Senior Infrastructure Engineer

About the role

Level is a learning technology company dedicated to helping students build real academic and life skills with confidence and joy. We combine proven curriculum principles with world‑class interactive design to make meaningful practice something students want to come back to, not something they struggle through. We support what teachers, schools, and parents are already doing by increasing student engagement with high‑quality, standards‑aligned practice that reinforces classroom learning.

As a Senior Infrastructure Engineer on the Platform team, you will architect, build, and operate the cloud infrastructure and developer platform that every Level product runs on. You will own critical infrastructure end‑to‑end — the Kubernetes platform, infrastructure‑as‑code, CI/CD and GitOps delivery, networking (ingress and egress), DNS, observability, and cloud security posture — and provide the reliable, self‑service foundations the rest of engineering builds on. You will work on a small, senior‑leaning team where infrastructure decisions have direct, visible impact on reliability, performance, cost, and developer velocity.

Responsibilities

• Design, build, and operate secure, highly available AWS infrastructure using Terraform/OpenTofu with a GitOps workflow (Atlantis); own capacity planning, disaster recovery, and cost optimization.
• Operate and evolve EKS, including autoscaling (Karpenter), upgrades, core add‑ons, and Helm‑based delivery (ArgoCD).
• Build and maintain GitHub Actions pipelines that enable platform and product teams to ship fast and safely, providing self‑service tooling where appropriate.
• Own ingress/egress (Traefik), service mesh and mTLS (Linkerd/Envoy), load balancing, edge TLS, and DNS (Route 53, Terraform‑managed).
• Implement observability with OpenTelemetry and SigNoz; use telemetry to drive reliability, performance, and cost decisions; serve as an escalation point for complex incidents and lead post‑mortems.
• Apply cloud security best practices across identity, secrets, and network boundaries, especially for student data and K‑12 privacy; operate security tooling (Security Hub, GuardDuty, Inspector, Snyk) and organizational guardrails (Control Tower, SCPs).
• Set platform standards, mentor engineers, and continuously improve the platform.

Requirements

• 5+ years operating large‑scale cloud infrastructure (AWS strongly preferred).
• Deep IaC experience (Terraform/OpenTofu; CloudFormation, Pulumi, or CDK also relevant).
• Strong production experience with Docker and Kubernetes (EKS).
• Proficiency in scripting/automation (Python, Go, or Bash).
• Solid cloud networking fundamentals (VPC, DNS, load balancing, ingress, firewalls/WAF, VPNs) and security best practices.
• Proven CI/CD and GitOps experience (GitHub Actions or similar).
• Observability experience (metrics, logs, traces) used to drive real decisions.
• Track record leading infrastructure projects independently, end‑to‑end.
• Strong communication across technical and non‑technical audiences.

Preferred qualifications

• Experience with ArgoCD, Atlantis, Linkerd/Envoy, Traefik, Karpenter, Helm.
• Familiarity with OpenTelemetry, SigNoz, Grafana, Datadog, or Prometheus.
• Background with Backstage or other internal developer platforms.
• AI/ML infrastructure experience (GPU scheduling, model/agent hosting, inference gateways).
• Rust service CI/CD, CloudFront/CDN experience.
• AWS Solutions Architect or DevOps Engineer – Professional certification.
• Distributed‑systems background and contributions to open‑source infrastructure projects.