Sr. DevSecOps Engineer

About Craft:

Craft is the leader in supplier risk intelligence, enabling enterprises to discover, evaluate, and continuously monitor their suppliers at scale. Our unique, proprietary data platform tracks real-time signals on millions of companies globally, delivering best-in-class monitoring and insight into global supply chains. Our customers include Fortune 500 companies, government agencies, SMEs, and global service platforms. Through our configurable Software-as-a-Service portal, our customers can monitor any company they work with and execute critical actions in real-time. We’ve developed distribution partnerships with some of the largest integrators and software platforms globally.

We are a post-Series B high-growth technology company backed by top-tier investors in Silicon Valley and Europe, headquartered in San Francisco with hubs in Seattle and London. We support remote and hybrid work, with team members across North America, Canada, and Europe.

We're looking for innovative and driven people passionate about building the future of Enterprise Intelligence to join our growing team!

About the Role:

Craft is growing! And we're looking for an experienced engineer that embraces and lives the DevOps and MLOps philosophy, processes, and culture. The ideal candidate is a self-starter who loves their craft and puts both security and ease-of-use at the center of all decisions.

As a DevSecOps Engineer at an earlier-stage startup, you will have an opportunity to make a substantial impact on the maturation of Craft’s DevSecOps and MLOps programs. Collaborating with the engineering team, you’ll design and implement solutions that streamline our machine learning lifecycle while enhancing the security and scalability of our systems.

What You'll Do:

• Contribute to and implement the DevSecOps and MLOps strategies, working with multiple stakeholders that are focused on automating and securing the development lifecycle.

• Design and manage the entire MLOps lifecycle, including data versioning, model training, deployment, and monitoring.

• Implement tools and frameworks for model versioning, tagging, and QA processes.

• Optimize infrastructure for model training and inference, focusing on cost efficiency and avoiding vendor lock-in .

• Automate security and compliance measures across the machine learning lifecycle, ensuring seamless integration with CI/CD pipelines.'

• Develop monitoring systems for production models, including active learning workflows to flag problematic records for further verification.

• Build and manage scalable infrastructure to support machine learning workloads, including data storage, versioning, and evaluation platforms.

• Perform threat modeling, risk assessment, and code reviews to assess cybersecurity implications.

Who You Are:

• You have 3+ years of experience in a DevOps or MLOPs role (or similar experience), with a proven track record of implementing machine learning lifecycle solutions.

• You're a strong team player, a great listener, and able to facilitate discussion and move diverse opinions towards clear decisions.

• You have an extreme ownership of your product, and a can-do, get-it-done attitude.

• You are detailed-oriented and are always striving to uncover and remediate cybersecurity gaps.

• You have experience using Terraform or other infrastructure-as-code tools.

• You have experience with designing and optimizing infrastructure for machine learning workloads, including GPU cost optimization.

• You’re familiar with tools and practices for model management, deployment, and monitoring, such as MLflow, ElasticSearch, or OpenSearch.

• You’re able to think holistically about data platforms and their integration with machine learning workflows.

• You have a deep knowledge of Amazon Web Services (AWS) Infrastructure along with experience with at least a part of the other components of our technology stack: Airflow, Apollo, CircleCI, Cloudflare, Databricks, Docker, GraphQL, Pandas, PyTorch, Python, spaCy, Transformers.

What We Offer:

• Option to work as a B2B contractor or full-time employee

• Competitive salary at a well-funded, fast-growing startup

• PTO days so you can take the time you need to refresh!

  • Full-time employees: 28 PTO days allotted + 13 public holidays (41 total paid days off)

  • B2B contractors: 15 PTO days allotted + 13 public holidays (28 total paid days off)

• 100% remote work (or hybrid if you prefer! We have coworking place in center of Warsaw.)

A Note to Candidates:

We are an equal opportunity employer who values and encourages diversity, equity and belonging at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, caste, or disability status.

Don’t meet every requirement? Studies have shown that women, communities of color and historically underrepresented talent are less likely to apply to jobs unless they meet every single qualification. At Craft, we are dedicated to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we strongly encourage you to apply. You may be just the right candidate for this or other roles!

#BI-Remote