Web3 DevSecOps Engineer

Isn’t it weird how much good old centralized tech it takes to deliver a new decentralized one? CI runners in Kubernetes clusters, release repos in cloud storage, a whole bunch of sophisticated tooling interacting with 400+ Github repos, and several dozen of bare metal servers for needs like benchmarking. And to make things even funnier, we’re a principled FOSS shop, so even some of our infrastructure and tooling repos are available to the public eye. Now, we have an amazing Infrastructure Engineering team we couldn’t be happier with — not only do they manage to keep all that up with sometimes unreasonable uptimes, but also have enough capacity to stay up to date with our tech, practices, and approaches. But at a certain scale of engineering, keeping a holistic security picture in mind and acting on it becomes a full-time job. And this is where you’re coming in. Key functions and responsibilities Advising Infra Engineering on security topics and supervising their work (and infrastructure-as-a-code codebases) from the security standpoint — maintaining things practical using some form of a risk-based approach. Organizing and performing penetration testing of our infrastructure, and collaborating with external parties on those tests. Picking tools, methods, and approaches to maintain and improve the security stance of the company. (And we have a strong preference towards FOSS tooling when possible) Writing company-wide security standards and guidelines, as well as tools to enforce those. Partnering with other team members on all matters related to security and infrastructure engineering. Tech you’d be working with Linux and Linux-based tech stack (SSH, VPNs, firewalls, IDS/IPS) Kubernetes, Terraform, Ansible Gitlab, Gitlab CI, ArgoCD Hashicorp Vault Amazon Web Services, Google Cloud, bare-metal hostings Prometheus, Grafana, Loki And of course blockchain tech and associated tooling (wallets, keys, RPC nodes and indexers etc.) Not a perfect match to our requirements? We're happy to receive your application anyways and hear how you think you can help us achieve our mission.