Remote
Senior Platform & Security Engineer
About this role
Flodesk is recognized in the Inc 5000 as one of the world's fastest-growing email marketing companies, built to help entrepreneurs sell online and design emails that people love to get. We're committed to giving small businesses simple and intuitive tools that help them grow, nurture, and monetize their email list. We’re a remote-first company headquartered in San Francisco with a globally distributed team, including in-person hubs in Da Nang (Vietnam), Barcelona (Spain), and Menlo Park (California).
Our team reflects the diversity and creativity of the people we serve. Join our mission to level the playing field for small business owners through good design. About the Opportunity You are the ultimate owner of our technological backbone — from the highly available AWS clusters serving our customers, to the security and compliance posture that keeps our data safe. You'll also partner with our Operations team to help cut down the internal IT friction that slows the rest of the company down.
We're expanding fast, building toward an AI-native product surface with an increasingly complex data and infrastructure footprint. That means the ground under this role won't stay still — what "platform" means here will keep evolving, and we need someone who evolves with it rather than waiting to be told what changed. We don't believe in silos. This is a Senior-level, high-autonomy role. You'll be trusted to make judgment calls with real consequences — security, uptime, cost — often without anyone above you double-checking the details.
What You Will Actually Do Cloud Infrastructure & DevOps (AWS): Build, monitor, and scale our AWS infrastructure. Manage containerized environments (Docker/Kubernetes) via Terraform/Serverless. "ClickOps" in the AWS console is banned here. Aggressive Monitoring: See everything. Use Grafana and AWS tools to monitor the platform. Ensure our autoscaling is ahead of traffic spikes. If it breaks, you know why before the customer does.
Pragmatic Security: Manage WAF, IAM roles, and implement the technical controls that keep our infrastructure audit-ready for SOC2/ISO. Enforce "Least Privilege" to keep us secure without slowing down the engineering team. Zero-Downtime Deployments: Continuously improve our CI/CD pipelines to ensure safe, automated testing. Make deployments boring and routine. Keep Infrastructure Ready for What's Next: As we ship new AI-powered features, help make sure the platform underneath — cost, latency, data handling — can actually support them, not just survive them.