python where appropriate), following established skill architecture patterns and platform conventions.
• Integrate agents with enterprise systems including data warehouses, ticketing systems, source control, observability platforms, and internal APIs.
• Contribute to the core agent platform: runtime management, skill lifecycle, credential handling, multi-model AI support, and build tooling.
• Define and enforce best practices for skill development, packaging, distribution, and CI/CD — and help other teams adopt them.
• Partner with business units to identify high-value automation opportunities and translate them into well-scoped, production-ready agent solutions.
• Maintain the skill ecosystem: versioning, dependency management, cross-platform compilation, and runtime distribution.
• Build tooling and documentation that empowers other developers to contribute skills and reduce the burden on the core team.
• Monitor deployed agents, gather user feedback, instrument performance, and drive continuous improvement cycles.
• Collaborate with security, compliance, and data governance teams to ensure agents operate within established guardrails.
• Stay current with LLM capabilities, prompt engineering advances, agentic frameworks, and relevant open-source tooling — and evaluate their applicability to the platform.
• Contribute to the internal AI agent developer community through knowledge sharing, workshops, and direct guidance to other teams.

What you'll bring to this role:

• Bachelor's degree in Computer Science, Software Engineering, or a related technical field.
• 4+ years of software engineering experience; hands-on experience in Go is strongly preferred, with Python as a secondary language.
• Demonstrated experience building and deploying AI-driven applications, automations, or agents, including experience with LLM APIs (Claude, Gemini, GPT, or similar).
• Solid understanding of CLI tooling, binary distribution, and cross-platform build systems.
• Experience with enterprise system integration via REST APIs (Jira, GitLab, BigQuery, Salesforce, etc.).
• Familiarity with agentic patterns: tool use, multi-step reasoning, context management, prompt engineering, and output validation
• Strong communication skills with a genuine enthusiasm for AI and its practical application to real business problems.

Why job seekers choose Geotab:

About the Role:

Rumble Cloud is seeking a Kubernetes Engineer to support our team in rolling out and operating our next-generation Kubernetes platform. This role will focus on our new CAPI/CAPO-based Kubernetes solution, which is designed to be compatible with our existing OpenStack Magnum API and will be deployed across our public cloud. You will help run the day-to-day operations of the Kubernetes service, assist with migrations and onboarding from our current Magnum-based offering, and act as an escalation point for complex customer issues that go beyond front-line support. This is a hands-on engineering role for someone who enjoys debugging difficult problems, improving reliability, and working closely with both platform engineers and customer-facing teams.

Key Responsibilities:

• Operate and maintain Rumble Cloud’s Kubernetes platform, including our new CAPI/CAPO-based installation and its integration with the OpenStack Magnum API.
• Assist in the rollout, migration, and upgrade processes as customers transition from the existing Magnum-based solution to the new platform.
• Serve as an escalation point for customer support, troubleshooting complex Kubernetes and cluster lifecycle issues.
• Monitor the health, performance, and capacity of Kubernetes clusters and underlying infrastructure; assist in incident response and root cause analysis.
• Implement and maintain day-2 operations processes, including backup/restore, scaling, patching, and cluster upgrades.
• Collaborate with the Kubernetes Architect to implement standards, best practices, and reference patterns for cluster configuration and operations.
• Help manage and integrate container registries, identity, networking, and storage components required for the Kubernetes platform.
• Automate repetitive operational tasks using scripting and infrastructure-as-code tools.
• Contribute to and maintain runbooks, documentation, and knowledge base articles for both internal teams and customer-facing support.
• Provide feedback from operations and customer interactions to influence platform improvements and product roadmap.

Required Skills & Experience:

• Extensive experience in Linux systems engineering, cloud engineering, or platform/SRE roles, including hands-on work with Kubernetes in production environments.
• Practical experience with installing, operating, and troubleshooting Kubernetes in production environments.
• Experience working with Kubernetes on OpenStack or other cloud providers.
• Familiarity with Cluster API (CAPI) and/or Cluster API Provider OpenStack (CAPO), or strong willingness to ramp up quickly.
• Strong understanding of Linux, containers, and container runtimes (e.g., Docker, containerd).
• Experience with Kubernetes networking, storage, and ingress concepts (CNI, CSI, load balancers, ingress controllers).
• Hands-on experience with scripting and automation (e.g., Bash, Python, or Go) for operational tasks.
• Familiarity with configuration management and IaC tools such as Ansible and Terraform.
• Experience with monitoring and logging in Kubernetes environments (e.g., Prometheus, Grafana, ELK/Graylog, or similar).
• Strong troubleshooting skills, clear written documentation, and effective communication with both technical and non-technical stakeholders.

Nice to Have (Preferred Skills):

• Experience with OpenStack Magnum and its Kubernetes integrations.
• Experience operating Kubernetes on other public cloud platforms (EKS, AKS, GKE).
• Knowledge of Ceph, S3-compatible storage, and their use with Kubernetes.
• Understanding of application architectures on Kubernetes, including microservices and 12-factor applications.
• Exposure to CI/CD toolchains (e.g., Git, GitLab/Jenkins, Artifactory, etc.) for containerized workloads.
• Experience with security hardening and best practices for Kubernetes (RBAC, PodSecurity, network policies, image scanning).

Qualifications:

• Demonstrated experience operating production Kubernetes clusters and working as part of a cross-functional cloud/platform team.
• Ability to work effectively under pressure, handle escalations, and maintain a strong customer-focused mindset.
• Passion for continuous learning in Kubernetes, cloud-native tooling, and automation.

Annual Compensation Range: 

Note: The salary range listed for this position is a good faith estimate based on experience, qualifications, and internal compensation structure. The actual salary offered varies depending on the candidate's skill level and experience. This posting refers to an active vacancy within the organization.

