Job description
Fingerprint empowers developers to stop online fraud at the source.
We work on turning radical new ideas in the fraud detection space into reality. Our products are developer-focused and our clients range from solo developers to publicly traded companies. We are a globally dispersed, 100% remote company with a strong open-source focus. Our flagship open-source project is FingerprintJS (20K stars on GitHub).
We have raised $77M and are backed by Craft Ventures (previously invested in Tesla, Facebook, Airbnb ), Nexus Venture Partners (previously invested in Postman, Apollo.io, MinIO, Druva) and Uncorrelated Ventures (previously invested in Redis, Rollbar & Gradle).
We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates’ personal and financial information through fake interviews and offers. All Fingerprint recruiting email communications will always come from the @fingerprint.com domain. Any outreach claiming to be from Fingerprint via other sources should be ignored.
We’re looking for a Staff Cloud Infrastructure Engineer to design, build, and operate scalable, secure, and highly available cloud platforms on AWS. You’ll own Infrastructure-as-Code (Terraform), container orchestration (EKS), GitHub-based workflows (Actions + source control), GitOps (Argo/Argo CD), and end-to-end CI/CD strategies with strong observability.
What You’ll Do
- Architect and deliver AWS infrastructure using Terraform (modular, reusable, versioned IaC) across multiple accounts and environments
- Design, deploy, and harden EKS clusters (networking, autoscaling, security, ingress, service mesh optional) and standardize app deployment patterns
- Implement GitOps with Argo/Argo CD (ApplicationSets, sync policies, RBAC, SSO, secrets management, progressive delivery)
- Build CI/CD pipelines with GitHub Actions (reusable workflows, artifact strategy, rollouts/rollbacks, automated quality gates)
- Define SLI/SLOs and enable observability with metrics, logs, traces, alerting, and runbooks using best-in-class tools
- Drive platform reliability and security: patching, upgrades, backups, disaster recovery, IAM least privilege, secrets, and compliance guardrails
- Optimize performance and cost: autoscaling, right-sizing, spot/on-demand strategies, efficiency dashboards
- Partner with developers to create golden paths, templates, and documentation that accelerate safe delivery
- Participate in on-call, lead incident RCAs, and drive improvements through code and process changes
Required Experience
- 5–8+ years building and operating production cloud infrastructure (preferably AWS)
- Strong Terraform expertise: modules, workspaces, state management, CI validation (fmt/validate/tflint), policy as code (Sentinel/OPA)
- GitHub & GitHub Actions: branch protection, environments, reusable workflows, OIDC to AWS, secrets/variables, caching, matrices
- AWS services: VPC, IAM, EKS, ALB/NLB, EC2/EKS node groups, ECR, RDS/ElastiCache, S3, CloudWatch/CloudTrail, KMS, Secrets Manager
- EKS & container orchestration: Helm/Kustomize, rollout strategies, cluster autoscaler, networking (CNI/ingress), HPA/PDBs
- Argo & Argo CD: Applications & ApplicationSets, sync/health checks, drift detection, RBAC, SSO
- Observability tools: metrics/logs/traces (Prometheus/Grafana, OpenTelemetry, Datadog, New Relic, Honeycomb, CloudWatch, ELK/OpenSearch)
- CI/CD strategies: trunk-based, quality gates (tests, SAST/DAST, IaC scans), artifact/versioning, environment promotions, canary/blue-green
- Strong scripting (Bash/Python), configuration tooling (Helm/Kustomize), solid Linux and networking fundamentals
- Clear communicator with a bias for automation, documentation, and collaborative problem-solving
Nice to Have
- Service Mesh (Istio/Linkerd), progressive delivery (Argo Rollouts/Flagger)
- Security tooling (Snyk, Trivy, AWS Security Hub, IAM Access Analyzer)
- Data plane experience (Kafka/MSK, Redis/ElastiCache, RDS/Aurora operations)
- Cost management/FinOps exposure for Kubernetes and AWS
We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates’ personal and financial information through fake interviews and offers. All Fingerprint recruiting email communications will always come from the @fingerprint.com domain. Any outreach claiming to be from Fingerprint via other sources should be ignored.
Offers vary depending on, but not limited to, relevant experience, education, certifications/licenses, skills, training, and market conditions.
Due to regulatory and security reasons, there’s a small number of countries where we cannot have Fingerprint teammates based. Additionally, because Fingerprint is an all-remote company and people can join our workforce from almost any country, we do not sponsor visas. Fingerprint teammates need to be authorized to work from their home location.
We are dedicated to creating an inclusive work environment for everyone. We embrace and celebrate the unique experiences, perspectives and cultural backgrounds that each employee brings to our workplace. Fingerprint strives to foster an environment where our employees feel respected, valued and empowered, and our team members are at the forefront in helping us promote and sustain an inclusive workplace. We highly encourage people from underrepresented groups in tech to apply.
If you are applying as a resident of California, please read our CCPA notice here
If you are applying as a resident of the EU, please read our GDPR notice here
