> Markdown version of [/jobs/ext/4721671-staff-software-engineer-infrastructure](https://www.wearedevelopers.com/jobs/ext/4721671-staff-software-engineer-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Software Engineer, Infrastructure

- **Company:** HEX-S, LLC
- **Location:** United States
- **Experience:** Expert
- **Salary:** $246,000 - $329,000
- **Contract:** Permanent contract
- **Skills:** LanceDB, Amazon Web Services, Databases, Continuous Integration, Domain Name System (DNS), Amazon DynamoDB, Identity and Access Management, Python (Programming Language), PostgreSQL, Node.Js, Operational Databases, Peering, Performance Tuning, Redis, TypeScript, SSL Certificate Management, Transport Layer Security, Amazon ElastiCache, Amazon Virtual Private Cloud (VPC), Agentic-AI, Kubernetes, Terraform
- **Published:** November 14, 2026
- **Apply:** https://www.builtincolorado.com/job/staff-software-engineer-infrastructure/12237333?handler=ApplyRedirect

## About the Role

* 5+ years building and operating production infrastructure, including on-call
 * You make the people around you better, whether or not you've had the title
 * Strong Kubernetes operations: you can reason about scheduling, networking, and failure modes, not just apply manifests
 * Solid AWS fundamentals (EKS, RDS, VPC networking, IAM)
 * Infrastructure as code, ideally Terraform
 * Comfortable writing and reading enough application code to change a pipeline, a controller, or a service
 * You can take a vague, long-standing problem and turn it into something shippable without waiting to be told how
 * You write clearly, design docs and runbooks that engineers outside infra can follow

Plus depth in at least one of

 * Networking - VPC design, private connectivity (PrivateLink, peering), DNS, TLS and certificate management, agentic sandboxing
 * Databases - Postgres at scale: replication, tuning, connection pooling, major version upgrades, migrations under load
 * Deployment systems - CI/CD platform ownership, build performance and cost, release and artifact management

## Description

Hex's infrastructure team owns all of our cloud infrastructure (compute, networking, datastores) along with CI/CD and observability, across a multi-tenant platform and single-tenant environments. Every engineer at Hex depends on what the infrastructure team builds.

We're growing in customers, in users, and in the kinds of data workflows our workload compute backend has to support. That growth has opened up a set of projects that would meaningfully change how fast the rest of engineering ships, and we're hiring to take them on.

We're looking for someone who will pick up one of those projects, own it start to finish, and leave it better than they found it. Bring your opinions, including the ones that disagree with ours. Infrastructure tooling is changing quickly right now, and we want someone who's paying attention to that as we improve the foundational components that power Hex.

What you will do

Your first few months, we'll pick two or three of these together based on where you're strongest and where we're looking to invest:

 * CI/CD. Hex's CI/CD pipelines need a glow-up: optimizing for speed, cost, and providing more flexibility.
 * Stack lifecycle. Setup, teardown, partial teardown, and updates for single-tenant stacks, today too much of this is manual and runs through our team.
 * Postgres at scale. Performance, migrations, and capacity for our multi-tenant production database.
 * Cost. Infrastructure spend visibility and reduction.
 * Security posture. Workload and container isolation, plus compliance work as we move upmarket.
 * Platform features. Customer-facing infrastructure capabilities: private connectivity, customer defined networking, and making single-tenant deployments easier to operate.