Default Job Posting

Software is being rewritten in real time. AI agents are starting to write more code than humans do, at a speed no security team has ever had to match, and that single shift is opening up the biggest opportunity our industry has seen in a decade. We're not bracing for it, we're building the company that owns it.

Snyk is building the next generation security platform where security isn't a set of tools people operate. It's a team of security agents working alongside your engineers, finding, fixing, and governing risk at the speed software is now built. These agents work alongside both the company build and the agents they adopt. Security stops being a queue of work waiting for people, and becomes a coordinated workforce companies direct and trust.

Our Opportunity:

Runtime Foundation owns the shared cloud foundations that every Snyk service runs on: production Kubernetes clusters, ingress and service mesh, infrastructure provisioning and access, cluster upgrades, reliability and disaster recovery, and our AWS and GCP core services. We’re looking for a Staff Software Engineer to set technical direction for this platform, lead our most ambiguous and consequential infrastructure work, and act as a trusted technical authority for teams across Snyk that depend on us.

You’ll spend your time:

• Setting technical strategy for the platform, shaping the roadmap with engineering and product leadership, and making the case for investment in reliability, resilience and cost.

• Leading cross-team, org-level infrastructure initiatives end-to-end, from problem framing and alignment through to production rollout and adoption.

• Acting as a technical authority for engineering teams across Snyk, setting infrastructure design standards, reviewing significant proposals, and influencing how teams build securely and reliably on our platform.

• Driving architectural direction for Kubernetes at scale, including cluster and node upgrade strategy, and leading diagnosis of deep networking, scheduling and resource-pressure issues in high-severity incidents.

• Defining the architecture for in-cluster platform services (ingress controllers, cert-manager, autoscaling components) and the Helm chart standards the wider organisation builds on.

• Shaping Terraform module architecture at organisational scale, including how state, drift and change safety are managed across a large multi-cloud estate.

• Making multi-cloud (AWS/GCP) architecture decisions with long-term consequences, including IAM, networking and managed-service resilience.

• Owning ingress, networking and service mesh architecture, including TLS, rate limiting and multi-tenant traffic design.

• Raising the engineering bar across the department: improving observability and operational practices, eliminating classes of toil systemically, and growing senior engineers through mentoring, sponsorship and example.

You should apply if you:

• Have extensive professional experience (typically 5+ years) operating and architecting production infrastructure at scale, with a track record of leading work at organisation level rather than team level.

• Have deep, hands-on expertise across Kubernetes, Terraform, Helm and multi-cloud (AWS/GCP) environments, and have led large, multi-team migrations or platform redesigns that shipped and stuck.

• Can take an ambiguous, cross-organisational problem, define what success looks like, build alignment across teams without formal authority, and communicate trade-offs clearly to engineers, directors and executive stakeholders.

• Have a history of making durable architectural decisions, and of knowing when to say no, when to defer and when to change course.

• Have mentored and sponsored senior engineers, and have measurably raised the technical bar of a team or department.

• Are comfortable being the go-to technical authority for other teams, and for leadership during significant incidents and risk discussions.

• Treat clear documentation (design docs, ADRs, runbooks) and automated testing as core to sustainable engineering, and set the example for others.

We’d especially love to hear from you if you:

• Have designed or operated Teleport, RBAC, or JIT/least-privilege access systems at scale.

• Have driven cloud cost optimisation outcomes, including tools like PerfectScale, and tied them to business impact.

• Have built reusable CI/CD platform abstractions (CircleCI orbs, GHA reusable workflows, or similar) and driven org-wide adoption.

• Have led disaster-recovery strategy, backup validation and recovery automation across Kubernetes and cloud services, including DR exercises with cross-team participation.

Snyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk.

Snyk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.