Job description

Company Description Farther is a rapidly growing RIA that combines expert advisors with cutting-edge technology - delivering a comprehensive, tailored wealth management experience. Farther’s founders are leaders and innovators from the private wealth industry who possess a unique blend of traditional wealth management, fintech, and technology production expertise. We’re backed by top-tier venture capital firms, fintech investors, and industry leaders. Joining Farther means joining a collaborative team of entrepreneurs who are passionate about helping their clients and our teammates achieve more. If you’re the type who breaks through walls to get things done the right way, we want to build the future of wealth management with you. The Role We're hiring a Senior Software Engineer for the Infrastructure team, the group that owns the AWS foundation the rest of Farther's engineering builds on. This is a backend platform role with a security mandate. You come in with an eye for how a platform is actually put together: how our APIs are exposed and authenticated, who and what can reach which data, how storage is laid out, how encryption and key management are applied, how secrets move. You own those patterns, set the standards so new services get them right by default, and build the monitoring that tells us proactively when something drifts from those standards or when the platform is unhealthy. You build with compliance in mind: documented controls, automated evidence collection, and a posture that stands up to accredited security compliance review. You can own a project end to end across compute, networking, data, and IAM, and you act as a technical advisor to teams designing their own systems. Your Impact Own how the platform is accessed: API authentication and authorization patterns, IAM policy design, account and network boundaries, and secrets management, so access is least-privilege and every grant is traceable Own data protection across the platform: how storage is structured and segmented, encryption at rest and in transit, key management with KMS, and retention and access controls on sensitive data Build proactive security and health monitoring: detective controls with AWS-native tooling (GuardDuty, Security Hub, Config, CloudTrail), alerts on access anomalies and policy drift, and SLIs, SLOs, and dashboards with CloudWatch, X-Ray, and RUM so the platform reports problems before anyone else does Maintain compliance-grade controls: documented standards, automated evidence collection, and the audit logging and traceability accredited compliance reviews require Design and build shared platform services, internal tooling, and reusable infrastructure patterns on core AWS building blocks (ECS, Lambda, SQS/SNS, RDS, S3), secure by default so other teams inherit the right posture Review system designs across engineering for access control, trust boundaries, and blast radius, and drive the fixes when something doesn't hold up Build and maintain infrastructure as code that scales with a growing engineering team Set platform, security, and reliability standards, document them, and bring the broader engineering team along The Ideal Match 8-15+ years of software engineering experience with strong backend and platform depth Deep, hands-on AWS: you know how the core services interact and can build a production system from them end to end Proven cloud security ownership: you have audited and hardened a real AWS environment's API access, IAM, network boundaries, storage, encryption, and secrets, and left the audit trail to prove it Infrastructure as code as your default mode (CDK, Terraform, or CloudFormation) Real monitoring and alerting practice: detective controls, SLIs/SLOs, alert design, and using telemetry to find problems before users do Proficiency in TypeScript, Python, or Scala; you pick up languages as needed and care more about system design than syntax Fluent daily use of AI coding tools, paired with real ownership of the result: you can explain how anything you shipped works, defend the design choices, and say where it would fail Strong written communication; you document what you build Bonus Points AWS Certified Security - Specialty, or Solutions Architect - Professional Experience in accredited security compliance protocols or financial-services regulatory frameworks (SEC Regulation S-P, GLBA) Threat modeling, vulnerability management, or pen-test remediation you owned to closure SRE background: incident response, postmortems, capacity planning, load testing Production PostgreSQL operations Fintech or another regulated industry Why Join Us Everything you need to build the perfect dev station from hardware to software Learn & grow through book clubs, seminars, and peer learning sessions Full health benefits + 401(k) matching & Roth IRA options Unlimited PTO An amazing collaborative atmosphere between product, design, and engineering to solve hard problems together 🚀 Ready to disrupt wealth management? Let's talk!

Requirements

Must-haves

Company Description
Farther is a rapidly growing RIA that combines expert advisors with cutting-edge technology - delivering a comprehensive, tailored wealth management experience.
You own those patterns, set the standards so new services get them right by default, and build the monitoring that tells us proactively when something drifts from those standards or when the platform is unhealthy.
You build with compliance in mind: documented controls, automated evidence collection, and a posture that stands up to accredited security compliance review.
You can own a project end to end across compute, networking, data, and IAM, and you act as a technical advisor to teams designing their own systems.
Own how the platform is accessed: API authentication and authorization patterns, IAM policy design, account and network boundaries, and secrets management, so access is least-privilege and every grant is traceable
Own data protection across the platform: how storage is structured and segmented, encryption at rest and in transit, key management with KMS, and retention and access controls on sensitive data
Maintain compliance-grade controls: documented standards, automated evidence collection, and the audit logging and traceability accredited compliance reviews require
Design and build shared platform services, internal tooling, and reusable infrastructure patterns on core AWS building blocks (ECS, Lambda, SQS/SNS, RDS, S3), secure by default so other teams inherit the right posture
Review system designs across engineering for access control, trust boundaries, and blast radius, and drive the fixes when something doesn't hold up
Build and maintain infrastructure as code that scales with a growing engineering team
Set platform, security, and reliability standards, document them, and bring the broader engineering team along
The Ideal Match
8-15+ years of software engineering experience with strong backend and platform depth
Deep, hands-on AWS: you know how the core services interact and can build a production system from them end to end
Proven cloud security ownership: you have audited and hardened a real AWS environment's API access, IAM, network boundaries, storage, encryption, and secrets, and left the audit trail to prove it
Infrastructure as code as your default mode (CDK, Terraform, or CloudFormation)
Real monitoring and alerting practice: detective controls, SLIs/SLOs, alert design, and using telemetry to find problems before users do

Nice-to-haves

AWS Certified Security - Specialty, or Solutions Architect - Professional
Experience in accredited security compliance protocols or financial-services regulatory frameworks (SEC Regulation S-P, GLBA)
Threat modeling, vulnerability management, or pen-test remediation you owned to closure
SRE background: incident response, postmortems, capacity planning, load testing
Production PostgreSQL operations
Fintech or another regulated industry

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsrestapitypescriptpythonai

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

401(K)

Pto