DevOps Engineer

R&D

Boston, MA

Full-time

Description

We’re looking for a DevOps Engineer to join our growing DevOps team and help build, harden, and scale the infrastructure that powers Reco’s platform. You’ll work alongside fellow DevOps engineers and partner closely with the broader engineering and security teams to build reliable, scalable, and secure cloud systems as well as writing infrastructure as code, maturing our CI/CD pipelines, and driving observability across the stack.

This is a high-ownership role for an engineer who thinks in systems, not tickets, and who's excited to help shape how the team builds and operates infrastructure together. If you care deeply about developer experience, platform reliability, and shipping securely at speed, you’ll fit right in.

Reco does not sponsor employment visas at this time.

Responsibilities

Collaborate with the DevOps team to own and evolve CI/CD pipelines (GitHub Actions, ArgoCD, or similar) that let engineers ship with speed and confidence

Build, manage, and harden cloud infrastructure on AWS and/or GCP using Terraform or Pulumi

Manage Kubernetes clusters (EKS/GKE) in production, deployment strategies, autoscaling, resource optimization, and security hardening

Define and enforce security controls across cloud environments: IAM policies, secrets management (Vault/AWS Secrets Manager), network segmentation, and vulnerability scanning

Implement and maintain observability stacks, metrics, logs, tracing, using Datadog, Prometheus/Grafana, or OpenTelemetry

Participate in incident response and blameless post-mortems alongside the team; help define SLOs and drive reliability improvements

Collaborate with engineers to containerize workloads and optimize service delivery from dev to production

Support compliance and audit readiness (SOC 2, ISO 27001) by building automated controls and evidence collection into the platform

Identify and eliminate toil through thoughtful automation and help the broader team do the same

Handle light IT/Help Desk support for the North America team

Requirements

4+ years of production DevOps, platform engineering, or infrastructure engineering experience in a cloud-native SaaS environment

Proven experience in security engineering, application security, or DevSecOps - you treat security as a first-class engineering concern

Hands-on expertise with Kubernetes (EKS or AKS) and Docker in production, including cluster security and workload isolation

Strong Infrastructure as Code skills using Terraform, Helm and GitOps (ArgoCD)

Deep familiarity with AWS and Azure(optional) - VPCs, IAM,EKS, Lambda, CloudWatch, and equivalent Azure services

Proficiency in Python, Go, or Bash for automation, tooling, and scripting

Strong understanding of API design, authentication protocols (OAuth 2.0, SAML, OIDC), and zero-trust security models

Experience with observability tooling - Datadog, Prometheus, Grafana, or the ELK stack

Familiarity with security best practices for SaaS platforms: secrets management, SAST/DAST in pipelines, cloud security posture management

Experience using AI-assisted engineering tools (e.g., Cursor, Claude) to streamline infrastructure-as-code, automation, scripting, troubleshooting, and software delivery workflows.

Ability to translate complex security and infrastructure concepts into clear, actionable solutions - for both technical and non-technical stakeholders

Nice to have:

Experience in a cybersecurity or SaaS security company (SSPM, CSPM, ITDR, or similar)

Familiarity with SOC 2 Type II or ISO 27001 compliance implementation

Contributions to open-source infrastructure tooling