<div>Fingerprint empowers developers to stop online fraud at the source. We work on turning radical new ideas in the fraud detection space into reality. Our products are developer-focused and our clients range from solo developers to publicly traded companies. We are a globally dispersed, 100% remote company with a strong open-source focus. Our flagship open-source project is <a href="https://github.com/fingerprintjs/fingerprintjs" target="_blank">FingerprintJS</a> (20K stars on GitHub). <a href="https://www.crunchbase.com/organization/fingerprintjs" target="_blank">We have raised $77M </a>and are backed by Craft Ventures (previously invested in <a href="https://www.tesla.com/" target="_blank">Tesla, </a><a href="https://facebook.com/" target="_blank">Facebook, </a><a href="https://www.airbnb.com/" target="_blank">Airbnb </a>), Nexus Venture Partners (previously invested in <a href="https://www.postman.com/">Postman</a>, <a href="https://www.apollo.io/">Apollo.io,</a> <a href="https://min.io/">MinIO</a>, Druva) and Uncorrelated Ventures (previously invested in <a href="https://redis.io/" target="_blank">Redis, </a><a href="https://rollbar.com/" target="_blank">Rollbar </a>&amp;<a href="https://gradle.org/" target="_blank"> Gradle</a>). We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates personal and financial information through fake interviews and offers. All Fingerprint recruiting email communications will always come from the @fingerprint.com domain. Any outreach claiming to be from Fingerprint via other sources should be ignored.   <hr />      </div>We’re looking for a Staff Cloud Infrastructure Engineer to design, build, and operate scalable, secure, and highly available cloud platforms on AWS. You’ll own Infrastructure-as-Code (Terraform), container orchestration (EKS), GitHub-based workflows (Actions + source control), GitOps (Argo/Argo CD), and end-to-end CI/CD strategies with strong observability. What You’ll Do <ul> <li>Architect and deliver AWS infrastructure using Terraform (modular, reusable, versioned IaC) across multiple accounts and environments</li> <li>Design, deploy, and harden EKS clusters (networking, autoscaling, security, ingress, service mesh optional) and standardize app deployment patterns</li> <li>Implement GitOps with Argo/Argo CD (ApplicationSets, sync policies, RBAC, SSO, secrets management, progressive delivery)</li> <li>Build CI/CD pipelines with GitHub Actions (reusable workflows, artifact strategy, rollouts/rollbacks, automated quality gates)</li> <li>Define SLI/SLOs and enable observability with metrics, logs, traces, alerting, and runbooks using best-in-class tools</li> <li>Drive platform reliability and security: patching, upgrades, backups, disaster recovery, IAM least privilege, secrets, and compliance guardrails</li> <li>Optimize performance and cost: autoscaling, right-sizing, spot/on-demand strategies, efficiency dashboards</li> <li>Partner with developers to create golden paths, templates, and documentation that accelerate safe delivery</li> <li>Participate in on-call, lead incident RCAs, and drive improvements through code and process changes</li> </ul> Required Experience <ul> <li>10-15 years of experience building and operating production cloud infrastructure (preferably AWS)</li> <li>Strong Terraform expertise: modules, workspaces, state management, CI validation (fmt/validate/tflint), policy as code (Sentinel/OPA)</li> <li>GitHub &amp; GitHub Actions: branch protection, environments, reusable workflows, OIDC to AWS, secrets/variables, caching, matrices</li> <li>AWS services: VPC, IAM, EKS, ALB/NLB, EC2/EKS node groups, ECR, RDS/ElastiCache, S3, CloudWatch/CloudTrail, KMS, Secrets Manager</li> <li>EKS &amp; container orchestration: Helm/Kustomize, rollout strategies, cluster autoscaler, networking (CNI/ingress), HPA/PDBs</li> <li>Argo &amp; Argo CD: Applications &amp; ApplicationSets, sync/health checks, drift detection, RBAC, SSO</li> <li>Observability tools: metrics/logs/traces (Prometheus/Grafana, OpenTelemetry, Datadog, New Relic, Honeycomb, CloudWatch, ELK/OpenSearch)</li> <li>CI/CD strategies: trunk-based, quality gates (tests, SAST/DAST, IaC scans), artifact/versioning, environment promotions, canary/blue-green</li> <li>Strong scripting (Bash/Python), configuration tooling (Helm/Kustomize), solid Linux and networking fundamentals</li> <li>Clear communicator with a bias for automation, documentation, and collaborative problem-solving</li> </ul> Nice to Have <ul> <li>Service Mesh (Istio/Linkerd), progressive delivery (Argo Rollouts/Flagger)</li> <li>Security tooling (Snyk, Trivy, AWS Security Hub, IAM Access Analyzer)</li> <li>Data plane experience (Kafka/MSK, Redis/ElastiCache, RDS/Aurora operations)</li> <li>Cost management/FinOps exposure for Kubernetes and AWS</li> </ul> For US-based employees, the cash compensation range for this role is $190,000-$220,000. We set standard ranges for all US roles based on function, level, and geographic location, benchmarked against similar stage growth companies. To comply with local legislation and provide greater transparency to candidates, we share salary ranges on all job postings regardless of desired hiring location. However, these ranges are specific to the hiring location and may differ within or outside the US. Final offer amounts are determined by multiple factors, including geographic location as well as candidate experience and expertise, and may vary from the amounts listed above.<div>We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates personal and financial information through fake interviews and offers. All Fingerprint recruiting email communications will always come from the @fingerprint.com domain. Any outreach claiming to be from Fingerprint via other sources should be ignored. Offers vary depending on, but not limited to, relevant experience, education, certifications/licenses, skills, training, and market conditions.  Due to regulatory and security reasons, there’s a small number of countries where we cannot have Fingerprint teammates based. Additionally, because Fingerprint is an all-remote company and people can join our workforce from almost any country, we do not sponsor visas. Fingerprint teammates need to be authorized to work from their home location. We are dedicated to creating an inclusive work environment for everyone. We embrace and celebrate the unique experiences, perspectives and cultural backgrounds that each employee brings to our workplace. Fingerprint strives to foster an environment where our employees feel respected, valued and empowered, and our team members are at the forefront in helping us promote and sustain an inclusive workplace. We highly encourage people from underrepresented groups in tech to apply. If you are applying as a resident of California, please read our CCPA notice <a href="https://dev.fingerprint.com/docs/dpa-ccpa" target="_blank">here</a> If you are applying as a resident of the EU, please read our GDPR notice <a href="https://dev.fingerprint.com/docs/dpa-gdpr" target="_blank">here</a></div>

Fingerprint

Similar Remote Jobs