Job description

About VSCO For years, we've helped photographers create their work. Now we're building what comes next. VSCO exists for photographers. Not as a side feature, not as an afterthought, but as the whole point. We build the connected system photographers rely on, and we've spent over a decade earning the trust of a global creative community that takes the craft seriously. Photography is at an inflection point. AI is reshaping what's possible for creative work, and that's where our mission shines. VSCO is building the full photographer's workflow: from creating and editing your work, to delivering it to clients, to running your business. All of it built thoughtfully, with photographers leading the way. We believe the future of photography tools creates more space for creativity, handling the busy work so photographers can focus on the craft. If you care about craft, community, and what technology can unlock for creative people, this is the work. We're a mission-driven and focused company where your work ships quickly, is meaningful, and reaches tens of millions of people worldwide. You'll have a real say in what we build and how we build it. We hire people who don't wait to be asked, naturally connect the dots, care about the quality of what they ship, and believe the best outcomes come from building together. About The Role We’re looking for a Senior Software Engineer, Infrastructure to own the platform that VSCO product and data teams ship on. You’ll join a small infra team that treats AWS, EKS, and GitOps as the default path for new systems, and you’ll spend real time pairing with other teams so - search, Workspace, and data - land in the right Terraform, Helm, and Flux instead of one-off snowflakes. This is a hands-on senior seat. You will design Terraform modules, cut production traffic to EKS, secure traffic with Cloudflare, look for optimizations in our AWS infrastructure, and leave on-call better than you found them. You like production ownership, you can sequence a cutover, and you can teach another team why their service belongs in shared-infra versus an app repo. The day-to-day Design, build, and operate the AWS and EKS platform using Terraform, Helm/Kustomize, and Flux GitOps across infra, shared-infra, and app-owned repos (Workspace, search, data). Own production cutovers end to end: ingress, DNS, workers and crons, telemetry monitors and dashboards, and a rollback plan you would actually use. Partner with product and data teams on the right home for new infra, including namespaces, secrets (SOPS, IRSA), preview environments, and not reinventing namespace or secret wiring that already lives in shared-infra. Build and maintain CI/CD on GitHub Actions, including self-hosted runners, image builds, and deploy pipelines that other teams can copy. That means supporting the build and test pipelines, container images, and runners for our language ecosystems (Go, Python, PHP, Node, Java, Ruby, and similar) so those teams can compile, test, and ship, rather than writing their application code yourself. Run core data stores and caches as platform services: MySQL, Mongo, Valkey/Redis, OpenSearch. Cloudflare and CloudFront: DNS and zone moves, CDN behavior, WAF, custom domains. Observability and autoscaling with monitors, dashboards, external-metrics HPA, with a bias toward fixing the system so the next person doesn’t page. Participate in the infra on-call rotation. Debug Linux, Kubernetes, and network issues, then turn the incident into Terraform, alerts, or docs. Review infra PRs and design docs. Help other engineers make the tradeoff, not just merge the change. Qualifications 5+ years in infrastructure, platform, or site reliability engineering, including time as a hands-on owner of production systems (not only tickets and runbooks). Strong production experience with Kubernetes/EKS, Linux, and infrastructure-as-code (Terraform). You have shipped and operated this, not only used a chart someone else wrote. AWS in production: EKS, IAM/IRSA, networking (VPC, NAT, DNS), and at least one of RDS/MySQL, Elasticache/Valkey, or OpenSearch. GitOps and CI/CD in anger: Flux and/or Helm, plus GitHub Actions (self-hosted runners a plus). Familiarity with the languages our CI builds (Go, Python, PHP, Node, Java, Ruby, and similar). You do not need to be a product engineer in these languages. You do need to be comfortable supporting the pipelines, images, and runners that compile and test them. Experience leading technical architecture discussions, explaining tradeoffs, and driving a decision inside a small team. Experience troubleshooting complex production issues, including network and DNS, and turning them into durable fixes. Excellent communication: you can teach another team how to consume the platform, and you can write the cutover plan. Nice to haves Cloudflare DNS, CDN, and zone migration experience (alongside or instead of CloudFront). OpenSearch, Valkey/Redis, MySQL, Mongo, Kafka. Datadog, Groundcover, Honeycomb (monitors, dashboards, bonus if you understand OTEL). GitHub Actions Runner Controller, preview environments, or similar paved-road CI. Flux, Helm, Kustomize, and a point of view on which repo should own a given piece of infra. Using AI tools like Cursor to help force multiply your work High-scale consumer or creator products. A connection to photography, visual storytelling, or creative communities. BS in Computer Science or related technical discipline, or equivalent practical experience. Scope of the role Not an application-backend seat that happens to know Kubernetes. The center of gravity is platform: Terraform, EKS, DNS, GitOps, CI, and helping other teams land on it. This is a senior IC seat. You own projects end to end, review PRs, sequence cutovers, and partner with other teams. You are not expected to set org-wide architecture or operate primarily as a tech lead of other infra engineers. You will still open the PR, apply it to dev/preprod/prod in the right order, and watch the cutover. Job Perks Hybrid work with an office in San Francisco, CA Regular in-person events events to connect and collaborate Competitive salary & equity Medical, dental, and vision insurance for employees and families Flexible Time Off Company-paid parental, medical and caregiver leave Other perks including mental health resources and tech reimbursements Compensation The base salary for this position will vary based on several factors, such as relevant experience, location and your approved internal leveling assessed during the interview process. The base salary range for this role is $165,000 - $185,000. Salary is one component of our total compensation package. This position also qualifies for equity (i.e. stock options) and is eligible for discretionary bonuses based on performance. The benefits available for this position include flexible time off, a 401K retirement plan, insurance (medical, dental, vision, life/AD&D, short and long term disability), and 11 paid holidays. We also provide paid sick time as required by state and local law. Additional benefits and perks contained in our standard employee benefits package are also offered for this position. Please note : As part of our hiring process, we conduct pre-employment background checks in compliance with federal, state, and local laws. Employment is contingent upon the successful completion of this background check, which includes state and federal criminal records checks, sex offender registry searches, and other relevant checks as permitted by law.

