A career with Gravity Payments is an opportunity to be on a collaborative team where creative leadership, passion for progress, and responsibility are paramount. Our team members focus and commit to providing for our clients and our community because we care deeply for others.

Success in this role looks like

Within 3 months: You are a required reviewer on infrastructure pull requests and change requests. You work through the team's engineering harness and have codified at least one of our standards into it, so agent work meets that standard by default. You have published a baseline for the team's delivery metrics, and you have taken over at least one in-flight infrastructure project.
Within 6 months: You have led writing a standard for an application environment, developer environment, or tooling, and CI and AI harness enforce them where possible. Recurring review findings have become deterministic checks, and at least one detection harness combines deterministic rules with agentic analysis in production. Product teams and Security rely on you as an escalation point.
Within 1 year: You are accelerating the definition and understanding of the standards we hold our application environments, developer environments, and tools to. You demonstrate that direction continuously and clearly to the infrastructure team, to engineering teams, and to leadership, so everyone understands the current standard, what changes next, and why.

Core Responsibilities

Develop and execute cloud strategies for AWS and Azure. Co-own the architecture of our cloud organization, including account structure, guardrails, and network topology, and review designs with product teams early to provide reusable patterns.
Own our container and serverless platforms, and optimize resource utilization and cost management in cloud environments, with cost attribution by team and product across cloud and AI spend.
Automate infrastructure management using Infrastructure as Code (IaC) tools (Pulumi in TypeScript), keep reviewed code as the only path to production, and detect and correct drift.
Own our GitHub organization and source control practices, including repository lifecycle, access, and privilege best practices.
Own the CI/CD pipelines every team ships through, including runners, deployment identities, software supply-chain controls, and release controls such as progressive rollout, health-gated promotion, and automated rollback.
Own infrastructure change control as pipeline policy, with approvals, separation of duties, risk assessment, and emergency-change handling enforced in CI and the harness, and every change traceable.
Co-own identity and access patterns across our cloud organization, with least-privilege access defined in code.
Standardize processes and procedures across platforms. Define, document, and continuously raise the standards for application environments, developer environments, and tooling, including which AI tools, models, and platforms we adopt and retire.
Participate in a 24/7 on-call rotation for incident response, lead infrastructure response during security and availability incidents, and run postmortems that eliminate root causes.
Analyze network traffic and manage firewall settings and route tables, including WAF rules, security groups, cardholder data environment (CDE) segmentation, and zero-trust network access.
Deeply understand and ensure adherence to cloud security best practices and provide Security and Compliance with automated evidence that PCI DSS and SOC 2 controls are operating.
Define and maintain the engineering harness our team works through, codifying our standards into the work our agents do so agent output meets the same expectations we hold human engineers to. Encode standards as rules, skills, permission tiers, and deterministic checks, manage prompts, skills, tools, and evaluation criteria as production code with review and tests, and turn recurring review findings into new checks.
Build and operate detection harnesses for CI, vulnerabilities, and attack vectors that combine deterministic controls, such as WAF rules and policy as code, with agentic analysis and feed automated blocking and SIEM correlation.