Senior Infrastructure Engineer

TrueBiz is a YC-backed merchant risk intelligence platform helping financial institutions understand whether the businesses they serve are legitimate.

We’re at a rare stage as a company: we already work with some of the largest companies in payments and financial services, but we’re still a small team where exceptional people can have an enormous impact on what gets built and how the company develops.

We’ve intentionally stayed lean, moved quickly, and given people much more ownership than they would typically have at a company with our level of enterprise traction. There are very few layers between identifying an important problem and actually solving it.

The mission matters too. Our technology helps stop fraudulent and abusive businesses from gaining access to the financial system, while helping legitimate businesses get approved faster and with less friction.

The Role

You will own the reliability of TrueBiz's production platform. That means the AWS infrastructure, the release path, the alerting, and the response when something breaks. It is the first dedicated infrastructure role here. Today a lot of this work is done by the Director of Engineering alongside other duties, and you will take it over and make it yours.

Reliability is the primary job. You will also run the technical side of our established security and SOC 2 program day to day, working alongside a dedicated compliance platform and outside security advisors who handle policy, audits, and architecture review. Your part is the hands-on operation of the controls and the evidence behind them.

What you will do

Reliability (most of your time)

Carry the pager for production, lead incident response, and write the postmortems that keep an incident from repeating. Own alerting and observability end to end: alarms, dashboards, log pipelines, and regular proof that alerts actually reach a human. Size the platform against measured traffic. Our load arrives in bursts of thousands of reviews in a few minutes, and you will own the autoscaling floors, queue depths, and load tests that keep those bursts uneventful. Define service level objectives with engineering and report against them. Run backup and disaster recovery: tested database restores, documented recovery targets, and a periodic recovery drill.

Infrastructure and releases

Manage all infrastructure as code in AWS CDK (Python). Nothing in production is changed by hand. Own the release path from merge to production: the CI/CD pipeline, deployment PRs, post-deploy verification, and rollback. Plan and execute migrations and decommissions, including database schema changes on large tables, engine upgrades, and retiring old systems completely. Operate the data layer: Aurora PostgreSQL, read replicas, and Redis. Keep staging a trustworthy rehearsal for production. Manage AWS and vendor cost, including reserved capacity and cost per review.

Vendor reliability

Monitor the error rates, latency, and quota use of the third-party APIs our reviews depend on, and tell apart a vendor outage, a rate limit, and an exhausted plan. Work with application engineers on the client behavior that protects us when a vendor degrades: timeouts, backoff, circuit breakers, and budgets. Advise on plan sizing and renewals with real usage data.

Security operations (secondary)

Triage findings from GuardDuty, Inspector, and dependency scanners, and remediate vulnerabilities on a severity-based schedule. Run identity and access: single sign-on, least-privilege roles, access reviews, onboarding and offboarding, and credential hygiene. Own secrets and encryption keys: inventory, rotation, and audit logging. Maintain the network edge, including rate limiting and web application firewall rules. Work with our outside security advisor on architecture review and the annual penetration test, and close the findings.

Compliance (secondary)

Operate the technical controls behind our SOC 2 program and produce the evidence