Senior DevOps Engineer

About C-Infinity

C-Infinity builds foundational AI for mechanical design and manufacturing. Our first product, AutoAssembler, connects to a customer's CAD and PLM environment to automate process planning, accelerate ECO reviews and generate production-ready assembly instructions.

You own production, staging and demo environments and the path from merged commit to live deployment in a customer cloud. We run on AWS and Azure, often inside customer-controlled tenants.

This role is for someone who likes production accountability, repeatable deployments and the practical details of running software inside networks we do not control.

What you'll do
Infrastructure and release

Own Terraform across VPC, ECS, DocumentDB, EFS, ALB, IAM and Secrets Manager. Keep environments free of console drift. Build CI/CD with staged promotion across GHCR, ECR and ACR, including health checks, rollout gates and rollback.

Customer deployments

Deploy trials and production systems into customer AWS and Azure accounts. Handle load balancing, zero-trust access, DNS, TLS, SSO, customer networking constraints and repeatable automation.

Operating production

Own observability, backups, restores, on-call readiness, cost visibility, secrets handling and IAM boundaries across our accounts and customer tenants.

GPU and container operations

Support Docker, Compose and GPU hosts for internal and customer deployments. Keep GPU capacity visible and deployable without turning each environment into a snowflake.

Runbooks and automation

Write Python automation and practical runbooks for repeated operational work: tenant setup, environment validation, deployment checks, certificate rotation and incident response.

What we're looking for

Seven or more years in infrastructure, DevOps, platform or SRE roles, with most of the following:

Production accountability - systems where downtime had consequences.
Terraform and production depth on AWS (ECS, VPC, ALB, IAM, Secrets Manager), with working familiarity on Azure.
CI/CD with multi-registry promotion and progressive delivery: staged rollouts, health checks that gate promotion, automated rollback.
Customer or enterprise deployments where networking, identity, DNS or TLS made the work non-trivial.
Linux, containers, DNS and TLS, debugged inside someone else's network.
Secrets management and IAM boundaries that hold up under customer security review.
Python for deployment and operational automation.
You keep going when the logs don't explain it.
You can explain a design decision to an engineer and to a customer's security reviewer in the same week.
Nice to have
MongoDB/DocumentDB operations.
GPU containers (NVIDIA Container Toolkit) and capacity management.
Zero-trust tooling such as Tailscale.
Deploying into customer-controlled accounts and clearing security review.
CAD or PLM exposure.
Government and regulated deployments

Some of our work runs in US government and other regulated environments. None of this is required; each is a plus.

NIST 800-171 or CMMC Level 2 - or SOC 2, ISO 27001 or FedRAMP taken through to evidence, SSP and POA&M.
AWS GovCloud or Azure Government - including where they diverge from commercial regions.
Export-controlled data - ITAR or EAR-aware handling and access control.
US citizenship, or clearance eligibility - some customer environments are restricted to US persons.
How we work
We remove moving parts before we add them. Where two designs work, we take the one that's simpler at 3am.
Engineering owns product outcomes. If you see a better way for the product to behave, say so - and usually build it.
Portability and simplicity pull against each other. We make that trade deliberately, not by default.
We use AI heavily and expect you to use it well - owning the output as if you'd written every line, because shipping it means you did.
Adopting something proven is a legitimate outcome. Not every problem needs a system built for it.
Flag being out of depth early rather than late.
Details

Hybrid in the Bay Area, plus equity. Ranges for other locations are adjusted to the local market.

C-Infinity is an equal opportunity employer. We consider all applicants without regard to race, color, religion, sex, gender identity, gender expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under state or federal law. If you need an accommodation at any point in the process, tell us and we will arrange it.

Interested?

Send us a note with your resume or LinkedIn profile and a few lines about the work you want to own.

Apply