Software Engineer, Infrastructure

We are looking for an infrastructure engineer who treats cloud infrastructure as a software problem. You will own Hebbia's AWS footprint end-to-end — accounts, networking, container orchestration, and everything defined in code — and the developer platform that our engineering teams build on top of it. Infrastructure-as-code is the core craft here: if it is provisioned by hand, it is not done.

This is a build role, not a support role. You will spend your time designing multi-account architecture, writing the IaC and automation that makes environments reproducible, driving down cloud spend, hardening our infrastructure for enterprise and financial-services scrutiny, and making the path from a developer's laptop to production fast and boring. Your remit is the foundation itself: the infrastructure and platform that every engineer at Hebbia builds, tests, and ships on.

• Own Hebbia's AWS footprint: multi-account architecture, networking, IAM, and the container orchestration layer our services run on

• Define all infrastructure as code, with the same review, testing, and versioning standards we hold application code to

• Own cloud cost and capacity: model growth, right-size infrastructure, and write the automation that prevents over-provisioning before it shows up on the bill

• Build and own the developer platform — build pipelines, ephemeral and preview environments, and development tooling that every engineer at Hebbia depends on

• Continuously improve CI/CD so teams ship quickly and safely, and treat build times and pipeline throughput as products with owners and metrics

• Harden our infrastructure for the security and compliance bar our financial-services customers hold us to: threat modeling, least-privilege access, secrets management, and automated compliance and audit tooling

• Architect for scale readiness — multi-region capability, network and account isolation, and the growth headroom enterprise deployments demand

• Partner with product engineering as a peer engineer, co-designing infrastructure alongside the systems that run on it

• Evaluate and integrate new infrastructure technology where it measurably improves scalability, security, or engineering velocity
  

• 5+ years building and operating cloud infrastructure at a venture-backed startup or top technology firm

• Deep expertise with infrastructure-as-code tooling, and a track record of managing a real production estate entirely in code

• Cloud platform fluency, with production depth in AWS (we are an AWS shop) — networking, IAM, and account architecture, not just compute

• Strong command of containerization and orchestration technologies

• Production-grade proficiency in at least one scripting or backend language for automation and internal tooling: Python, Go, or similar

• Strong CI/CD pipeline expertise and a demonstrated record of improving developer velocity without sacrificing safety

• Working knowledge of OS-level and networking concepts, and the ability to debug problems that span the boundary between infrastructure and application

• Experience instrumenting infrastructure with monitoring and observability tooling, and surfacing the signals engineering teams need to understand platform health and cost

• Hands-on experience securing cloud infrastructure to an enterprise compliance bar: least-privilege IAM, secrets management, hardening, and audit readiness

• Experience managing cloud cost at scale, or building the tooling and guardrails that keep spend predictable, is a strong plus
  

The salary range for this role is $160,000 to $300,000. This range may be inclusive of several career levels at Hebbia and will be narrowed during the interview process based on the candidate's experience and qualifications. Adjustments outside of this range may be considered for candidates whose qualifications significantly differ from those outlined in the job description.