Keycard
Software Engineer, Infrastructure
US - Remote +1 · Remote · Full-time · Posted Oct 27, 2026
- Location
- US - Remote
Canada - Remote
About the job
Own Keycard’s infrastructure for building, releasing, and operating its hosted service and customer-cloud deployments, including its BYOC product.
What you'll do
- Build and operate shared deployment and release systems for hosted, dedicated, and customer-cloud installations, with staged rollout and rollback.
- Define BYOC compatibility, upgrade, security, and support practices; make installs repeatable and manageable without standing access.
- Set hosted-service reliability targets and build observability, runbooks, incident response, and audited agent-assisted operations.
What they ask for
- Build infrastructure as software using Pulumi, Terraform, or CDK, and write Go or TypeScript tooling; production Kubernetes and Helm experience.
- Deep AWS experience, especially IAM and permission boundaries, Organizations and SCPs, and VPC networking.
- Experience running and upgrading software in customer-controlled or regulated environments, and shipping versioned releases customers upgrade on their own schedule.
- Experience working directly with customer platform and security teams, designing systems with separate control and data planes, and using coding agents in infrastructure work.
Nice to have
- Experience building a BYOC, single-tenant, or self-hosted offering, or with cell-based architecture.
- GCP or Azure experience; production workload identity and PKI; OAuth, OIDC, or mTLS; or interest in MCP.
Tools
Pulumi, Terraform, CDK, Go, TypeScript, Kubernetes, Helm, AWS
AI focus
Use coding agents for infrastructure work and build agents for pre-install checks, installations, failed-upgrade triage, and runbook drafts; agent actions use scoped credentials, are audited, and require engineer approval for customer-account changes.
Model-written summary · the original posting is authoritative