Staff Software Engineer (DevOps / Platform Engineering) at Liberate

<h3><strong>About Liberate</strong></h3> <p>Liberate builds AI agents to automate manual tasks for the $2.7T insurance industry. We started with voice, the hardest and most valuable channel in insurance, and are now expanding into full workflow automation across sales, servicing, and claims. Our long-term vision is to build reasoning agents capable of handling the entire spectrum of insurance carrier and broker operations. We've raised $72M to date, including a $50M Series B in October 2025, backed by top-tier venture firms.</p> <h3><strong>About The Role</strong></h3> <p>We are looking for a seasoned <strong>Staff DevOps and Platform Engineer</strong> to own and evolve the infrastructure that powers Liberate’s real-time AI voice and workflow automation systems. This is a critical technical leadership role. You will inherit and advance a modern AWS-based platform that spans PBX telephony, canary routing, MTLS-based integrations with carriers, secure production environments, CI/CD, and compliance posture.</p> <p>You will drive reliability, scalability, and operational rigor across our multi-agent runtime. You will also mentor engineers, design forward-looking system improvements, and create the platform foundations that enable Liberate’s rapid product expansion.<br><br><strong>Key Responsibilities</strong></p> <h2><strong>Infrastructure Architecture and Ownership</strong></h2> <ul> <li>Lead architecture and operation of core AWS infrastructure including PBX systems, EKS, networking, IAM, VPC design, and secure environment isolation.</li> <li>Own and improve Canary routing infrastructure for LRA (LLM REST API) via Traefik and GitOps patterns.</li> <li>Maintain and optimize CI/CD flows including GitHub-based CodeBuild jobs, artifact pipelines, and environment promotion workflows.</li> </ul> <h2><strong>Secure Integrations and Network Edge</strong></h2> <ul> <li>Manage and evolve MTLS proxy infrastructure used to integrate with carrier systems like Frontline.</li> <li>Own HAProxy-based proxy fleet, certificate lifecycle, root CA management, and IP-restricted ingress patterns.</li> <li>Ensure secure, audited access to production systems, tokens, and root-level accounts.</li> </ul> <h2><strong>Operational Excellence</strong></h2> <ul> <li>Lead incident response, on-call rotations, and postmortems. Improve reliability metrics (SLA/SLO/SLI) for voice, agent runtime, and workflow systems.</li> <li>Maintain and improve non-obvious production infra details including external service dependencies, version pinning, and update cadences.</li> <li>Partner with AWS Support to optimize pricing, scaling configs, and resource utilization.</li> </ul> <h2><strong>CI/CD, Tooling, and Developer Experience</strong></h2> <ul> <li>Modernize developer workflows: streamlined builds, repeatable environments, safe deployment strategies (blue/green, canary, feature flags).</li> <li>Build internal tools and abstractions to make engineers productive while enforcing safety, configuration hygiene, and compliance requirements.</li> </ul> <h2><strong>Compliance and Security</strong></h2> <ul> <li>Lead infrastructure-related components of SOC2, pen-testing, and Vanta-driven controls.</li> <li>Ensure auditability, traceability, secure storage of credentials, and alignment with enterprise customer expectations.</li> </ul> <h2><strong>Cross-Functional Leadership</strong></h2> <ul> <li>Work closely with AI Platform, Forward Deployed Engineering, and Product teams to translate business goals into scalable infrastructure decisions.</li> <li>Mentor engineers across DevOps, platform, and backend areas. Help set engineering standards and raise operational maturity across the org.</li> </ul> <p><strong>Required Qualifications</strong></p> <ul> <li><strong>8+ years</strong> of DevOps, SRE, or platform engineering experience operating production systems at scale.</li> <li>Deep hands-on AWS expertise (EKS, IAM, VPC, ALB/NLB, CloudWatch, KMS).</li> <li>Strong experience with <strong>Kubernetes</strong>, container orchestration, and multi-environment management.</li> <li>Proficiency with <strong>Terraform</strong> or other IaC tools and GitOps workflows.</li> <li>High proficiency in <strong>Python</strong>, <strong>Go</strong>, or <strong>Typescript</strong> for tooling, automation, and internal platform services.</li> <li>Experience with <strong>Traefik</strong>, HAProxy, or similar load-balancing and routing systems.</li> <li>Familiarity with secure network architectures, MTLS, certificate hierarchies, and service-to-service authentication.</li> <li>Strong background managing CI/CD systems such as GitHub Actions and CodeBuild.</li> <li>Ability to lead incidents, design SLOs, and drive reliability across mission-critical systems.</li> <li>Excellent communication and leadership skills in distributed teams.</li> </ul> <p><strong>Preferred Qualifications</strong></p> <ul> <li>Experience with PBX or telephony systems in AWS, SIP routing, or real-time communication pipelines.</li> <li>Experience with voice agents, WebRTC, or low-latency streaming services.</li> <li>Prior work in regulated or enterprise environments where compliance is a first-class requirement.</li> <li>Experience scaling infra in fast-growth startups.</li> <li>Contributions to open source, infrastructure design talks, or technical publications.</li> </ul> <p><strong>Why This Role Matters</strong></p> <p>Our platform supports real-time, multi-agent reasoning and voice workflows that depend on low latency, reliability, and airtight security. This role is the backbone of that capability. If you're excited to own mission-critical infrastructure in a company where infrastructure is product, we’d love to talk.</p> <p><em>Strong preference for Boston or San Francisco based, but open to remote within the U.S.</em></p> <p>Boston; $180,000-$240,000 + equity</p> <p>San Francisco; $190,000 - $250,000 + equity&nbsp;</p>