🛠 Tech Stack

💼 About This Role

You'll own cloud and Kubernetes security for Gorgias' global infrastructure, building secure-by-default platforms and hardening CI/CD pipelines. You'll implement detection and response capabilities across 10+ GKE clusters. This role is critical for meeting enterprise-grade security standards and scaling our security program in a high-growth SaaS environment.

🎯 What You'll Do

• Harden GKE clusters with RBAC and network policies
• Design and implement policy-as-code guardrails in CI/CD
• Build security logging and runtime detection pipelines
• Develop and own incident response playbooks

📋 Requirements

• 5+ years in infrastructure security or cloud security
• Deep GCP and Kubernetes expertise (GKE, IAM, RBAC)
• Strong networking fundamentals (VPC, zero-trust, firewall)
• Hands-on CI/CD and IaC hardening (GitHub Actions, Terraform)

✨ Nice to Have

• Experience with policy-as-code tools like OPA or Kyverno
• Compliance experience with SOC 2 Type II, ISO 27001
• Scripting fluency in Python, Go, or Bash

🎁 Benefits & Perks

• 🏖️ Unlimited PTO
• 📚 Annual L&D budget
• 💻 Premium AI tools access (ChatGPT, Claude, Granola)
• 🏥 Health insurance
• 🌍 Global team in a high-growth SaaS company

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3System Design Interview· 60 min