• Administer and maintain AWS and/or Azure environments, including day-to-day operations of virtual machines, networking, and storage • Manage VPCs, subnets, routing tables, security groups, NACLs, and private networking constructs • Deploy, maintain, and optimize EC2 instances, RDS, S3, IAM, KMS, Secrets Manager, and CloudTrail • Build and manage hardened VM images (AMIs / golden images) for consistent, repeatable deployments • Implement and support high availability, auto-scaling, and disaster recovery configurations • Design and maintain infrastructure using Terraform, including modular design, remote state management, and workspace strategies • Identify and implement automation opportunities to reduce manual operational overhead and improve team velocity

• Administer and maintain AWS and/or Azure environments, including day-to-day operations of virtual machines, networking, and storage. • Manage VPCs, subnets, routing tables, security groups, NACLs, and private networking constructs • Deploy, maintain, and optimize EC2 instances, RDS, S3, IAM, KMS, Secrets Manager, and CloudTrail • Build and manage hardened VM images (AMIs / golden images) for consistent, repeatable deployments • Implement and support high availability, auto-scaling, and disaster recovery configurations • Support multi-account or multi-subscription cloud governance structures (e.g., AWS Organizations, Azure Management Groups) • Design and maintain infrastructure using Terraform, including modular design, remote state management, and workspace strategies • Lead or support migrations from legacy IaC tooling (e.g., CloudFormation) to modern frameworks • Enforce policy-as-code guardrails and maintain version-controlled infrastructure repositories • Build reusable, secure baseline modules for VPC architecture, IAM roles, logging, monitoring, and encryption • Administer virtualized workloads across cloud environments, including sizing, patching, lifecycle management, and cost optimization • Support container-based workloads in ECS and/or EKS, including cluster management, networking, and image security • Assist with transitions from legacy compute paradigms (e.g., EBS-backed instances) to modern container or serverless architectures • Implement automated drift detection and remediation for both VMs and containerized environments • Identify and implement automation opportunities to reduce manual operational overhead and improve team velocity • Integrate infrastructure provisioning and security controls into CI/CD pipelines (GitHub Actions, GitLab CI, or equivalent) • Implement and maintain secure secrets management practices • Collaborate with DevSecOps and application engineering teams to enforce least-privilege IAM policies and secure-by-default configurations • Apply and maintain security hardening baselines (CIS Benchmarks, DISA STIGs) for Linux and Windows virtual systems • Configure and monitor AWS CloudTrail, GuardDuty, Security Hub, Config, and centralized logging pipelines • Support SIEM integration (e.g., Splunk, Microsoft Sentinel) and assist with incident response • Maintain vulnerability management lifecycle including patching, remediation tracking, and reporting • Support compliance efforts aligned with relevant frameworks (NIST 800-171, CMMC, HIPAA, SOC 2, or FedRAMP as applicable) • Partner with development, security, and IT operations teams to deliver reliable, scalable services • Produce and maintain thorough documentation — architecture diagrams, runbooks, SOPs, and evidence artifacts for audits or assessments • Contribute to budget management, resource planning, and capacity forecasting for cloud environments

About ScrunchScrunch, a venture-backed startup, is on a mission to bring brands to an AI-first future—where people increasingly rely on LLMs to discover, understand, and act on information that matters to them. As AI search and conversational agents replace traditional web search and browsing, Scrunch helps marketing teams rethink how their products and services are discovered and surfaced on AI platforms like ChatGPT, Claude, Gemini, and more—working with AI platforms, not against them. This shift represents the biggest change to marketing since the dawn of the internet. With $26M in backing from Mayfield Fund, Decibel, Homebrew, GTM Capital, and leading Silicon Valley founders and operators, Scrunch has scaled rapidly since commercial launch. Today, more than 500 paying brands—including Fortune 500 companies like Lenovo, category-defining brands like Skims, and breakout startups like Clerk—use the platform. About the RoleWe're looking for a Senior Infrastructure Engineer to join our team. This is a high-ownership role responsible for designing, building, and operating the foundational systems that power Scrunch's platform – from cloud infrastructure and developer tooling all the way to observability and reliability. Infrastructure at Scrunch is business-critical: our customers depend on it, and you'll have real impact shaping how we scale. Location Requirement: - This role is open to candidates located in and legally authorized to work in the US. Scrunch is a remote organization, but in-office or hybrid work is possible for candidates based in the NYC or Salt Lake City metro areas (and we love to jam in person from time to time!) - Applicants must reside in one of the following states: Arizona, California, Colorado, Florida, Illinois, Indiana, Massachusetts, Maryland, Missouri, Minnesota, New Hampshire, New Jersey, New York, Ohio, Texas, Utah - We are unable to hire outside of these states at this time. What We're Looking For:For this role, we'd like to see candidates that: - Have experience working in a high-velocity software development organization. - Have experience designing, building, and operating cloud services at scale, preferably on GCP. - Have deployed and operated edge compute functions, and understand when it makes sense to run logic at the edge versus further back in the stack. - Can treat infrastructure like software versioned, tested, and deployed through automation rather than one-off console clicks. Experience with Terraform or similar IaC tools is a plus. - Posses a solid understanding of database performance and scaling patterns, and have hands-on experience identifying bottlenecks and addressing them before they become outages. - Familiarity with workflow orchestration tools or job queue systems such as Prefect, Airflow, Temporal, Inngest, or similar, and are comfortable designing reliable, retryable async pipelines. - Have a strong foundation in building observable systems, including structured logging, distributed tracing, metrics dashboards, and alerting. - Are comfortable writing production-quality code (we mostly use python) and approach infrastructure work with a software engineering mindset. Scrunch is an equal opportunity employer. We welcome people of all backgrounds, experiences, perspectives, and identities. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Right to Work E-Verify Participation

• Onboard with your squad and the broader engineering organization • Learn HackerOne’s infrastructure, tooling, and workflows (AWS, Terraform, Kubernetes, Ruby on Rails, GraphQL, etc.) • Participate in the on-call rotation with support from teammates • Take ownership of a scoped infrastructure project and deliver incremental improvements • Independently deliver infrastructure changes that improve reliability, performance, or security • Understand how infrastructure supports product and customer needs, and translate requirements into practical technical solutions • Design, implement, and maintain cloud infrastructure using infrastructure-as-code • Collaborate with cross-functional partners to execute on infrastructure initiatives • Participate in an on-call rotation (one week every four weeks) and help maintain system reliability • Contribute to a positive team culture by sharing knowledge and supporting teammates • Continuously improve your technical skills and operational effectiveness