Senior Software Engineer, DevOps & Security
Klue is hiring a Senior Software Engineer for DevOps & Security in Vancouver to own the internal platform: Pulumi IaC, GKE clusters, CI/CD pipelines, observability, GCP/LLM cost control, and automated SOC 2 security controls. The role is office-first hybrid (Mon/Wed/Thu in office) on a GCP/Kubernetes/Pulumi stack.
- Compensation
- CA$140K–CA$195K / yr
- Location
- Vancouver, British Columbia
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Full time
- Experience
- Not specified
- Category
- Devops
- Posted
Skills
Must have
- Deep, hands-on experience in DevOps, SRE, platform, or infrastructure engineering operating production systems paying customers depend on, including being on-call
- Deep, practical Kubernetes knowledge
- Infrastructure as code treated as software — Pulumi or Terraform
- Strong GCP or AWS fundamentals
- Background in systems engineering and writing software
- CI/CD owned as a product — built and maintained pipelines used by other teams (GitHub Actions or Buildkite preferred, GitLab CI / CircleCI transfers)
- Hands-on experience with security tooling as an engineering practice
- Compliance engineering for SOC 2 or enterprise partner security programs implemented as automated controls; threat modeling
- Ownership under ambiguity — scope vague problems, ship incrementally, communicate clearly what changed and why
- Fluent with AI coding tools, with experience working with AI-first teams
Nice to have
- Has owned platform migrations and decommissions
- Built an internal developer platform or self-service tooling that other engineers adopted
- Comfort with LLM infrastructure (gateways, token cost attribution, rate limiting, provider failover)
Full description
At Klue, We’re Building the Future of Competitive Intelligence
The Engineering team is hiring 👋
This role exists to make the correct way to build and ship at Klue the easy way. When the paved road, shared infrastructure, CI/CD, and guardrails are solid, every engineer at Klue gets faster, safer, and more cost effective to support, without having to think about it.
You'll work alongside the rest of the DevOps team, as well as engineering managers across Product, Data, and AI, and our Security and Compliance stakeholders.
This is a role for someone who is systems-minded, pragmatic, security-aware, and allergic to toil. Someone who'll jump in when the platform's on fire, but always ask what change stops the next one from starting. You balance proactive and reactive work, and when you get to choose, you choose proactive. That's what moves the ratio in the right direction.
What’s In It for You?
You'll own real infrastructure at real scale and have deep, hands-on experience across cloud, platform engineering, infrastructure, and developer experience, with authority over the IaC, GKE, and CI/CD architecture every team depends on. You'll help shape how a fast-moving, AI-first engineering org ships software safely.
Klue moves fast and builds AI-first. This role involves keeping engineering fast, the platform scalable and secure, and costs fully visible. The four areas below are where most of that lives, not where it ends:
What You’ll Do
- Own the paved road for infrastructure. Build and extend our Pulumi component library so teams get correct, disaster-recovery-ready infrastructure by default instead of hand-rolling stacks across our GCP environments.
- Run GKE like a product. Handle cluster and node pool upgrades, in-cluster services, workload right-sizing, and policy enforcement so Kubernetes stays reliable as we scale.
- Make CI/CD something engineers never think about. Own the core building blocks of our CI/CD workflows, cut CI time and flake rate fleet-wide, and standardize the golden path for shipping services.
- Give engineers real visibility into their own systems. Improve the internal developer platform surfaces that show what's actually happening under the hood.
- Keep production legible. Own the health of our observability stack: consistent instrumentation, actionable alerts, and less noise on-call.
- Treat cost like an engineering problem. Drive GCP and LLM cost reduction through attribution, right-sizing, commitment planning, and killing off orphaned resources.
- Make the secure path the fast path. Extend our software supply chain controls, own infrastructure identity and access, and build SOC 2 and other compliance requirements into automated, evidenced controls, so audits are a byproduct of how we build.