Senior DevOps Engineer - Chromatic

At Chromatic, our mission is to improve the UX of the internet and safeguard the world's pixels. We're building tools that make it impossible to ship broken pixels. Thousands of front-end teams—including BBC, Shopify, and Adobe—use Storybook and Chromatic to map every state of their applications and ensure each one is tested and approved before reaching the billions of people who interact with them daily.

Our elastic browser rendering grid runs on AWS, taking millions of snapshots daily while maintaining resilience, consistency, and fast performance. As our customer base grows in both self-serve and enterprise, and enabling agentic workflows expands our potential attack surface, we're facing novel infrastructure and security challenges that need to be solved proactively. We're looking for a DevOps engineer who can help us secure, stabilize, and architect the future of our systems so that Chromatic remains an essential and trusted component of our customers' development workflows.

Responsibilities

• Own and continuously improve our security posture — from access controls and secrets management to vulnerability triage and audit logging — ensuring our systems meet the standards our enterprise customers require.
• Design, build, and maintain secure, scalable infrastructure in AWS using Terraform that enables millions of browser sessions daily.
• Embed with product and engineering teams to assess infrastructure needs, conduct security reviews, and ensure that developer tooling and CI/CD workflows ship with security built in rather than bolted on.
• Participate in the engineering team's on-call rotation, responding to incidents and taking ownership of mitigation through to resolution.

What we’re looking for

• 5+ years of hands-on experience deploying and operating containerized applications in AWS.
• 5+ years of hands-on experience using Infrastructure as Code (IaC) technologies (we use Terraform).
• Intermediate working knowledge of networking fundamentals, including firewalls, load balancers, DNS, VPC architecture and peering, and zero-trust network access (we use Tailscale).
• Intermediate working knowledge of cloud security standards, including least-privilege IAM, secrets management, API authentication and abuse prevention, audit logging, network segmentation, and proactive vulnerability triage.
• Demonstrable hands-on experience with CI/CD (CircleCI, GitHub Actions), containerization (Docker), and orchestration tools.

Nice to Haves

• Working knowledge of legal/compliance frameworks such as SOC2, GDPR, etc.
• Intermediate knowledge and working experience with NoSQL document databases (MongoDB) and/or relational databases (PostgreSQL, MySQL, etc.) systems.
• Experience working effectively in a distributed, remote-first team environment.
• Non-traditional path into software with insights from experiences beyond engineering.