Digital Zone

• Build and run core security capabilities - Stand up and operate the foundations of our security stack: secure development, vulnerability management, cloud security, and security architecture. • Own our security tooling - Select, deploy, configure, and fine-tune tools across scanners and ensure they deliver actionable signals, not noise. • Embed security into engineering workflows - Partner with product and platform engineers to make “secure by default” the easiest path. Help design guardrails that support, not slow down, developer productivity. • Drive pragmatic vulnerability management - Triage and risk-assess vulnerabilities, shape remediation priorities with teams, and track progress so we’re focusing on what matters most. • Continuously improve how we operate - Refine processes, automate wherever possible, and make sure our security practices scale as the company, product, and customer base grow.

• Design, architect, and implement scalable, secure, and cost-efficient AWS infrastructure across multiple regions, aligned with the AWS Well-Architected Framework. • Build, maintain, and evolve all cloud infrastructure using Terraform, enforcing module reusability, remote state management, and IaC best practices across environments. • Own and optimize PostgreSQL database: including performance, scalability, and reliability. • Deploy, manage, and optimize workloads on Kubernetes clusters using Helm and Kustomize. • Design, implement, and maintain CI/CD pipelines using GitHub Actions. • Lead DR planning, runbook creation, and failure scenario modeling — including database backup and recovery strategies. • Support and unblock engineering teams on infrastructure and database needs. • Operate and improve monitoring, logging, and alerting systems — including database-specific monitoring (query performance, replication health, connection saturation) — to ensure high availability and fast incident response. • Participate in and help improve the weekly on-call rotation.