高级DevOps工程师
Senior DevOps Engineer
## **LocalStack - 开发者和AI代理的本地云沙箱**
我们是一家快速发展的A轮初创公司,正在构建前沿技术,以革新云开发流程并支持高效的开发与测试反馈循环。我们在2024年第四季度完成了2500万美元的融资,由[Notable Capital](https://www.notablecap.com/)、[CRV](https://www.crv.com/)和[Heavybit](https://www.heavybit.com/)领投。
LocalStack 是一个本地云开发平台。LocalStack 让软件团队能够更轻松、更快、更经济地将可靠、高质量的应用程序部署到云中。
云原本是为运行软件而设计的,而不是为了支持原生AI的开发流程。作为全球领先的本地云开发平台,LocalStack 提供安全的本地沙箱,模拟云环境,使AI代理和软件开发人员能够比在云中更快、更有效地发现和修复风险。
我们的客户群体从中小企业到财富500强的全球公司不等。我们的客户包括NASA、Harness、IBM、Workday、Comcast、Apple、3M、Block等众多公司。
我们正在可持续地扩大全球分布的团队,涵盖GTM、运营和工程领域。2025年我们的规模几乎翻了一番,并且在2026年将继续在所有领域持续增长。
LocalStack 总部位于瑞士苏黎世 🇨🇭,并在奥地利维也纳设有小型工程办公室 🇦🇹,远程团队成员来自25个国家,包括 🇺🇸美国、 🇫🇷法国、 🇬🇧英国、 🇨🇦加拿大、 🇪🇸西班牙等!
👉查看我们的 [Notion 候选人手册](https://localstack.notion.site/candidate-handbook-x-localstack) 和我们的 [GitHub](https://github.com/localstack/localstack)!
**✅ 你将负责的工作内容**
- 负责内部云基础设施,并作为云运营和基础设施请求的主要联系人。
- 管理并持续改进我们的多账户云环境,确保安全、治理和合规最佳实践得到一致应用。
- 支持并维护符合 **SOC 2 Type II** 和 **ISO 27001** 的合规性,确保审计证据持续准备,而不仅仅是在审计期间。
- 运营并改进身份和访问管理,包括SSO、MFA、权限以及入职/调动/离职流程。
- 维护和监控自托管的内部服务,确保它们满足约定的服务水平,并高效跟踪和解决漏洞。
- 监控安全性和健康状况
查看英文原文
## **LocalStack - the Local Cloud Sandbox for Developers and AI Agents**
We are a fast-growing Series A startup building cutting-edge technology to revolutionize cloud development processes and support highly efficient dev&test feedback loops. We’ve closed our last $25mil round in Q4 2024, led by [Notable Capital](https://www.notablecap.com/), [CRV](https://www.crv.com/) and [Heavybit](https://www.heavybit.com/).
LocalStack is a local cloud development platform. LocalStack makes it easier, faster, and less expensive for software teams to ship reliable, high-quality applications to the cloud.
The cloud was built to run software, not to support AI-native development workflows. As the world's leading local cloud development platform, LocalStack provides secure local sandboxes that simulate cloud environments, enabling AI agents and software developers to find and fix risks faster and more effectively than they can in the cloud.
Our customer base ranges from SMBs to Global Fortune 500 companies. Our clients include companies like NASA, Harness, IBM, Workday, Comcast, Apple, 3M, Block and many more.
We are sustainably growing our globally distributed teams across GTM, operations and engineering. In 2025 we almost doubled in size and continue to grow across all areas in 2026.
LocalStack is headquartered in Zurich/Switzerland 🇨🇭, with a small engineering office in Vienna/Austria 🇦🇹 and remote team members from 25 countries including 🇺🇸the US, 🇫🇷FR, 🇬🇧UK, 🇨🇦CA, 🇪🇸ES, and many more!
👉Check our [Notion Candidate Handbook](https://localstack.notion.site/candidate-handbook-x-localstack) and our [GitHub](https://github.com/localstack/localstack)!
**✅ What you will be working on/responsible for**
- Own the internal cloud infrastructure and serve as the primary point of contact for cloud operations and infrastructure requests.
- Manage and continuously improve our multi-account cloud environment, ensuring security, governance, and compliance best practices are consistently applied.
- Support and maintain compliance with **SOC 2 Type II** and **ISO 27001**, ensuring audit evidence is prepared continuously rather than only during audit periods.
- Operate and improve our identity and access management, including SSO, MFA, permissions, and joiner/mover/leaver processes.
- Maintain and monitor self-hosted internal services, ensuring they meet agreed service levels and that vulnerabilities are tracked and resolved efficiently.
- Monitor the security and health of our cloud environment through continuous posture management and proactive risk identification.
- Own infrastructure cost management for the services under your responsibility and help other teams proactively identify cost or reliability risks before they become issues.
- Collaborate with engineering teams to improve the reliability, scalability, and operational excellence of our cloud platform.
**✅ Experience we expect you to bring to the role**
- Deep AWS experience at org level: Organizations, Control Tower, multi-account landing zones, IAM/SCPs, Security Hub/GuardDuty, VPC and multi-AZ networking
- IaC as the only way infrastructure gets created - module design, state management, review and promotion between environments. Tool-agnostic, but real depth in at least one (Terraform/OpenTofu, CDK, Pulumi)
- Understands how to evolve existing systems toward compliance - can look at a running estate and work out what has to change, in what order, to satisfy SOC 2 / ISO 27001. Having been through an audit or certification is a bonus, not a requirement
- Internal workforce identity and access: IdP-backed SSO/MFA, centralised access management, automated joiner/mover/leaver
- Self-hosting and operating shared internal tooling that other teams depend on -
deploy, upgrade, back up, own the uptime
- Observability and alerting design, plus on-call for a distributed team
- Cloud cost management / FinOps fundamentals
- Azure is a nice-to-have extension, not a requirement - AWS depth is what matters, but the estate is going multi-cloud so appetite for it counts
- Bash, Python and/or Go for tooling. Comfortable with ambiguity in a remote-first environment, and happy being the first hire in a function
**🌱 Values we hold in LocalStack**
- Care: we create with compassion. We prioritize empathy and understanding in every interaction. By genuinely caring for our team, customers, and community, we create an environment where people thrive and impactful work flourishes
- Ownership: we own the outcome. We take responsibility for our work and are passionate about its impact. We foster autonomy, inspire ambition, encourage ownership, and empower everyone to unlock their potential and make an impact.
- Openness: we build trust together. We build trust through open communication and honest feedback. By sharing ideas and embracing diverse perspectives, we create stronger, more connected teams that work toward shared goals.
- Courage: we dare to innovate. We embrace bold challenges and take calculated risks to move the needle. We step outside our comfort zones, experiment fearlessly, and turn setbacks into springboards for growth.
- Excellence: we chase the extraordinary. We chase excellence by pushing boundaries and delivering results that go beyond the ordinary, constantly raising the bar and striving for greatness in everything we do. Excellence is not just the outcome, itʼs how we approach every task with purpose, passion, and a commitment to delivering exceptional value.
## Sounds like a good match?
We'd love to hear from you! Join us in shaping the future of cloud development at LocalStack.
To apply, follow the application process. Make sure to include a short motivation outlining why you are the perfect candidate for this role.
If your profile looks like a good match, our talent team will be in touch to organize further steps within 2 weeks.
Please note, that due to a high volume of candidates, we cannot offer personalized feedback to each candidate.