About the Role
Token Security, a leading platform for Agentic AI and Non-Human Identity (NHI) security, is looking for a DevOps engineer to own our infrastructure end to end.
You would be our only one. There is no platform team to join and no one to hand you a ticket queue. There is plenty of work, and most of it is on this page. You will set the technical direction as we grow, report to the Head of Engineering, and work directly with every engineer on the team.
We run on AWS and Kubernetes and deploy through GitOps. Our use of AI in engineering is growing quickly, and the infrastructure behind it has not caught up yet. Building that is a real part of this job.
What You’ll Do
- Own all of our infrastructure. Kubernetes, AWS, and the core services around them. The foundation was built properly and the team has kept it running between other priorities. You are not inheriting a mess. What it has not had is a full-time owner. Reliability, cost, security posture, and the roadmap all become yours.
- Own CI/CD. Every service’s build and deploy pipeline, and the self-hosted runner infrastructure underneath. We ship fast and we are working on shipping faster. One of our engineers is automating more of it right now, and you will take that over and push it further. The interesting problem is adding the safety a growing company needs without turning deploys into something people dread.
- Help us shape the infrastructure behind our AI development. Our engineers use coding agents every day and that use keeps growing. We do not have a clear path for the infrastructure behind it yet, and you will help us find one. One direction we are exploring is moving agents off laptops and into the cloud, with a sandbox environment per engineer so an agent keeps working after the laptop is closed. Deciding whether that is the right answer, and building what we choose, is part of this job.
- Scale how we deploy to customers. Some customers need us to run inside their own environment. We already do this, but each deployment takes too much hands-on work. You will make it repeatable, faster, and secure, and give our engineers the tooling to support customers directly.
- Own our observability. Metrics, logs, alerting, and dashboards. Decide what is worth waking someone for, and keep the cost of watching under control.
- Own infrastructure security and support our compliance work. Hardening, IAM, secrets, and vulnerability management. You will help us keep our SOC 2 compliance, which customers require before they will work with us, and help answer their security reviews. We sell to security teams, so they ask hard questions.
- Keep our data recoverable. Backups, restore testing, and a disaster recovery plan for RDS Postgres and ClickHouse that we have actually rehearsed.
- Partner with engineers on solutions, not tickets. You are the person developers come to when they need infrastructure to do something new.
What You’ll Bring
- 6+ years in DevOps, infrastructure, or platform engineering.
- Real production Kubernetes experience, preferably EKS.
- Deep AWS knowledge. VPC, IAM, and networking, at a level where you can explain the trade-offs behind your design.
- Infrastructure as code. Terraform or Terragrunt.
- Ownership of CI/CD pipelines, GitHub Actions preferred.
- Hands-on work with AI coding agents such as Claude Code or Codex, as part of your daily workflow.
- A security-first mindset. You think about blast radius and least privilege by default, not after review.
- Clear communication. You will work with every engineer here, and sometimes with our customers. You can explain a technical trade-off to someone who does not share your background.
- Accountability. You will be the only person who owns Token’s infrastructure, and that is what you want.
Nice to Have
- GCP or Azure alongside AWS.
- GitOps with ArgoCD, and writing Helm charts.
- Python, or another language you use to build real internal tooling. Our services are Python.
- ClickHouse, or another column store used for high volume log and event data.
- RDS Postgres in production. Tuning, upgrades, and failover.
- Experience building or operating security, identity, or compliance products.
- Prior experience as an early or founding infrastructure hire.
Our Stack
EKS, Karpenter, KEDA, ArgoCD, Helm, Terragrunt, Crossplane, GitHub Actions with self-hosted runners, Datadog. Python services, with RDS Postgres as our main application database and ClickHouse for the large volumes of log and event data we ingest from customers.
We will show you what we think is good about this setup and what we know is not. We would rather you see it clearly before you join than after.
Is This You?
This role fits if you want to own a system rather than a slice of one, you like working directly with engineers and customers, and you have strong opinions about infrastructure that you can defend.
To be clear about what ownership means here: you own the technical decisions and the quality of the platform. Priorities we set together, based on what the company needs most at the time.
It does not fit if you want a narrow, predefined scope, or an established platform team to learn from.
Why Token Security
Machine identities and AI agents now outnumber people in almost every company, and hardly any of them are governed the way human identities are. Token Security closes that gap, so organizations can adopt AI with confidence rather than with crossed fingers.
As our only DevOps engineer you own the foundation the rest of it runs on. The decisions you make in your first year will still shape how we ship three years from now.
Own it boldly is one of our three company values. This role is that value written as a job description.
Offices in Tel Aviv and New York. Stock options for every employee, hybrid work, and a kitchen that is actually stocked.
