Infrastructure Security Engineering/Development Manager
Shopify
Company Description
Securing infrastructure is a core part of engineering at Shopify. The Infrastructure Security Team cares deeply about securing and supporting our production environments, and about removing the toil associated with this sort of work.
The Infrastructure Security Team, made up of the Multi-Tenancy Security Team and the Software Supply Chain Security Team, designs, builds, and deploys technology that safeguards our merchants and their data. This allows Shopify’s engineering teams to build world-class ecommerce software in secure environments, and that makes commerce safer for everyone. We’re a team that services a large organization, maximizing our impact by creating low-friction automated solutions that enable other teams to do their work and deliver impact to merchants in the safest way possible. These efforts have let us build collaborative relationships founded on high trust and empathy throughout the Shopify engineering organization. At the core of all our efforts, we endeavour to make the secure way easy, and the easy way secure.
This team is filled with highly skilled and engaged folks working to solve high-impact, interesting problems. If what you’ve seen so far has caught your fancy, you must be wondering what we’d expect of you.
Job Description
In this role you will:
Grow the team both through mentoring, acting as a subject matter expert to a team of ICs, and external hiring.
Help define the long-term vision of infrastructure security at Shopify and rally the team around and towards said vision. Our scale is massive - Shopify powers over 1 million merchants in over 175 countries worldwide.
Help to roadmap and decompose our vision into granular milestones and projects, aid the team in getting from vision to reality.
Own team and technical decisions, demonstrate high judgement and help drive team consensus.
Build, leverage, and own cross-line and organization relationships.
Our Technology stack:
Falco: A cloud native Intrusion Detection System that gives us full visibility into what our workloads are doing.
Google Cloud: Infrastructure as a Service so we can focus on our apps instead of computer hardware.
Kubernetes: Shopify runs on Kubernetes. This provides many advantages like security constraints, auto-scaling, fault tolerance, and much more.
Terraform: Declarative configuration for all of our infrastructure.
Qualifications
You'll need to have:
Be curious.
Be empathetic. No brilliant jerks.
Proven team leadership skills. Your management skills and technical depth allows you to develop and mentor others as well as build credibility with your team while executing broader engineering strategies.
You have successfully built and grown teams of engineers during your career.
Be accountable for and driving the execution of your team
Have proven technical leadership skills using technologies like Kubernetes, Terraform, Go, etc. You feel comfortable diving into the code and interacting with developers at all levels of seniority.
You have successfully built and grown teams of engineers during your career.
Be committed to creating high quality, low-friction, automated (where possible) solutions to help safeguard and champion for the security of our merchants.
Bonus experience:
Systems security-related interests. You’ve played CTFs/war games or solved similar security puzzles. You know what binary exploitations are, how shell injections work, and how to secure a system.
A love of all things Security Operations. Complex systems and software are where your brain thrives. You excel at finding and fixing security concerns and weaknesses in them
Intimate understanding of logs and their usefulness. You know that the information is there, and you always want to make it more discoverable (e.g. building usable alerting and reporting pipelines).
Experience with any of the following: Kubernetes, Terraform, Vulnerability and Patch Management, Identity and Access Management, Incident Handling and Response.
Contributing to the open source community (e.g. kubeaudit, voucher, krane).
Additional Information
Check out what's been keeping the team busy:
Bringing code signing to the cloud through Binary Authorization and contributing these efforts back to the community
Our in-house built just-in-time permissions management system clouddo
Shopify is now permanently remote, and working towards a future that is digital by default. Learn more about what this can mean for you.
Our belief is that a strong commitment to diversity & inclusion enables us to truly make commerce better for everyone. We encourage applications from Indigenous peoples, racialized people, people with disabilities, people from gender and sexually diverse communities, and/or people with intersectional identities. Please take a look at our Sustainability Reports to learn more about Shopify’s commitments to our communities, and our planet.
At Shopify, we understand that experience comes in many forms. We’re dedicated to adding new perspectives to the team - so if your experience is this close to what we’re looking for, please consider applying.
Click on apply will take you to the actual job site or will open email app.
