Senior Software Engineer (Infrastructure, SRE & Security Focused)
Posted Updated
- We are looking for a Senior Software Engineer to join our Infrastructure Team, focused on building secure, reliable, and scalable infrastructure for Nimble’s software services, robotics products, embedded systems, and business operations
- You will work across cloud, production, corporate, and robot-facing systems to identify and remediate security, reliability, and operational risks in designs, implementations, integrations, and processes
- This role is deeply hands-on: you will build secure-by-default platforms, improve observability, automate detection and remediation, strengthen incident response, and help engineering teams operate resilient systems in production
- You will be responsible for the full lifecycle of software development projects, including design, implementation, automated testing, field testing, deployment, monitoring, and production support
- Own and drive the infrastructure roadmap for secure, reliable, and scalable software services, robotics products, embedded systems, cloud infrastructure, and corporate systems
- Act as a primary technical authority on security, infrastructure reliability, availability, compliance, and operational excellence across the organization
- Lead security architecture reviews, reliability reviews, production readiness reviews, code reviews, and technical planning sessions
- Design and implement security controls, reliability patterns, data compliance mechanisms, and guardrails for both our On-Premise and Cloud infrastructure
- Collaborating with engineering teams to mitigate security weaknesses, reliability risks, scalability bottlenecks
- Develop platforms, tools, and automation that improve cloud security posture, system reliability, developer velocity, and operational efficiency
- Mentor engineers and cross-teams on secure design, reliable system architecture, operational ownership, and production engineering practices
- Develop observability via metrics, logs, traces, dashboards, for detection, monitoring, alerting, and remediation systems for vulnerabilities, incidents, regressions, service degradation, misconfigurations, and infrastructure drift
- Define and improve incident response processes, including on-call practices, runbooks, postmortems, severity frameworks, and follow-up tracking
- Drive software engineering best practices across the team by producing high-quality, well-tested, maintainable code and raising the bar in reviews
- Experience conducting security architecture reviews, reliability reviews, or production readiness reviews for custom business applications or infrastructure systems
- Bachelor’s, Master’s, or PhD in Computer Science or a related field, or equivalent practical experience
- Experience designing, deploying, securing, and operating cloud infrastructure and distributed backend systems
- Experience with one or more Infrastructure as Code tools or frameworks such as Terraform, AWS CDK, Pulumi, CloudFormation, or similar
- Excellent written and verbal communication skills, especially when explaining technical tradeoffs, operational risks, and security concerns to cross-functional teams
- Ability to work autonomously, take ownership of ambiguous projects, and collaborate across teams
- Strong proficiency in at least one of the following programming languages: Rust, Go, C++, Python, or TypeScript
- Experience operating production systems, including monitoring, alerting, incident response, debugging, performance analysis, and postmortems
- Experience with distributed authorization, RBAC/ACL systems, encryption-based access, secrets management, or policy engines
- Strong self-learning and continuous improvement mindset
- At least 3 years of professional software engineering, infrastructure engineering, security engineering, or SRE experience
- Solid understanding of modern attack vectors, defensive mitigation strategies, secure software development practices, and cloud security fundamentals
- Experience with Kubernetes, containerized workloads, cloud infrastructure, IAM, secrets management, vulnerability management, and infrastructure hardening
- Experience with AWS, GCP, Azure, or hybrid cloud environments
- Experience with cloud security tooling, CSPM/CWPP platforms, vulnerability scanners, policy-as-code, admission controllers, image signing, or supply-chain security tooling
- Experience building, securing, or operating Kubernetes-based platforms, service meshes, container infrastructure, or deployment platforms
- Experience developing security automation, vulnerability management systems, policy-as-code, or infrastructure compliance tooling
- Experience with observability stacks such as OpenTelemetry, Prometheus/VictoriaMetrics, Grafana, Datadog, or similar
- Experience in the development, implementation, or audit of ISO 27001, SOC 2, or similar compliance programs
- Experience with On-Premise Infrastructure