Platform Engineer (Lab Infrastructure / DevSecOps)

Responsibilities

• Design and scale the networking and on-site computing setup for automated labs, including GPU and storage systems that move very large volumes of scientific data.
• Automate network setup and management using Terraform and Ansible, covering pfSense and MikroTik environments.
• Own security for the lab's robotic equipment and physical hardware, working alongside the cloud setup (AWS VPC and IAM).
• Build and protect cloud environments, and keep lab systems and cloud systems securely connected.
• Create ready-to-use infrastructure plans so new laboratory sites can be launched quickly, securely, and in different regions.
• Run security activities such as vulnerability management, testing, and incident response across both lab hardware and web applications.

Requirements

• 7+ years in platform, infrastructure, systems, or DevSecOps engineering.
• Hands-on experience with physical hardware environments such as labs, factories, robotics, or data centers. A background only in software-as-a-service (SaaS) is not enough.
• Strong networking knowledge: routing, VLANs, firewalls, and tools like pfSense and MikroTik.
• Strong Infrastructure-as-Code skills using Terraform, Ansible, Python, and Bash.
• Able to work from the South San Francisco office 3 days a week.
• Must be legally authorized to work in the US (US citizen or Green Card holder). Visa sponsorship is not available.

Skills Required

• Network engineering (routing, VLANs, firewalls, high-speed networking)
• pfSense & MikroTik
• Infrastructure-as-Code (Terraform, Ansible)
• Python & Bash scripting
• AWS (VPC, IAM, ECS, Lambda, Secrets Manager)
• CI/CD (GitHub Actions)
• DevSecOps & vulnerability management
• Security testing (OWASP, SAST/DAST, WAF)
• Incident response
• On-site compute and GPU infrastructure
• VPN & secure access (Tailscale, WireGuard)