About Enformion
Enformion is a dynamic powerhouse in data intelligence and AI-powered identity verification. We deliver next-generation fraud prevention, risk management, and seamless onboarding solutions that foster ironclad trust between digital marketplaces, merchants, and consumers. By leveraging our massive data repositories and advanced behavioral analysis, we provide continuous monitoring for emerging risk indicators.
In a digital world where security and trust are everything, Enformion is at the forefront of the industry—and we are growing fast.
Job Purpose
Enformion provides identity and contact data to enterprise clients through APIs, and supports a network of consumer-facing websites built on that data. Enformion is seeking a Site Reliability Engineer to keep these sites and APIs available, fast, and protected from abusive traffic. This role sits where reliability and security meet.
The SRE will work closely with software engineering, information security, and legal/compliance to build and maintain reliable, scalable, and secure infrastructure. The role covers monitoring, resolving complex technical issues, and automating solutions to recurring problems, and it plays a central part in optimizing Enformion platforms and infrastructure.
Salary - $150K-$165K
Responsibilities
Reliability and monitoring
- Monitor availability, latency, and error rates across Enformion APIs. Define service level objectives and alerting that catch problems before customers do.
- Lead troubleshooting and resolution of production incidents. Run blameless post-incident reviews and track follow-up actions to completion.
- Automate recurring operational work and remediation, reducing manual toil.
- Plan capacity and tune performance across the CDN, application, and data tiers.
Traffic protection and abuse mitigation
- Design solutions that automatically identify harmful or unwanted traffic, including scraping, malicious bots, credential stuffing, fake account creation, and API key abuse.
- Configure and tune CDN, WAF, bot management, and rate-limiting controls to block abusive traffic without degrading the experience for legitimate users and clients.
- Analyze traffic logs to understand how abusive actors behave, how they evade controls, and what they cost in infrastructure load and revenue.
- Investigate new abuse patterns and trends, and work with the Data Abuse & Detection Engineer to turn findings into enforced edge and application controls.
- Enforce acceptable-use and terms-of-service policies at the infrastructure level.
Infrastructure security
- Manage infrastructure as code and apply security policy checks before changes reach production.
- Apply least-privilege IAM, network segmentation, TLS management, and secrets handling across AWS environments.
- Integrate security checks into CI/CD pipelines in partnership with the DevSecOps Lead, including dependency, container, and configuration scanning.
- Detect and remediate configuration drift, and maintain centralized logging that supports both operations and security investigations.
- Provide evidence from automated controls for audits and client security questionnaires.
Collaboration
- Work with Engineering, Marketing, Product, and Legal/Compliance to update policies, close product loopholes, and protect site quality and data integrity.
- Help marketing and product teams understand how traffic quality affects analytics, conversion metrics, and campaign reporting.
Minimum Qualifications
- Bachelor’s degree in computer science, a related technical field, or equivalent practical experience.
- 3 years of experience with security attacks and mitigation methods, particularly bot, scraping, and application-layer threats.
- Hands-on experience with CDN providers (Akamai, Cloudflare, Fastly) and their traffic management, WAF, and bot management features.
- Experience with Elastic/OpenSearch or a comparable platform for log mining and analytics.
- Solid understanding of TCP/IP, DNS, HTTP, and TLS, and how to manage traffic at each layer.
- Proficiency in Linux administration and scripting (Python, Bash, or similar).
- Experience operating production systems in a public cloud environment.
Preferred Qualifications
- Infrastructure as code (e.g. Terraform).
- Experience integrating security tooling into CI/CD pipelines.
- Container and orchestration experience, including container security basics.
- Observability tooling (e.g. Datadog).
- Experience protecting high-traffic commercial APIs.
- Familiarity with SLOs, error budgets, and incident management practices.
- Exposure to SOC 2 or ISO 27001 control environments.
Benefits
- Flexible PTO
- 401k match
- Dental/Vision/Medical
New Zealand