Overview

We are looking for an exceptional full-stack software engineer who will act as a Forward Deployed Engineer (FDE) to serve as the critical interface between the central AI Application Modernization Factory and our application teams. The FDE will be temporarily embedded within delivery teams to directly drive the modernization of key applications, ensuring technical success, accelerated adoption of AI-assisted SDLC practices, and lasting upskilling of team members. This is a high-impact, hybrid role requiring advanced software engineering skills, deep knowledge of cloud-native patterns, and proven expertise in consultation, change management, and building strong rapport with diverse teams.

Key Responsibilities

• Application Modernization Execution: Embed with application teams to provide hands-on technical leadership, driving the design, development, and delivery of modernization efforts (re-platforming, microservices adoption) to AWS cloud-native architectures.
• AI-First SDLC Adoption & Upskilling: Act as the subject matter expert on the AI Modernization Factory's tools and processes (e.g., Cursor, Claude Code). Drive the adoption and change management necessary to embed AI-assisted software development practices into the team’s daily workflow.

• Consultative Engineering & Change Management: Build trust and rapport with new, diverse teams quickly. Identify team-specific technical and process bottlenecks, recommending and implementing solutions, and effectively managing the people/process side of technical change.
• Hands-on Software Development: Make significant code contributions, focusing on setting up architectural scaffolding, CI/CD pipelines, IaC (Terraform), and solving complex, blocking integration challenges for the embedded team.
• Feedback Loop: Serve as the primary feedback channel, relaying practical challenges, tool deficiencies, and necessary process adjustments back to the central Principal Engineer and Architect to continuously improve the factory's capabilities.
• Standards & Quality: Ensure embedded teams adhere to the central factory's engineering standards, including Twelve-Factor App principles, DevSecOps practices, and high-quality coding standards.

Required Qualifications & Experience

• Experience: 5+ years of progressive experience in Software Engineering, with a focus on enterprise applications and application modernization.
• Full Stack Proficiency: Strong hands-on experience across the full application stack (front-end, back-end, database, infrastructure). Expert proficiency in one or more modern technology languages (e.g., Python, TypeScript, C#, Java).
• Cloud Native & IaC: Deep practical experience building and deploying scalable applications on AWS. Strong proficiency with Infrastructure-as-Code (IaC), specifically Terraform.
• Consulting & Change Management: Proven ability to onboard rapidly, assess team dynamics and technical landscapes, influence technical direction without formal authority, and drive organizational/process change within established engineering teams.
• DevSecOps & CI/CD: Hands-on mastery of setting up and optimizing CI/CD pipelines (GitHub Actions, GitLab CI) and integrating DevSecOps best practices.
• Architectural Understanding: Solid understanding of modern architectural patterns (microservices, serverless, event-driven architecture) and the principles of Domain-Driven Design (DDD).
• Communication & Interpersonal Skills: Exceptional communication, presentation, and listening skills. Ability to articulate complex technical issues and solutions to both technical and non-technical stakeholders effectively.

Preferred Skills (A Plus)

• Prior experience in a consulting, Staff Engineer, or Forward Deployed role, specifically focused on technical adoption or modernization.
• Direct experience training or mentoring other software engineers in new technologies or methodologies.
• Hands-on experience with modern UI frameworks like React, NextJS, or similar.
• Experience utilizing AI-assisted coding tools (Cursor, Claude Code) in a professional development environment.
• Familiarity with containerization (Docker/Kubernetes) and serverless architectures (AWS Lambda).

Job Location – Remote (USA & Canada)

The expected base salary for this position is: CAD 145000/ USD 170,000 excluding annual bonus (when applicable). Salary is based on a number of factors including market conditions, location and may vary depending on job-related skills and experience.

Position Summary

As a Software Engineer, Dev Productivity, you’ll work at the intersection of software development, automation, and infrastructure. Your mission is to streamline engineering workflows, optimize CI/CD systems, build and testing infrastructure, and enhance developer tooling to accelerate software delivery.

Key Responsibilities

• Design, build, and maintain high-performance CI/CD pipelines to improve development speed and reliability.
• Develop internal tools and automation to reduce friction in engineering workflows.
• Optimize build and test infrastructure for faster feedback loops.
• Work closely with engineering teams to identify and eliminate inefficiencies in the development process.
• Enhance and monitor developer environments to improve developer experience
• Advocate for best practices in software development, version control, and release management.
• Drive the adoption of automation and tooling that increase engineering efficiency.

Key Qualifications

• Strong experience with CI/CD tools like GitHub Actions, Jenkins, GitLab CI, Buildkite, or CircleCI.
• Experience with build systems (e.g., Bazel, CMake, Make, Gradle).
• Experience with python dependency management (e.g. poetry, uv)
• Knowledge of containerization and Kubernetes for scalable builds and testing.
• Strong problem-solving skills and a passion for improving developer experience.
• Proficiency in scripting and automation with Python, Bash, or Go.
• Excellent communication skills and ability to work across teams.

Preferred Qualifications

• Experience with docker image build optimization
• Experience with bazel
• Experience with GPUs

What HeyGen Offers

• Competitive salary and benefits package.
• Dynamic and inclusive work environment.
• Opportunities for professional growth and advancement.
• Collaborative culture that values innovation and creativity.
• Access to the latest technologies and tools.

Salary Range
$180,000 – 240,000 annually
Please note that the salary information is a general guideline only.  HeyGen considers factors such as scope and responsibilities of the position, candidate's work experience, education/training, key skills, and internal equity, as well as location, market and business considerations when extending an offer.  As part of our total rewards package, HeyGen offers comprehensive benefits including a 401k plan, health benefits, generous PTO, a parental leave program and emotional health resources.

HeyGen is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.