SRE/DevOps Engineer
Role Overview
We are building a SRE-DevOps team for the GrayKey cloud platform: the services that license, provision, and support GrayKey and VeraKey devices used by law enforcement and government agencies around the world.
You will own day-to-day reliability during Pacific and Mountain hours, extending the team's coverage well into the Eastern evening. As a result you will often be the person on point: you need to work independently, make sound calls, and hand off clearly.
The focus of this role is SRE and infrastructure operations responsibility. You will write automation and code (AI-assisted tooling is encouraged), but your core strength is keeping production AWS environments, identity, and network security healthy, secure, and well documented.
NOTE: Candidates must reside in The United States or Canada and be located within the Pacific or Mountain Time Zone.
What You'll Do
- Monitoring and incident response: watch alerts and dashboards during your hours, triage incidents, resolve what you can, and escalate with clear context when you cannot.
- Patching and vulnerability remediation: keep Linux hosts, containers, and dependencies current, and work scanner findings through to closure.
- Network and access: manage VPCs, security groups, VPN, DNS, TLS certificates, IAM, and Fortigate firewalls; diagnose subnet and security-group connectivity issues. Cloud changes go through Terraform and GitLab merge requests.
- Identity: administer Okta, including SAML/OIDC app integrations, user and application provisioning, group-based access, and MFA troubleshooting.
- Kubernetes operations: support EKS clusters (node groups, upgrades, scaling, cluster health), troubleshoot workloads (pods, deployments, services, ingress, PVCs), and resolve Argo CD sync and deployment errors.
- Backup and recovery: maintain backup strategies for critical systems and data, and regularly test restore procedures.
- Runbooks and documentation: write and maintain the operating procedures the team relies on.
- Cost and automation: track AWS spend, remove waste, and script away repetitive toil.
- Compliance support: gather evidence and maintain controls for customer and audit requirements.
- Team practice: take part in code reviews, planning, and post-incident reviews.
- Travel: less than 5%.
What We're Looking For
- 3+ years in an SRE, DevOps, or Linux/cloud systems administration role.
- Hands-on AWS experience: VPC networking, IAM, EC2, RDS, and Lambda.
- Proficiency in Linux administration and scripting in Python and Bash.
- Infrastructure as Code with Terraform.
- Working experience with Kubernetes (EKS), Argo CD, Helm, GitLab CI/CD, and Datadog (or comparable observability tooling).
- Hands-on Okta administration: SAML/OIDC integrations, provisioning, and MFA.
- Practical security experience: least-privilege IAM, secrets handling, patch management, and network segmentation. Certifications such as CompTIA Security+, CySA+, or AWS Certified Security – Specialty count toward this.
- Solid networking fundamentals: TCP/IP, DNS, TLS, routing, firewalls, and VPNs.
- Clear written communication and a track record of working independently across time zones.
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
- Must reside in the United States or Canada & be located within the Pacific or Mountain Time Zone.
Nice To Have
- Exposure to SOC 2, CJIS, or FedRAMP compliance work.
- Experience with Active Directory / Azure AD (Entra ID).
- Experience with Ansible, Docker, PostgreSQL, and Redis.
- Experience using AI coding assistants for infrastructure and automation work.
- Background in IT operations or on a security-focused team.
Compensation & Benefits
The Compensation range is for the primary location for which the job is posted. Please note that the actual compensation may vary depending on location and job-related factors such as qualifications, experience, knowledge and skills. If you are applying for this role outside of the primary location and you are selected for an interview, the Talent Acquisition Partner can share more information with you. If the compensation structure for the role includes an incentive component (i.e. most Sales roles) the range below represents total target compensation (TTC) (base salary + variable).
$110,000 - $160,000 USD a year
$90,000 - $140,000 CDN a year
Salary range (min - max)
Position Type: Current Vacancy
Skills
- Active Directory
- AI
- Ansible
- Automation
- AWS
- Azure
- Azure AD
- Bash
- CI/CD
- Cloud
- Datadog
- DevOps
- DNS
- Docker
- EC2
- EKS
- Entra ID
- Fedramp
- Firewall
- GitLab
- Helm
- IAM
- Infrastructure as Code
- Kubernetes
- Lambda
- Linux
- Network Security
- Networking
- Observability
- Okta
- OpenID
- PostgreSQL
- Python
- RDS
- Redis
- SAML
- SOC 2
- Spark
- TCP/IP
- Terraform
- TLS
- VPC
- VPN
As published by lever · 14 questions · 2 written answers
Basics
Which location are you applying for?, Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website
Short answers (2)
- Please enter the country you are legally registered to work in.
- What are your total annual salary expectations (OTE)?
Pick from a list (10)
- How did you hear about us? optional
- Have you previously been employed by Magnet Forensics (or acquired/merged company) in any capacity? (i.e. employee, contractor, co-op, vendor)? optional
- Will you require sponsorship or other assistance or support to be authorized to, or otherwise, work from your country of residence? optional
- Work authorization optional
- What is your notice period to begin working with Magnet Forensics? optional
- I have read and agree to the Applicant Privacy Notice and understand how my personal information will be used (http://bit.ly/3Lj7cbk) also accessible under Job Postings on our Careers page optional
- Do you hold U.S. and/or Canadian citizenship?
- Do you currently reside in the Pacific or Mountain Time Zone?
- How many years of professional experience do you have working with Amazon Web Services (AWS)?
- How many years of professional experience do you have working with Kubernetes?
Written answers (2)
- If you were referred to Magnet, who referred you? (Note: We may verify referral details internally.) optional
- Describe your experience with Amazon EC2 and Debian Linux. Include key responsibilities and years of experience.