Sr. Infrastructure Engineer

### **Meet Yubico** Yubico is a global leader in identity security and creator of the YubiKey, the original hardware-backed passkey. We are publicly traded on Nasdaq Stockholm; our global footprint includes headquarters in Stockholm, Sweden, Silicon Valley, California; and Singapore. **Why Join Our Mission?** At Yubico, we are guided by a shared belief that your work matters. We operate under a cultural philosophy of *Speed with Integrity*, pushing the boundaries of technology to secure the AI frontier—protecting both human and agentic AI interactions—and leading the transition to post-quantum cryptography. In everything we do, we live by our core values: - **Battle Friction:** We constantly look for new ways to simplify our products, our work, and the user experience. - **Inspire Higher:** We think big, champion the open internet, and strive to do the right thing even when it is difficult. - **One Team:** We are open, responsive, and collaborative, overcoming challenges and celebrating our successes together. Aligned with our commitment to open standards, we foster a thriving builder ecosystem through the [Yubico Developer Program](https://developers.yubico.com/), offering free [open-source repositories](https://developers.yubico.com/Software_Projects/), libraries, and SDKs to help developers rapidly integrate strong hardware authentication into any application. Through close collaborations with technical partners like Google, Microsoft, and Amazon, as well as newer frontiers like OpenAI, we continue to shape a safer digital world while donating security keys to protect vulnerable communities, journalists, and humanitarian groups worldwide through our [*Secure it Forward*](https://www.yubico.com/why-yubico/secure-it-forward/) program. ## **The Role** Join the team in charge of the infrastructure that supports our engineering teams. Working across Sweden and the US, we build and operate secure, reliable cloud platforms and software delivery systems. You will design and operate shared infrastructure, eliminate toil, and improve the developer experience. Our platform runs on GCP, focused on multi-tenant GKE clusters and managed cloud services. We manage cloud infrastructure with Terraform and generate Kubernetes configuration with CUE for GitOps workflows. ## **Tasks & Responsibilities:** - Design and operate secure infrastructure across GKE and managed GCP services. - Build and maintain infrastructure as code with Terraform. - Manage Kubernetes platform components and generate their configuration with CUE. - Build monitoring, dashboards, and alerts with Prometheus and Grafana. - Design least-privilege access controls and use keyless authentication for workloads and automation. - Evaluate technologies and make architecture decisions for our shared infrastructure. - Build self-service infrastructure to automate processes for the infrastructure team and our development teams. - Create clear platform guidance that helps engineering teams deploy and operate their services. - Maintain and improve CI/CD workflows with GitHub Actions. - Participate in the team’s on-call rotation. - Maintain a small footprint of specialized, hardware-backed infrastructure. ## **Basic Qualifications:** - Extensive experience (5 - 8 years) designing and operating highly-available production infrastructure. - Deep experience with GCP or another major public cloud. - Strong experience managing infrastructure as code with Terraform. - Strong experience operating Kubernetes in production. - Experience building and maintaining CI/CD workflows. - Experience building monitoring and alerting with Prometheus, Grafana, or similar tools. - Strong understanding of cloud networking, IAM, and workload identity. - Strong Linux administration and troubleshooting skills. - Experience automating infrastructure tasks with Bash, Go, and Python. - Experience using AI for platform development, testing or other experience. We are an equal opportunity employer, we value diversity and uphold an inclusive environment where all people feel that they are equally respected and valued. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity or expression, age, marital status, religion, national origin, disability, protected Veteran status or any other characteristic protected by law. We'd love to learn about what you can add to our diverse team. We are an E-Verify Participating Employer. Yubico does not accept agency resumes or referrals so please do not send them to our careers staff or employees. Yubico is not responsible for any fees related to unsolicited resumes or referrals. Personal data submitted through this form is used for managing Yubico’s recruitment activities, which include facilitating any application you make, setting up and conducting interviews and tests for applicants, evaluating and assessing results and selecting candidates, and as otherwise needed in our recruitment and onboarding processes. The use of your personal data may also be necessary prior to entering into a contract with you (that is prior to offering you a job with Yubico). Your personal data will only be used for the purposes for which it was collected and in accordance with the [Yubico Privacy Notice](https://www.yubico.com/support/terms-conditions/privacy-notice/). We only keep your personal data for as long as necessary and in compliance with Yubico’s record retention policies. If you have asked us to, we will keep you informed of other opportunities at Yubico. We do this in various ways, including email and by phone. If at any time you do not want us to contact you or use your information as described herein please contact us at to let us know and we will delete all such information. Providing your personal data is voluntary, but necessary to join our talent community, and if you do not agree to provide your data, we will not be able to consider you as part of our talent community. As part of providing the requested service, we will transfer your data to be processed by [Greenhouse Software Inc.](https://www.greenhouse.com/privacy-policy-june-27-2024), a service provider contracted by Yubico AB and/or its subsidiaries that meets legally mandated privacy requirements. The Yubico Privacy Notice offers more information about Yubico privacy practices, including the lawful basis for processing of personal data, how to lodge a complaint with the supervisory authority, and how to contact Yubico to exercise your data subject rights. In this notice, when we refer to "Yubico", "us", "we" or "our", we mean the Yubico group company or companies that you apply to, or correspond with, and which are responsible for any personal data collected about you.