[Hiring] Senior Manager, Infrastructure & Security @nue.io

Role Description

Lead Cloud Infrastructure & SRE:

• AWS (ECS, EKS, networking, VPCs, IAM)
• Databases (PostgreSQL, Kafka, DynamoDB)
• IaC standards, SLOs, error budgets, DR/BCP, and a sustainable on-call program

Own CI/CD & Developer Experience:

• GitLab CI across ~150 repos: build speed, reliability, test signal, release safety, environments, and paved roads for new services

Drive Observability & Cloud Cost:

• High signal logging/metrics/tracing/alerting stack
• SLO instrumentation
• Cloud cost attribution by team/service
• FinOps practice

Lead Application & Cloud Security end-to-end:

• Secure SDLC, SAST/DAST/SCA
• Vuln triage and SLAs
• Secrets hygiene, IAM, CSPM

Partner with IT to support compliance program, customer security questionnaires, and pen-test remediation.

Own Vendor & Tooling Portfolio:

• Build-vs-buy decisions
• Vendor selection, POCs and lifecycle across observability, CI/CD, security, and incident management

Grow and Develop the Team:

• Hire, onboard, and mentor engineers
• Actively participate in recruiting; interview candidates, provide calibrated feedback, and raise the bar
• Conduct regular 1:1s, provide actionable feedback, and support career development for each team member
• Build a culture of urgency, ownership, customer empathy, and continuous improvement

Qualifications

• 7+ years of infrastructure or SRE engineering experience
• At least 3 years managing platform, infra, or SRE teams in a product-focused SaaS environment
• Production AWS ownership — you've run HA workloads on AWS at scale
• Infrastructure as code - you've built and scaled IaC practices using Terraform
• CI/CD fluency — you've built or owned pipelines in GitLab CI, GitHub Actions, Jenkins, or similar
• Observability ownership - you've built or evolved an observability stack
• Incident command - you've run customer-facing major incidents
• Application security - you've embedded security into the SDLC
• Cloud security posture - you own IAM, secrets management, network segmentation, and CSPM
• Compliance partnership - you've worked alongside IT on compliance programs
• Deeply hands-on - you've kept your technical edge as your teams have grown
• Bias for action - you default to doing, not delegating
• Active AI adoption - you use AI-assisted tools as part of your daily workflow

Preferred

• B2B SaaS experience with Salesforce coupling — managed packages, org provisioning, integration patterns
• CPQ, billing, or revenue domain — high-stakes correctness, audit-relevant data
• Experience standing up a Platform Engineering practice or internal developer platform

Tech Stack

• Salesforce Platform: Apex, Lightning Web Components (LWC), SOQL, Flows, managed packages
• Backend: Java (Spring Boot), Node.js, REST APIs, GraphQL
• Frontend: React 16, TypeScript, Material-UI, Webpack
• Database: PostgreSQL (AWS RDS), Salesforce SOQL/SOSL
• Infrastructure: AWS (Lambda, SQS, S3), Kafka, Docker, GitLab CI/CD
• AI Tooling: Claude Code, Windsurf, Copilot (used daily across engineering)
• Collaboration: Jira, Slack, Gem, Fellow, Confluence