Senior Infrastructure & Security Engineer
AireXpert is seeking a Senior Infrastructure & Security Engineer to oversee our production cloud environments. This role requires expertise across Infrastructure Engineering, DevOps, and Security to ensure the design, stability, hardening, monitoring, and resiliency of our mission-critical SaaS platform, which is relied upon by aviation maintenance teams globally. You will be responsible for architecting and maintaining highly available AWS infrastructure, enforcing our security and hardening standards, conducting rigorous disaster recovery testing, leading critical incident response, and guaranteeing our environments are secure, compliant, observable, and performant.
About AireXpert
AireXpert is tech startup in Buffalo, NY that is here to transform the way aircraft maintenance operations occur within an airline. Built exclusively for aircraft operators, our one-of-a-kind digital platform, combines project management and communications technology that connects all maintenance stakeholders and amplifies performance like never before. AireXpert is here to enhance ethical standards to the industry while providing outstanding customer service.
Our crew has gained significant traction with airline brands that you rely on to fly and we’re always giving them tools to transform how they operate. We now have a loyal customer base with high-growth opportunities ahead of us and want you to join our journey!
Key Responsibilities Include
Cloud Architecture & Infrastructure (AWS)
- Ownership: Lead the architecture, performance, reliability, and scalability of AireXpert’s AWS environments.
- Management: Hands-on management of core AWS services, including ECS, RDS, S3, VPCs, API Gateway, CloudFront, IAM, and Lambda.
- Networking: Implement and maintain secure VPC segmentation, routing, security groups, and network policies.
- IaC: Develop and maintain Terraform modules for repeatable and auditable infrastructure provisioning.
- Documentation: Maintain current architectural network diagrams, service maps, and system topology documentation.
Security & Compliance
- Hardening: Implement and enforce AireXpert’s Security & Hardening Standards across AWS, endpoints, and CI/CD pipelines.
- Compliance: Ensure continuous compliance with encryption standards, IAM best practices, robust logging, and network security controls.
- Tooling: Manage and maintain AWS Config, GuardDuty, Security Hub, KMS, and CloudTrail baselines.
- Vulnerability Management: Own the end-to-end vulnerability lifecycle for cloud infrastructure, containers, and workstations using tools like Inspector, Arnica, Trivy, Checkov, Dependabot, Jamf, and Bitdefender.
- Reporting: Enforce remediation SLAs, track all remediation via Asana, and produce weekly/monthly vulnerability reports.
- CI/CD Security: Harden CI/CD pipelines, enforce least privilege in build systems, and maintain secure build → scan → deploy workflows for container images.
Reliability, DR, and Incident Response
- Level 4 Support: Serve as the highest-level technical escalation point for infrastructure, networking, and environment issues.
- Incident Leadership: Lead the response and resolution for all production outages, performance degradations, and infrastructure failures.
- Preparation: Develop runbooks, clear escalation paths, and automation to prevent repeat incidents.
- Disaster Recovery: Own the DR and Business Continuity Plan (BCP) testing to ensure RTO/RPO objectives are consistently met.
- Resilience: Test and validate backup/restore procedures for critical systems (RDS, S3) and proactively implement redundancy to eliminate single points of failure.
Monitoring, Observability & Automation
- Observability: Own the DataDog platform for monitoring and alerting across AWS services, ECS containers, databases, and application performance.
- Alerting: Create comprehensive dashboards, anomaly monitors, and alert rules for both operational and security events.
- Tuning: Continuously tune alerts to reduce noise and enhance detection quality.
- Scripting: Utilize Python/Bash to automate infrastructure tasks, compliance checks, and DR verifications.
Qualifications & Requirements
Required Skills & Experience
- 7+ years of experience in Infrastructure Engineering, DevOps, Cloud Security, or Site Reliability Engineering (SRE) roles.
- Deep expertise with AWS production environments and advanced cloud networking concepts.
- Strong proficiency in Terraform/Terragrunt.
- Hands-on experience with ECS or Kubernetes, container security, and CI/CD pipelines.
- Proven experience with DataDog or equivalent observability platforms.
- Demonstrated strong incident response capabilities in cloud environments.
- Proficiency in Python or Bash for scripting and automation.
Preferred Experience
- Experience in regulated industries (Aviation, aerospace, etc.).
- Formal experience in Disaster Recovery planning and execution.
- Familiarity with SOC 2 or NIST 800-171 controls.
- Prior experience as a final-level technical escalation (L4/SRE).
- Experience with SIEM/SOAR or security automation platforms.
What Success Looks Like
- AWS environments are reliably stable, secure, scalable, and cost-optimized.
- DR exercises consistently meet or exceed established RTO/RPO expectations.
- Operational and security issues are proactively surfaced via DataDog before they impact customers.
- Vulnerabilities are remediated consistently within defined SLAs.
- Architecture diagrams and system documentation are maintained and always current.
- Level 4 incidents are resolved quickly with clear, strong communication.
Additional Benefits:
- Stock Options
- Unlimited PTO
- StartupNY status
- Health/dental/vision insurance offered
- Remote or Buffalo, NY
Apply Now
Benefits at a glance
At AireXpert, we’re committed to the wellbeing and success of our team. We are proud to offer benefits that help you to feel and do your best.
Time off to rest and recharge
At our company, we prioritize giving employees ample time to rest and recharge because we understand that well-rested individuals are more productive, creative, and engaged in their work. This approach not only enhances the quality of their output but also fosters a positive work environment, contributing to overall job satisfaction and employee well-being. Life is about more than work.
ESOP - Employee share ownership
At AireXpert, we embrace the Employee Stock Ownership Plan (ESOP) as it fosters a culture of ownership and commitment among employees, encouraging them to contribute more meaningfully to the company's success. By having a stake in the business, employees are more likely to be invested in its growth and performance, aligning their personal goals with the long-term objectives of the company.
Healthcare coverage
Providing healthcare coverage to employees demonstrates a company's commitment to their well-being and job satisfaction, fostering a supportive and productive work environment. We've found that it helps to attract top talent, enhance employee retention, and reduce absenteeism due to health-related issues.
401K with company match
AireXpert makes a meaningful contribution to our employees' futures by offering a robust 401(k) plan. This not only demonstrates our investment in their long-term financial security and well-being but also enhances employee satisfaction and loyalty, as they know we are equally invested in their success beyond the workplace.