Senior Infosec Site Reliability Engineer

Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer, get crucial goods where they need to go, and make mobility more efficient and accessible for all. We’re searching for a Senior InfoSec Site Reliability Engineer focusing on Identity and Access Management to help ensure the integrity and availability of our InfoSec and Enterprise infrastructure services.

In this role, you will

• Manage and evolve our Public Key Infrastructure (PKI) (Hashicorp Vault and internally developed systems).
• Design and support a variety of infrastructure solutions with the engineering and security teams.
• Manage and evolve our Identity and Access Management (IAM) platform (a hybrid of SaaS and internally developed systems).
• Develop and utilize tooling and processes to support and scale the adoption of our IAM platform with teams across Aurora.
• Create and implement observability, metrics, alerting, and runbooks.
• Participate in the InfoSec SRE on-call rotation supporting InfoSec services.

Required Qualifications

• Must have a solid background in Public Key Infrastructure, including experience designing and maintaining enterprise-scale PKI solutions (Active Directory Certificate Services, Hashicorp Vault, AWS Private CA, and Common Digital Certificate standards such as X.509 and PKCS).
• Experience with industry-standard Hardware Security Module (HSM) solutions (CloudHSM, YubiHSM, Thales, SafeNet, Gemalto).
• 7+ years in cloud, infrastructure, information security, or SRE roles with a relevant degree or equivalent experience.
• Experience with automation and tool development, preferably using Go or Python.
• Experience with DevOps (CI/CD) concepts and tooling in the cloud with expertise in at least one infrastructure-as-code tool.
• Strong change management skills including rollout planning, communication, and collaborating with stakeholders.
• Strong problem-solving, negotiation, prioritization, and interpersonal skills.

Desirable Qualifications

• A solid background in Cloud IAM concepts (AWS, GCP, or Google Workspace).
• Experience deploying client certificates and implementing mutual TLS (mTLS).
• Experience with Trusted Platform Module (TPM) and Trusted Execution Environment (TEE) implementations.
• Outstanding written and verbal communication skills that drive executional impact at scale. 
• Expertise in architecting, designing, and developing distributed systems. 
• An understanding of network security, cloud security concepts, and industry best practices across many security fields.

The base salary range for this position is $119-$179k per year. Aurora’s pay ranges are determined by role, level, and location. Within the range, the successful candidate’s starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.

 #LI-SP1

#Mid-Senior