Job description

Who We Are; What We Do; Where We’re Going Magnet Forensics is a global leader in the development of digital investigative software that acquires, analyzes, and shares evidence from computers, smartphones, tablets, and IoT-related devices. We are continually innovating so our customers can deploy advanced and effective tools to protect their companies, communities, and countries. Serving thousands of customers globally, our solutions are playing a crucial role in modernizing digital investigations, helping investigators fight crime, protect assets, and guard national security. With employees based around the world, Magnet Forensics has been expanding our global presence. As a part of Magnet Forensics, you can expect to make a difference in the world, no matter what role you play. You’ll be supported through learning and development, not to mention an incredible team with unbelievable talent and integrity. If you think you would be the right person to join our team working towards this goal, we would love to hear from you! Role Overview We are building a SRE-DevOps team for the GrayKey cloud platform : the services that license, provision, and support GrayKey and VeraKey devices used by law enforcement and government agencies around the world. You will own day-to-day reliability during Pacific and Mountain hours, extending the team's coverage well into the Eastern evening. As a result you will often be the person on point: you need to work independently, make sound calls, and hand off clearly. The focus of this role is SRE and infrastructure operations responsibility. You will write automation and code (AI-assisted tooling is encouraged), but your core strength is keeping production AWS environments, identity, and network security healthy, secure, and well documented. NOTE: Candidates must reside in The United States or Canada and be located within the Pacific or Mountain Time Zone. What You'll Do Monitoring and incident response: watch alerts and dashboards during your hours, triage incidents, resolve what you can, and escalate with clear context when you cannot. Patching and vulnerability remediation: keep Linux hosts, containers, and dependencies current, and work scanner findings through to closure. Network and access: manage VPCs, security groups, VPN, DNS, TLS certificates, IAM, and Fortigate firewalls; diagnose subnet and security-group connectivity issues. Cloud changes go through Terraform and GitLab merge requests. Identity: administer Okta, including SAML/OIDC app integrations, user and application provisioning, group-based access, and MFA troubleshooting. Kubernetes operations: support EKS clusters (node groups, upgrades, scaling, cluster health), troubleshoot workloads (pods, deployments, services, ingress, PVCs), and resolve Argo CD sync and deployment errors. Backup and recovery: maintain backup strategies for critical systems and data, and regularly test restore procedures. Runbooks and documentation: write and maintain the operating procedures the team relies on. Cost and automation: track AWS spend, remove waste, and script away repetitive toil. Compliance support: gather evidence and maintain controls for customer and audit requirements. Team practice: take part in code reviews, planning, and post-incident reviews. Travel: less than 5%. What We're Looking For 3+ years in an SRE, DevOps, or Linux/cloud systems administration role. Hands-on AWS experience: VPC networking, IAM, EC2, RDS, and Lambda. Proficiency in Linux administration and scripting in Python and Bash. Infrastructure as Code with Terraform. Working experience with Kubernetes (EKS), Argo CD, Helm, GitLab CI/CD, and Datadog (or comparable observability tooling). Hands-on Okta administration: SAML/OIDC integrations, provisioning, and MFA. Practical security experience: least-privilege IAM, secrets handling, patch management, and network segmentation. Certifications such as CompTIA Security+, CySA+, or AWS Certified Security – Specialty count toward this. Solid networking fundamentals: TCP/IP, DNS, TLS, routing, firewalls, and VPNs. Clear written communication and a track record of working independently across time zones. Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience. Must reside in the United States or Canada & be located within the Pacific or Mountain Time Zone. Nice To Have Exposure to SOC 2, CJIS, or FedRAMP compliance work. Experience with Active Directory / Azure AD (Entra ID). Experience with Ansible, Docker, PostgreSQL, and Redis. Experience using AI coding assistants for infrastructure and automation work. Background in IT operations or on a security-focused team. Compensation & Benefits The Compensation range is for the primary location for which the job is posted. Please note that the actual compensation may vary depending on location and job-related factors such as qualifications, experience, knowledge and skills. If you are applying for this role outside of the primary location and you are selected for an interview, the Talent Acquisition Partner can share more information with you. If the compensation structure for the role includes an incentive component (i.e. most Sales roles) the range below represents total target compensation (TTC) (base salary + variable). $110,000 - $160,000 USD a year $90,000 - $140,000 CDN a year Salary range (min - max) Position Type: Current Vacancy Magnet is proud to offer benefits such as: - Generous time off policies - Competitive compensation - Volunteer opportunities - Reward and recognition programs - Employee committees & resource groups - Healthcare and retirement benefits Indicators of Success We’re looking for someone who checks off most, but not all, of the boxes listed in “skills and experiences”. It’s more important to us to find candidates who can display indicators of success through skills they have developed and experiences they have been a part of, than to find folks who have “been there, done that”. We want to be part of your development journey, and we’ll learn as much from you as you learn from us. How We Work At Magnet Forensics, we take a hybrid-flexible approach to support your productivity and work-life balance. If you’re within a comfortable travel distance to one of our offices, you’ll occasionally join us in person. How often you’ll come in depends on your department and team needs, typically ranging from weekly to monthly. These in-person moments help us build stronger connections, spark new ideas, and celebrate our successes together. Most days, you can choose what works best for you, while staying in tune with your team’s goals. We’re excited to welcome you to our team and look forward to achieving great things together - both in the office and wherever you work best! The Most Important Thing We’re looking for candidates that can provide examples of how they have demonstrated Magnet CODE in their previous experiences: CARE – We care about each other and our mission to make a difference in the world. OWN – We are accountable for our results – while never forgetting to act with integrity, empathy, and respect. DEDICATE – We put our heart and soul into meeting the needs of our customers and helping them serve the people they protect. EVOLVE – We are constantly innovating and exploring new ways to work together to make an impact with our work. Here at Magnet Forensics, we are committed to continuous learning and are focused on building a diverse and inclusive workforce. This commitment will be reflected in our hiring processes and embedded in our values and how we treat one another. If you’re interested in this role, but do not meet all of the qualifications listed above, we encourage you to apply anyways. Magnet Forensics is an Equal Opportunity Employer and considers applicants for employment without regard to race, colour, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, provincial, or local law. We are committed to providing an inclusive, accessible recruitment process and work environment. Accommodation is available to all applicants upon request throughout the hiring process. Please contact aoda@magnetforensics.com should you require any accommodations. All offers of employment at Magnet are contingent upon satisfactory completion of a background check. All background checks will be conducted in accordance with all applicable laws. Magnet will consider each position’s job duties, among other factors, in determining what constitutes satisfactory completion of the background check. Refusal to consent to a background check may be grounds for revoking an offer of employment. US Applicants: Magnet Forensics participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. Magnet Forensics handles and uses personal data of job applicants in line with its Recruitment Privacy Policy found here .