Requirements

Must-haves

The day-to-day
Design, build, and operate the AWS and EKS platform using Terraform, Helm/Kustomize, and Flux GitOps across infra, shared-infra, and app-owned repos (Workspace, search, data).
Own production cutovers end to end: ingress, DNS, workers and crons, telemetry monitors and dashboards, and a rollback plan you would actually use.
Partner with product and data teams on the right home for new infra, including namespaces, secrets (SOPS, IRSA), preview environments, and not reinventing namespace or secret wiring that already lives in shared-infra.
Run core data stores and caches as platform services: MySQL, Mongo, Valkey/Redis, OpenSearch.
Cloudflare and CloudFront: DNS and zone moves, CDN behavior, WAF, custom domains.
Observability and autoscaling with monitors, dashboards, external-metrics HPA, with a bias toward fixing the system so the next person doesn’t page.
Participate in the infra on-call rotation. Debug Linux, Kubernetes, and network issues, then turn the incident into Terraform, alerts, or docs.
Review infra PRs and design docs. Help other engineers make the tradeoff, not just merge the change.
5+ years in infrastructure, platform, or site reliability engineering, including time as a hands-on owner of production systems (not only tickets and runbooks).
Strong production experience with Kubernetes/EKS, Linux, and infrastructure-as-code (Terraform). You have shipped and operated this, not only used a chart someone else wrote.
AWS in production: EKS, IAM/IRSA, networking (VPC, NAT, DNS), and at least one of RDS/MySQL, Elasticache/Valkey, or OpenSearch.

Nice-to-haves

GitOps and CI/CD in anger: Flux and/or Helm, plus GitHub Actions (self-hosted runners a plus).
Cloudflare DNS, CDN, and zone migration experience (alongside or instead of CloudFront).
OpenSearch, Valkey/Redis, MySQL, Mongo, Kafka.
Datadog, Groundcover, Honeycomb (monitors, dashboards, bonus if you understand OTEL).
GitHub Actions Runner Controller, preview environments, or similar paved-road CI.
Flux, Helm, Kustomize, and a point of view on which repo should own a given piece of infra.
Using AI tools like Cursor to help force multiply your work
High-scale consumer or creator products.
A connection to photography, visual storytelling, or creative communities.
BS in Computer Science or related technical discipline, or equivalent practical experience.
Scope of the role
Not an application-backend seat that happens to know Kubernetes. The center of gravity is platform: Terraform, EKS, DNS, GitOps, CI, and helping other teams land on it.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsci/cdgopythonjavakubernetes

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k