Staff Software Engineer, Parafin

• 8+ years of experience in software or infrastructure engineering, with significant focus on secure infrastructure and platform development
• Strong proficiency in coding languages such as Python
• Deep expertise with Kubernetes and its surrounding ecosystem (e.g., service mesh, admission controllers, observability, RBAC)
• Experience operating cloud infrastructure (preferably AWS), including IAM, VPCs, and secure configuration management
• Proficiency with infrastructure-as-code tools such as Terraform
• Familiarity with secrets management (e.g., Vault), CI/CD hardening, and runtime/container security practices
• Strong problem-solving and debugging skills in distributed systems
• Excellent communication skills and experience collaborating with cross-functional teams

Desirable

• We’re seeking an experienced software engineer to join our Infrastructure team to lead key initiatives around security-focused platform engineering
• At Parafin, the Infrastructure team owns core platforms spanning cloud infrastructure, compute, networking, developer experience, data infrastructure, and security
• In this role, you’ll design and implement scalable, secure systems and tooling that empower engineers to move quickly while maintaining a strong security posture
• You’ll play a critical role in shaping how we manage access, secure our compute and networking layers, and build foundational infrastructure that supports our rapidly growing platform
• Lead the design and implementation of secure, reliable infrastructure platforms—across compute, networking, identity, and policy enforcement
• Own and evolve the security posture of our Kubernetes platform, focusing on isolation, observability, and resilience
• Build and operate systems for managing secrets, service-to-service auth, and access control
• Define and codify best practices in infrastructure security, infrastructure-as-code, and software integrity
• Collaborate with engineers across Infrastructure and Product teams to introduce secure-by-default tooling and abstractions
• Drive improvements to our availability, incident response, and audit capabilities through automation and thoughtful platform design
• Mentor engineers and influence a culture of security-minded engineering across the company