DevOps & Security Engineer

Job description

Why this role exists We're a technology company building AI-native learning products used by more than seven million students worldwide, alongside Honen, our workforce-learning platform for organizations. Both run on the Learn Engine, the intelligence that moves a learner from initial understanding to demonstrated mastery. We work with partners like NVIDIA to bring responsible, learning-first AI to the students who need it most. All of that runs on a mature, infrastructure-as-code platform: cloud, Kubernetes, networking, deploy tooling, databases, and the GPU serving that powers our AI. We already operate with a strong security and DevOps foundation, and we're scaling the team so we can keep raising that bar as the company and the platform grow. You'll work alongside our Lead Infrastructure & Platform Engineer as a partner, not a report. They set the direction of the platform; you focus on the security and DevOps side, deepening our posture and the automation that keeps us shipping safely. As we build out our own GPU infrastructure inside a colocation facility, you'll help make sure it's secured, monitored, and operable from day one. If you want deep ownership of security and operations for a product that reaches millions of learners, this is it. What we believe Every learner deserves the chance to succeed. StudyFetch started with one idea: high-quality, personalized learning should be within reach for anyone, at any stage of life. Honen carries that belief into the workforce. Accessible to everyone. Learning should reach every person, whatever their background, role, or resources. Meet people where they are. Every course adapts to a person's pace, their level, and the way they learn best. Learning never stops. From a first job to a new career, people keep growing at every stage of life. We hire people who share this conviction. The work is demanding and the hours can be long, and what sustains you through it is caring whether a real student finally understands the material. What you'll own Security posture, end to end. Identity and least-privilege access across our cloud and tooling, secrets management and rotation, network security, and the day-to-day work of keeping the platform hard to break into and easy to audit. Compliance, made real. We hold ourselves to a serious bar (SOC 2, continuous scanning, evidence you can actually produce). You own the controls, the audit readiness, and the roadmap toward frameworks like FedRAMP, without turning the team into a ticket queue. The DevOps backbone. CI/CD, build and deploy pipelines, and the automation that lets engineers ship safely and often. You make the paved road, and you make the secure way the easy way. Reliability and incident response. Monitoring, alerting, on-call, and the postmortems that make the next incident less likely. When something breaks at 2am, you're calm, methodical, and the reason it doesn't happen twice. Securing the GPU and colocation buildout. As we stand up GPU capacity in a colo facility, you own its security and operability: network segmentation, access controls, monitoring, and hardening across the hybrid of on-prem and cloud. Raising the security bar for the team. The practices you set for how we handle secrets, access, and incidents are the ones everyone else follows. What we're looking for You're a strong fit if either of these is true: 5+ years in security engineering, DevOps, SRE, or infrastructure, with real depth in securing and operating production systems, or You were an early engineer who owned security and operations for a real product as it grew, and can demonstrate what you built and defended. Beyond that: You've secured and operated production systems that real users depend on. You can walk us through an environment you hardened, an incident you ran, which parts were yours, and what you changed afterward. You think like an attacker and build like an operator. You understand cloud and Kubernetes security, identity and access, secrets, and network security, and you close gaps without grinding the team to a halt. You've carried real compliance. SOC 2 or similar isn't a mystery to you, and you know how to make controls that hold up in an audit without becoming theater. You automate by default. Manual, click-through processes bother you; you'd rather codify them. Infrastructure-as-code and pipelines are how you work. You use AI every day and have informed opinions about it, including how to operate and secure AI workloads. Genuine curiosity is the one thing we can't teach. You're candid about tradeoffs and steady under pressure, including launch crunch and live incidents. The mission is why you're here. What sustains you through the hard weeks is the learner on the other end, the one whose data you protected and whose experience stayed up because of something you built. The stack you'll work in You don't need every item below, but you should be deep in most and able to ramp quickly on the rest: Security: IAM and least-privilege access, secrets management and rotation, network security, zero-trust access, vulnerability management, audit logging Compliance: SOC 2 and continuous compliance tooling; awareness of frameworks like FedRAMP DevOps & CI/CD: build and deploy pipelines (Jenkins or similar), container builds, GitOps-style automation, infrastructure-as-code (Pulumi or Terraform) Cloud & orchestration: GCP, Cloudflare, Vercel; Kubernetes (GKE), Helm Networking: VPC design, firewalls, DNS/TLS, and — for the colo work — datacenter and network segmentation Observability & operations: monitoring, alerting, incident response, on-call Data & AI ops: PostgreSQL and MongoDB, managed caches, plus operating and securing GPU/model-serving workloads What to expect This is an in-person role at a fast pace, with periods of intense work around major launches and the GPU buildout. You'll have significant ownership and autonomy with limited oversight. The role suits engineers who do their best work with room to run. It's a strong fit for engineers who have secured and operated production systems that real users depend on. If your experience has been primarily in tutorials, labs, or environments you never had to defend, this likely isn't the right match. Compensation & benefits $170,000–$270,000 base salary, plus equity 100% employer-paid Medical, Dental, and Vision; 75% dependent coverage 401(k) with employer matching Daily team dinner provided in-office A small, mission-driven team changing how the world learns #LI-SF1 About Studyfetch StudyFetch is the #1 AI-native learning platform globally, transforming how millions of students learn through personalized AI-powered education. We’re growing fast with backing from top-tier investors and a mission that’s redefining the future of education and ethical learning.