# Senior Infrastructure Engineer

**Company:** [Bastion](https://hotfix.jobs/companies/bastion)
**Location:** Remote
**Role:** DevOps / SRE
**Salary:** $200k – $260k/yr
**Experience:** 5+ years
**Skills:** Terraform, AWS, Kubernetes, Docker, GitHub Actions, Go, TypeScript, Postgres, Redis, Kafka, Datadog, Grafana, Sentry
**Posted:** 2026-05-22

> Senior Infrastructure Engineer owning AWS, Kubernetes, and Terraform domains to improve reliability, cost efficiency, and developer velocity at a regulated fintech startup.

## Job Description

## Work to Be Done

We are a startup, so the pace is fast and the specific work will change. We are open to US remote and have an office in New York City.

### First 30 days: Learn the infrastructure, ship confidently
- Ramp on AWS architecture, Terraform patterns, Kubernetes setup, CI/CD pipelines, and observability stack
- Ship a small infrastructure improvement: Terraform module refactor, monitoring enhancement, or CI/CD optimization
- Add runbooks, alerts, or documentation for the infrastructure areas you touch

**Outcomes:**
- Multiple safe infrastructure changes deployed with verification
- You understand our core infrastructure patterns and can navigate Terraform, K8s, and AWS resources
- Updated documentation and/or infrastructure-as-code improvements that help the team

### By 90 days: Own an infrastructure domain and raise the bar
- Take ownership of an infrastructure area: CI/CD pipelines, observability stack, Kubernetes platform, or AWS security/networking
- Lead a medium-scope project: implementing a reusable Terraform module, right-sizing service resources, or improving deployment reliability
- Strengthen system reliability with better metrics, alerts, autoscaling policies, and failure recovery mechanisms

**Outcomes:**
- A delivered infrastructure improvement that enhances reliability, reduces cost, or improves developer velocity
- You're a go-to person for your infrastructure domain

### By 180 days: Drive platform-wide impact
- Lead a platform-wide initiative: single immutable image pipeline, infrastructure standardization, database performance optimization, or security hardening
- Shape infrastructure direction with design docs, RFC proposals, and mentoring engineering teams
- Partner with engineering, security, and compliance teams to make pragmatic tradeoffs on reliability, cost, and regulatory requirements

**Outcomes:**
- A multi-sprint infrastructure delivery that improves system-wide reliability, security, or developer experience
- Clear before/after improvements in deployment speed, cost efficiency, or operational stability
- Patterns and tooling that enable engineers to ship faster and safer

### Some problems you might work on
- Building reusable Terraform modules that standardize service deployment patterns across dev, sandbox, and prod
- Implementing single immutable image pipelines with built-in security scanning and promotion workflows
- Right-sizing Kubernetes workloads and autoscaling policies to reduce cost while maintaining reliability
- Designing and implementing database monitoring and performance optimization strategies
- Hardening AWS infrastructure with security best practices: IAM policies, network segmentation, secrets management, and audit logging
- Building observability infrastructure that gives engineers fast feedback on system health and performance
- Improving CI/CD reliability and speed through better caching, parallelization, and failure handling

## Our typical stack
- **Languages:** Go and TypeScript/Node.js; some services in Rust as needed
- **Infrastructure-as-Code:** Terraform
- **Cloud & Compute:** AWS (ECS, EKS, Lambda, EC2), Kubernetes, Docker
- **CI/CD:** GitHub Actions, container registries, automated testing and deployment pipelines
- **Data:** Postgres (RDS), Redis, Kafka, Snowflake
- **Workflow Management:** Temporal
- **Security:** AWS Nitro Enclaves for hardware-backed key isolation, IAM policies, secrets management
- **Observability:** Datadog, Grafana, Sentry, CloudWatch
- **Incident Management:** Incident.io

## Similar roles

- [Senior Software Engineer, Cloud Infrastructure](https://hotfix.jobs/jobs/78aefb2b-cbc3-4660-bce1-7ac2fd28f1c0) - Decagon - San Francisco, CA - $200k – $400k/yr
- [Senior Software Engineer, Observability](https://hotfix.jobs/jobs/b857fbeb-7984-45df-bd84-c85c53858f73) - Together AI - San Francisco, CA - $200k – $280k/yr
- [Software Engineer](https://hotfix.jobs/jobs/e2716385-59d1-4fb7-9c9b-ebd5ec347f2f) - Baseten - San Francisco, CA - $200k – $380k/yr
- [Senior Software Engineer, Accelerated Delivery](https://hotfix.jobs/jobs/d6170467-5d52-4dcf-bf3d-e9475a94e8f6) - Snowflake - Menlo Park, CA - $200k – $288k/yr
- [Senior Software Engineer - Snowpark Container Service](https://hotfix.jobs/jobs/47626f55-409c-4469-9cea-906cfd5683e3) - Snowflake - Bellevue, WA - $200k – $288k/yr

**Apply:** https://hotfix.jobs/jobs/54bc7045-7713-482e-a777-062fdb3b988b
**Canonical:** https://hotfix.jobs/jobs/54bc7045-7713-482e-a777-062fdb3b988b