Senior DevOps Engineer

About this role

LocalStack - the Local Cloud Sandbox for Developers and AI Agents We are a fast-growing Series A startup building cutting-edge technology to revolutionize cloud development processes and support highly efficient dev&test feedback loops. We’ve closed our last $25mil round in Q4 2024, led by Notable Capital , CRV and Heavybit . LocalStack is a local cloud development platform. LocalStack makes it easier, faster, and less expensive for software teams to ship reliable, high-quality applications to the cloud. The cloud was built to run software, not to support AI-native development workflows. As the world's leading local cloud development platform, LocalStack provides secure local sandboxes that simulate cloud environments, enabling AI agents and software developers to find and fix risks faster and more effectively than they can in the cloud. Our customer base ranges from SMBs to Global Fortune 500 companies. Our clients include companies like NASA, Harness, IBM, Workday, Comcast, Apple, 3M, Block and many more. We are sustainably growing our globally distributed teams across GTM, operations and engineering. In 2025 we almost doubled in size and continue to grow across all areas in 2026. LocalStack is headquartered in Zurich/Switzerland 🇨🇭, with a small engineering office in Vienna/Austria 🇦🇹 and remote team members from 25 countries including 🇺🇸the US, 🇫🇷FR, 🇬🇧UK, 🇨🇦CA, 🇪🇸ES, and many more! 👉Check our Notion Candidate Handbook and our GitHub ! ✅ What you will be working on/responsible for Own the internal cloud infrastructure and serve as the primary point of contact for cloud operations and infrastructure requests. Manage and continuously improve our multi-account cloud environment, ensuring security, governance, and compliance best practices are consistently applied. Support and maintain compliance with SOC 2 Type II and ISO 27001 , ensuring audit evidence is prepared continuously rather than only during audit periods. Operate and improve our identity and access management, including SSO, MFA, permissions, and joiner/mover/leaver processes. Maintain and monitor self-hosted internal services, ensuring they meet agreed service levels and that vulnerabilities are tracked and resolved efficiently. Monitor the security and health of our cloud environment through continuous posture management and proactive risk identification. Own infrastructure cost management for the services under your responsibility and help other teams proactively identify cost or reliability risks before they become issues. Collaborate with engineering teams to improve the reliability, scalability, and operational excellence of our cloud platform. ✅ Experience we expect you to bring to the role Deep AWS experience at org level: Organizations, Control Tower, multi-account landing zones, IAM/SCPs, Security Hub/GuardDuty, VPC and multi-AZ networking IaC as the only way infrastructure gets created - module design, state management, review and promotion between environments. Tool-agnostic, but real depth in at least one (Terraform/OpenTofu, CDK, Pulumi) Understands how to evolve existing systems toward compliance - can look at a running estate and work out what has to change, in what order, to satisfy SOC 2 / ISO 27001. Having been through an audit or certification is a bonus, not a requirement Internal workforce identity and access: IdP-backed SSO/MFA, centralised access management, automated joiner/mover/leaver Self-hosting and operating shared internal tooling that other teams depend on - deploy, upgrade, back up, own the uptime Observability and alerting design, plus on-call for a distributed team Cloud cost management / FinOps fundamentals Azure is a nice-to-have extension, not a requirement - AWS depth is what matters, but the estate is going multi-cloud so appetite for it counts Bash, Python and/or Go for tooling. Comfortable with ambiguity in a remote-first environment, and happy being the first hire in a function 🌱 Values we hold in LocalStack Care: we creat

Skills and categories