Job description

At Chromatic, our mission is to improve the UX of the internet and safeguard the world's pixels. We're building tools that make it impossible to ship broken pixels. Thousands of front-end teams—including BBC, Shopify, and Adobe—use Storybook and Chromatic to map every state of their applications and ensure each one is tested and approved before reaching the billions of people who interact with them daily. Our elastic browser rendering grid runs on AWS, taking millions of snapshots daily while maintaining resilience, consistency, and fast performance. As our customer base grows in both self-serve and enterprise, and enabling agentic workflows expands our potential attack surface, we're facing novel infrastructure and security challenges that need to be solved proactively. We're looking for a DevOps engineer who can help us secure, stabilize, and architect the future of our systems so that Chromatic remains an essential and trusted component of our customers' development workflows. If you’re motivated by tackling complex technical challenges alongside smart, capable, and empathetic people, let’s chat! This is a fully remote position on a cross-functional team for individuals based in the mainland US or Canada. RESPONSIBILITIES - Own and continuously improve our security posture — from access controls and secrets management to vulnerability triage and audit logging — ensuring our systems meet the standards our enterprise customers require. - Design, build, and maintain secure, scalable infrastructure in AWS using Terraform that enables millions of browser sessions daily. - Embed with product and engineering teams to assess infrastructure needs, conduct security reviews, and ensure that developer tooling and CI/CD workflows ship with security built in rather than bolted on. - Participate in the engineering team's on-call rotation, responding to incidents and taking ownership of mitigation through to resolution. WHAT WE’RE LOOKING FOR - 5+ years of hands-on experience deploying and operating containerized applications in AWS - 5+ years of hands-on experience using Infrastructure as Code (IaC) technologies (we use Terraform). - Intermediate working knowledge of networking fundamentals, including firewalls, load balancers, DNS, VPC architecture and peering, and zero-trust network access (we use Tailscale). - Intermediate working knowledge of cloud security standards, including least-privilege IAM, secrets management, API authentication and abuse prevention, audit logging, network segmentation, and proactive vulnerability triage, etc. - Demonstrable hands-on experience with CI/CD (Circle CI, GitHub Actions), containerization (Docker), and orchestration tools NICE TO HAVES - Working knowledge of legal/compliance frameworks such as SOC2, GDPR, etc. - Intermediate knowledge and working experience with NoSQL document databases (MongoDB) and/or relational databases (PostgreSQL, MySQL, etc.) systems. - Have worked effectively in a distributed, remote-first team environment. - Have followed a non-traditional path into software and bring insight from experiences beyond engineering. Salary range: US $155,000 - $190,000 + equity. Learn more about our compensation philosophy here notion.so. Visit our careers page chromatic.com for a list of our other benefits and a peek into life at Chromatic.

Requirements

Must-haves

If you’re motivated by tackling complex technical challenges alongside smart, capable, and empathetic people, let’s chat!
This is a fully remote position on a cross-functional team for individuals based in the mainland US or Canada.
Own and continuously improve our security posture — from access controls and secrets management to vulnerability triage and audit logging — ensuring our systems meet the standards our enterprise customers require.
Design, build, and maintain secure, scalable infrastructure in AWS using Terraform that enables millions of browser sessions daily.
Embed with product and engineering teams to assess infrastructure needs, conduct security reviews, and ensure that developer tooling and CI/CD workflows ship with security built in rather than bolted on.
Participate in the engineering team's on-call rotation, responding to incidents and taking ownership of mitigation through to resolution.
5+ years of hands-on experience deploying and operating containerized applications in AWS
5+ years of hands-on experience using Infrastructure as Code (IaC) technologies (we use Terraform).
Intermediate working knowledge of networking fundamentals, including firewalls, load balancers, DNS, VPC architecture and peering, and zero-trust network access (we use Tailscale).
Demonstrable hands-on experience with CI/CD (Circle CI, GitHub Actions), containerization (Docker), and orchestration tools

Nice-to-haves

Working knowledge of legal/compliance frameworks such as SOC2, GDPR, etc.
Intermediate knowledge and working experience with NoSQL document databases (MongoDB) and/or relational databases (PostgreSQL, MySQL, etc.) systems.
Have worked effectively in a distributed, remote-first team environment.
Have followed a non-traditional path into software and bring insight from experiences beyond engineering.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsci/cdapidocker

Platform: ashby
Effort: quick