Guild
Engineer, Production Engineering
San Francisco · Full-time
Sponsorship not specifiedDetected 36 days ago
TypeScriptPythonGoAWSGCPAzureCloud PlatformsKubernetesTerraformCI/CDPlatform EngineeringMachine LearningAgentic AICybersecurityPenetration TestingComplianceAuditingProcurementDNS
About the role
- Product Security: Audit application code for security vulnerabilities, contribute security-sensitive product features (e.g., API key management), and ensure product and infrastructure security are coherent end-to-end.
- Release Velocity: Make shipping to production a routine, boring, highly automated non-event.
Responsibilities
- Manage and evolve our production and staging infrastructure on GCP (GKE) using Terraform.
- Own DNS, networking, and environment configuration end-to-end.
- Lead infrastructure and operational work to support SOC2 compliance, including audit preparation, evidence collection, and control implementation.
- Manage our HackerOne engagement - coordinating pentests, triaging incoming bug bounty reports, and driving remediation.
- Design and maintain safe, automated CI/CD workflows supporting rollout strategies like canary and blue-green deployments.
- You'll own the full security and compliance surface of an early-stage company - from SOC2 to sandboxed agent execution to IT - while also contributing directly to the product.
- You'll design infrastructure for autonomous AI agents, not just traditional web services - introducing unique sandboxing, observability, and security challenges.
- As a Production Engineer, you will own the infrastructure, security, and compliance systems that allow our platform to ship fast and run reliably at scale.
- This is not a traditional ops role - you will write real code, contribute directly to the product, and own the full security and compliance surface of an early-stage company.
- If you want to own the production backbone for the agent-native era - from a Terraform module to a pentest to an API key implementation - we want to talk.
Requirements
- Our Stack: Strong hands-on experience with Kubernetes and GCP in production
- Security Depth: Hands-on experience with compliance frameworks (SOC2), vulnerability management, and secure system design.
- Experience supporting pentests / bug bounties
- Experience deploying and operating in customer VPCs or other external cloud environments across AWS, Azure, and/or GCP - navigating enterprise networking, security, and access constraints.
Nice to have
- 5+ years in Production Engineering, Platform Engineering, or a security-focused infrastructure role, ideally at a fast-growing startup or SaaS company.
Skills
- Strong programming skills (Python, Go, TypeScript, etc.) with a passion for automating away toil.
- Engineers who are as comfortable reading application code for vulnerabilities as they are writing a Terraform module.
- People who enjoy owning the full security and compliance surface, not just one layer of it.
- Builders who can navigate the constraints of customer enterprise environments without losing velocity.
- Cloud & Kubernetes Infrastructure
Company info
- We are building the control plane for AI agents in teams and companies.
This listing is sourced directly from Guild's careers page and normalized into a canonical job model.