Staff Site Reliability Engineer, InfraSec

Description

Sprout Social is looking to hire a Staff Site Reliability Engineer to the Engineering team.

Why join Sprout’s Engineering team?

With collaborative cross-functional teams that span mobile, front-end, back-end and site reliability engineering—the Sprout Engineering team is a place to sharpen your craft and solve hard problems with the smartest people in the industry. On a daily basis, we process tens of billions of requests and tens of billions of asynchronous events. We also ingest billions of social messages every day, and ship more than 1,000 production deployments every month. You’ll get to work on a “tech-giant” scale with smaller, supportive teams where every engineer has the chance to make an impact on our company, and our customers. The best part? In our industry, you often have to switch jobs or even companies to learn a new part of a tech stack or business. But at Sprout, our product is a suite, so you just need to move teams. You’re able to diversify your skills, which not only benefits your team—but also your career.

What you’ll do

• Create “Paved Roads”: standard production-ready technology that all of our engineering teams can leverage to build secure experiences.
• Work to improve Sprout’s security posture through automation, auditability, and clear processes in order to build sustainable and secure solutions.
• Enforce security best practices through code to minimize chances of misconfiguration and increase confidence in service adoption in the cloud.
• Collaborate cross-functionally with product, site reliability engineering, data platform, and GRC teams to deliver scalable, secure-by-default infrastructure
• Act as a multiplier: leading with influence across teams and orgs, creating momentum for cross-functional initiatives, and driving alignment on security best practices.
• Lead by example—pairing deep technical expertise with pragmatic execution and mentorship.
• Own strategic initiatives such as IAM modernization, zero trust, vulnerability remediation pipelines, and secure paved road delivery.

What you’ll bring

We’re looking for a security-minded technologist with a strong infrastructure foundation and a bias for automation and simplification who thrives on ambiguity and can move fluidly between high-level strategy and deep technical execution. If you’re interested in guiding engineers to shape the future of security at Sprout from the inside out, we’d love to talk with you!

The minimum qualifications for this role include:

• 7+ years building and maintaining reliable, scalable systems in a Linux/UNIX environment
• 5+ years experience with one or more infrastructure-as-code or configuration-as-code tools, such as: Terraform, Chef, Ansible, SaltStack, etc.
• 3+ years experience operating and maintaining cloud security tools such as WAF, IAM, AWS Config, etc
• 3+ years experience leading engineering projects and initiatives, including the design, development, and implementation of infrastructure systems, ensuring delivery of reliable services, prioritizing technical improvements with cross-functional teams, and/or driving technical vision.

Preferred qualifications for this role include:

• 3+ years experience with Amazon Web Services (AWS)
• Experience with Security Tooling and Vendor selection plus management of third-party security tooling such as CNAPP, CWPP, CSPM, IDS/IPS, etc
• Experience in at least one programming language, such as Python, Java, Golang, or Ruby
• Experience with building CI/CD Pipelines using tools such as Jenkins, Gitlab, Github Actions, etc.

How you’ll grow

Within 1 month, you’ll plant your roots, including:

• Experience Sprout’s in-depth onboarding, covering everything from our company mission and values, hearing directly from executives and founders, to deep training on our products and the value that Sprout delivers to our customers
• Make a plan with your manager to set initial priorities, align on expectations for your role, plant goalposts for your career, and learn about Sprout’s approach to site reliability engineering
• Learn about and interact with some of our key security infrastructure: Threatstack, WAF, IAM, OneLogin, etc
• Start familiarizing yourself with how we use Terraform, Jenkins, Chef, and Kubernetes to deploy infrastructure, configuration, and code changes

Within 3 months, you’ll start hitting your stride by:

• Complete your first end to end project, such as a new infrastructure deployment using Chef and Terraform
• Gain familiarity with our platform architecture and DevSecOps practices
• Use our observability tools to troubleshoot production performance or stability issu