Job description

We believe power is a promise - a shared commitment to be there for others when it matters most. For more than 65 years, we ve turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future. Ready to Power a Smarter World with us? We believe power is a promise - a shared commitment to be there for others when it matters most. For more than 65 years, we ve turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future. Ready to Power a Smarter World with us? The Home Software Platform (HSP) is the shared cloud foundation behind Generac s connected home energy products - PWRcell, PWRmicro, HSB Generator, Load Management, and HEMS. As a Senior Staff Software Engineer focused on Infrastructure and Security, you will shape how that platform is architected and defended: designing the cloud infrastructure behind Generac s home energy software - the applications, services, data, and connected devices it spans - and embedding security into every layer of it. You will work closely with SRE and engineering teams to lead and influence technical direction across the platform. This is a hands-on, individual-contributor role with organization-wide technical influence. Responsibilities: Provide architectural leadership and direct technical influence over HSP-wide infrastructure decisions on AWS, defining the patterns, guardrails, and reference architectures that engineering teams build on across the platform. Design scalable, resilient, cost-efficient infrastructure for a high-volume cloud platform - APIs and services, data and streaming pipelines, compute and storage, and device-to-cloud data flows. Help shape infrastructure-as-code standards (Terraform, AWS CDK, or equivalent) so that environments are reproducible, reviewable, and auditable end to end. Drive the platform s security posture as a first-class design concern: threat modeling, secrets management, network segmentation, and data protection for device and consumer data. Lead cloud security architecture across the AWS account structure: IAM boundaries, least-privilege access, encryption in transit and at rest, key management, and tamper-evident audit logging. Partner with SRE teams to strengthen the observability and reliability backbone - metrics, tracing, logging, alerting, and SLOs. Partner with product engineering teams to review designs, unblock hard infrastructure and security problems, and raise the bar on operational and secure-coding practices through mentorship and technical leadership. Contribute to multi-year platform architecture and technology strategy, translating platform capabilities into concrete, buildable infrastructure and security roadmaps. Lead build-vs-buy evaluations for infrastructure and security tooling, and guide the technical integration of selected third-party services. Partner with SRE teams to drive cost visibility and optimization across the cloud estate without compromising reliability or security. Basic Qualifications: Bachelor of Science degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience. 10 years of progressive software engineering experience, with a substantial focus on cloud infrastructure and platform engineering. Deep, hands-on expertise architecting production systems on a major public cloud, preferably AWS. Several years of hands-on security engineering across secure architecture, identity and access management, and threat modeling, applied to large-scale distributed systems. Strong proficiency with infrastructure-as-code, containers and orchestration, CI/CD, and modern observability tooling. Preferred Qualifications: Deep familiarity with the AWS security and networking stack (IAM, KMS, VPC design, GuardDuty, Security Hub, CloudTrail, Config, WAF). Experience with infrastructure-as-code at scale using Terraform and/or AWS CDK, including module design and policy-as-code guardrails. Track record of building high-volume distributed cloud platforms; experience with device-to-cloud patterns (OTA update, edge computing, telemetry pipelines) is a plus. Experience securing consumer data and connected-device fleets, including relevant privacy and compliance frameworks (SOC 2, ISO 27001, or similar). Proficiency with container orchestration (Kubernetes / EKS) and event-driven and streaming architectures. Practitioner-level experience building or deploying AI/LLM-powered applications and tooling, including hands-on use of Claude via Amazon Bedrock. Familiarity with the home energy domain - HEMS, demand response, utility APIs, and grid-services integrations. Strong technical-communication skills: able to translate complex infrastructure and security trade-offs into clear, actionable narratives for engineering teams and technical stakeholders. A track record of raising engineering standards through mentorship, design review, and pragmatic technical leadership. Generac is committed to fair and equity compensation practices. The salary range for this role based in Pewaukee, WI is $141,400 - $190,900. Final compensation for this role will be determined by various factors such as a candidate s relevant work experience, skills, certifications and geographic location. This position includes a comprehensive benefit package that includes medical, dental and vision plans; life, long-term disability, flexible, spending and health savings accounts, accrued paid time off, eight paid holidays in 401(k) retirement benefits. #LI-UF1 “We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability status, protected veteran status, or any other characteristic protected by law.”

Requirements

Must-haves

We believe power is a promise - a shared commitment to be there for others when it matters most.
For more than 65 years, we ve turned big ideas into solutions that help protect homes, strengthen businesses and build a more resilient, efficient, sustainable energy future.
Ready to Power a Smarter World with us?
Design scalable, resilient, cost-efficient infrastructure for a high-volume cloud platform - APIs and services, data and streaming pipelines, compute and storage, and device-to-cloud data flows.
Help shape infrastructure-as-code standards (Terraform, AWS CDK, or equivalent) so that environments are reproducible, reviewable, and auditable end to end.
Drive the platform s security posture as a first-class design concern: threat modeling, secrets management, network segmentation, and data protection for device and consumer data.
Lead cloud security architecture across the AWS account structure: IAM boundaries, least-privilege access, encryption in transit and at rest, key management, and tamper-evident audit logging.
Partner with SRE teams to strengthen the observability and reliability backbone - metrics, tracing, logging, alerting, and SLOs.
Partner with product engineering teams to review designs, unblock hard infrastructure and security problems, and raise the bar on operational and secure-coding practices through mentorship and technical leadership.
Contribute to multi-year platform architecture and technology strategy, translating platform capabilities into concrete, buildable infrastructure and security roadmaps.
Lead build-vs-buy evaluations for infrastructure and security tooling, and guide the technical integration of selected third-party services.
Partner with SRE teams to drive cost visibility and optimization across the cloud estate without compromising reliability or security.
Bachelor of Science degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.
10 years of progressive software engineering experience, with a substantial focus on cloud infrastructure and platform engineering.
Deep, hands-on expertise architecting production systems on a major public cloud, preferably AWS.

Nice-to-haves

Deep familiarity with the AWS security and networking stack (IAM, KMS, VPC design, GuardDuty, Security Hub, CloudTrail, Config, WAF).
Experience with infrastructure-as-code at scale using Terraform and/or AWS CDK, including module design and policy-as-code guardrails.
Track record of building high-volume distributed cloud platforms; experience with device-to-cloud patterns (OTA update, edge computing, telemetry pipelines) is a plus.
Experience securing consumer data and connected-device fleets, including relevant privacy and compliance frameworks (SOC 2, ISO 27001, or similar).
Proficiency with container orchestration (Kubernetes / EKS) and event-driven and streaming architectures.
Practitioner-level experience building or deploying AI/LLM-powered applications and tooling, including hands-on use of Claude via Amazon Bedrock.
Familiarity with the home energy domain - HEMS, demand response, utility APIs, and grid-services integrations.
Strong technical-communication skills: able to translate complex infrastructure and security trade-offs into clear, actionable narratives for engineering teams and technical stakeholders.
A track record of raising engineering standards through mentorship, design review, and pragmatic technical leadership.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsrestci/cdkubernetesaillm

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off