Requirements

Must-haves

Who We Are; What We Do; Where We’re Going
Serving thousands of customers globally, our solutions are playing a crucial role in modernizing digital investigations, helping investigators fight crime, protect assets, and guard national security.
If you think you would be the right person to join our team working towards this goal, we would love to hear from you!
We are building a SRE-DevOps team for the GrayKey cloud platform : the services that license, provision, and support GrayKey and VeraKey devices used by law enforcement and government agencies around the world.
NOTE: Candidates must reside in The United States or Canada and be located within the Pacific or Mountain Time Zone.
Monitoring and incident response: watch alerts and dashboards during your hours, triage incidents, resolve what you can, and escalate with clear context when you cannot.
Patching and vulnerability remediation: keep Linux hosts, containers, and dependencies current, and work scanner findings through to closure.
Identity: administer Okta, including SAML/OIDC app integrations, user and application provisioning, group-based access, and MFA troubleshooting.
Kubernetes operations: support EKS clusters (node groups, upgrades, scaling, cluster health), troubleshoot workloads (pods, deployments, services, ingress, PVCs), and resolve Argo CD sync and deployment errors.
Backup and recovery: maintain backup strategies for critical systems and data, and regularly test restore procedures.
Runbooks and documentation: write and maintain the operating procedures the team relies on.
Cost and automation: track AWS spend, remove waste, and script away repetitive toil.
Compliance support: gather evidence and maintain controls for customer and audit requirements.
Team practice: take part in code reviews, planning, and post-incident reviews.
Travel: less than 5%.
3+ years in an SRE, DevOps, or Linux/cloud systems administration role.
Hands-on AWS experience: VPC networking, IAM, EC2, RDS, and Lambda.
Proficiency in Linux administration and scripting in Python and Bash.
Infrastructure as Code with Terraform.

Nice-to-haves

Exposure to SOC 2, CJIS, or FedRAMP compliance work.
Experience with Active Directory / Azure AD (Entra ID).
Experience with Ansible, Docker, PostgreSQL, and Redis.
Experience using AI coding assistants for infrastructure and automation work.
Background in IT operations or on a security-focused team.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsgokubernetespythonci/cdazuredocker

Platform: lever
Effort: quick

Benefits

Benefits detected in the listing.

Vision