About the role
Engineer — Production Engineering Location: San Francisco Bay Area (Hybrid/Onsite) Type: Full-time Stage: Early-stage startup
About
the Role We are building the control plane for AI agents in teams and companies. As a Production Engineer, you will own the infrastructure, security, and compliance systems that allow our platform to ship fast and run reliably at scale. This is not a traditional ops role — you will write real code, contribute directly to the product, and own the full security and compliance surface of an early-stage company. You'll work across Kubernetes infrastructure, cloud delivery, agent sandboxing, SOC2 compliance, IT systems, and production observability — and you'll contribute to the product itself, building security-sensitive features and auditing application code for vulnerabilities. If you want to own the production backbone for the agent-native era — from a Terraform module to a pentest to an API key implementation — we want to talk.
What You'll Own 1. Cloud & Kubernetes Infrastructure Our Stack: Manage and evolve our production and staging infrastructure on GCP (GKE) using Terraform. Own DNS, networking, and environment configuration end-to-end. Customer Environments: Deploy and operate within customer VPCs across AWS, Azure, and GCP — adapting to varied infrastructure constraints, security
requirements, and enterprise networking configurations. Agent Sandboxing: Build and maintain Kubernetes-based sandboxing for agent execution — ensuring agents operate within strict network boundaries and must route through our API gateway rather than having unfettered internet access. Observability: Own our observability stack, including OpenTelemetry instrumentation and integrations with New Relic and Splunk, to give
the team deep visibility into system performance and agent runtime behavior. 2. Security, Compliance & IT SOC2 & Audits: Lead infrastructure and operational work to support SOC2 compliance, including audit preparation, evidence collection, and control implementation. Penetration Testing & Bug Bounty: Manage our HackerOne engagement — coordinating pentests, triaging incoming bug bounty reports, and driving remediation. Product Security: Audit application code for security vulnerabilities, contribute security-sensitive product features (e.g., API key management), and ensure product and infrastructure security are coherent end-to-end. IT & Identity: Own our IT stack — Okta, device management, and access controls — keeping the company secure as we scale. 3. CI/CD & Progressive Delivery Deployment Pipelines: Design and maintain safe, automated CI/CD workflows supporting rollout strategies like canary and blue-green deployments. Release Velocity: Make shipping to production a routine, boring, highly automated non-event.
