Staff Site Reliability Engineer, InfraSec at Sprout General Referrals

📍 Job Overview

Job Title: Staff Site Reliability Engineer, InfraSec
Company: Sprout General Referrals
Location: Remote US
Job Type: Full-Time
Category: DevOps, Site Reliability Engineering
Date Posted: 2025-06-24

🚀 Role Summary

Lead cross-functional initiatives to improve Sprout's security posture and deliver secure infrastructure.
Collaborate with engineering teams to create standard production-ready technology and enforce security best practices.
Drive alignment on security best practices and lead by example with deep technical expertise and pragmatic execution.

💻 Primary Responsibilities

Create Paved Roads: Standardize production-ready technology for engineering teams to build secure experiences.
Improve Security Posture: Automate and audit processes to build sustainable and secure solutions.
Enforce Security Best Practices: Implement security best practices through code to minimize misconfigurations and increase service adoption confidence.
Collaborate Cross-Functionally: Work with product, site reliability engineering, data platform, and GRC teams to deliver scalable, secure-by-default infrastructure.
Act as a Multiplier: Lead with influence across teams and organizations, creating momentum for cross-functional initiatives and driving alignment on security best practices.
Own Strategic Initiatives: Lead projects such as IAM modernization, zero trust, vulnerability remediation pipelines, and secure paved road delivery.

📝 Enhancement Note: This role requires a strong background in infrastructure security, automation, and collaboration to drive strategic security initiatives and deliver secure infrastructure at scale.

🎓 Skills & Qualifications

Education: Bachelor's degree in Computer Science, Engineering, or a related field. Relevant experience may be considered in lieu of a degree.

Experience: 7+ years building and maintaining reliable, scalable systems in a Linux/UNIX environment. 5+ years experience with infrastructure-as-code or configuration-as-code tools (e.g., Terraform, Chef, Ansible, SaltStack). 3+ years operating and maintaining cloud security tools (e.g., WAF, IAM, AWS Config). 3+ years leading engineering projects and initiatives.

Required Skills:

Proficiency in one or more infrastructure-as-code tools (e.g., Terraform, Chef, Ansible, SaltStack)
Experience with cloud security tools (e.g., WAF, IAM, AWS Config)
Strong programming skills in one or more languages (e.g., Python, Java, Golang, Ruby)
Experience with CI/CD pipelines (e.g., Jenkins, Gitlab, Github Actions)
Knowledge of AWS services and architecture
Familiarity with security tooling and vendor management (e.g., CNAPP, CWPP, CSPM, IDS/IPS)

Preferred Skills:

Experience with Amazon Web Services (AWS)
Familiarity with security tooling and vendor selection plus management
Experience building CI/CD pipelines
Knowledge of one or more programming languages (e.g., Python, Java, Golang, Ruby)

📝 Enhancement Note: Candidates should have a strong background in infrastructure security, automation, and collaboration to drive strategic security initiatives and deliver secure infrastructure at scale.

📊 Web Portfolio & Project Requirements

Portfolio Essentials:

Demonstrate experience with infrastructure-as-code tools and cloud security tools through live projects or case studies.
Showcase proficiency in one or more programming languages through code samples or projects.
Highlight experience with CI/CD pipelines and security tooling through project documentation or presentations.

Technical Documentation:

Provide clear and concise documentation for infrastructure, configuration, and code changes using tools like Confluence or GitHub Wikis.
Include version control, deployment processes, and server configuration details in project documentation.
Demonstrate understanding of testing methodologies, performance metrics, and optimization techniques through project documentation.

📝 Enhancement Note: Candidates should provide detailed and well-organized project documentation that showcases their technical expertise and ability to deliver secure infrastructure at scale.

💵 Compensation & Benefits

Salary Range: $161,200 - $265,980 USD annually, depending on location and experience level. Starting salaries for well-qualified new hires are typically around the midpoint of the range.

Benefits:

Insurance and benefit options that are built for both individuals and families
Progressive policies to support work/life balance, such as flexible paid time off and parental leave program
High-quality and well-maintained equipment
Wellness initiatives to ensure both health and mental well-being of our team
Ongoing education and development opportunities via the Grow@Sprout program and employee-led diversity, equity, and inclusion initiatives
Growing corporate social responsibility program that is driven by the involvement and passion of our team members
Beautiful, convenient, and state-of-the-art offices in Chicago’s Loop and downtown Seattle, for those who prefer an office setting

Working Hours: Full-time position with a standard 40-hour workweek. Sprout offers flexible working hours and remote work options.

📝 Enhancement Note: Sprout offers competitive salary ranges and comprehensive benefits packages to attract and retain top talent in the site reliability engineering and infrastructure security fields.

🎯 Team & Company Culture

Company Culture:

Industry: Technology, specifically social media management and analytics
Company Size: Medium-sized company with around 300 employees
Founded: 2010, with headquarters in Chicago, IL, and offices in Seattle, WA
Team Structure: Sprout's engineering team is organized into cross-functional squads that span mobile, front-end, back-end, and site reliability engineering. The InfraSec team works closely with these squads to deliver secure infrastructure and drive security best practices.
Development Methodology: Sprout uses Agile methodologies, including Scrum, to manage projects and deliver features to customers. The InfraSec team works closely with engineering squads to ensure security is integrated into the development process.

📝 Enhancement Note: Sprout's engineering team is organized into cross-functional squads that collaborate to deliver secure infrastructure and drive security best practices. The InfraSec team plays a crucial role in ensuring that security is integrated into the development process and that Sprout's infrastructure is secure and reliable.

📈 Career & Growth Analysis

Web Technology Career Level: Staff Site Reliability Engineer, InfraSec is a senior-level role that requires a deep understanding of infrastructure security, automation, and collaboration. This role is responsible for driving strategic security initiatives and delivering secure infrastructure at scale.

Reporting Structure: This role reports directly to the Director of Site Reliability Engineering and collaborates cross-functionally with product, engineering, and security teams.

Technical Impact: The Staff Site Reliability Engineer, InfraSec is responsible for creating standard production-ready technology, improving Sprout's security posture, and enforcing security best practices. They work closely with engineering teams to ensure that security is integrated into the development process and that Sprout's infrastructure is secure and reliable.

Growth Opportunities:

Technical Growth: Deepen expertise in infrastructure security, automation, and collaboration through hands-on projects and mentorship opportunities.
Leadership Growth: Develop leadership skills by leading cross-functional initiatives and driving alignment on security best practices.
Architecture Growth: Gain experience in technical architecture by working on strategic projects and contributing to the design and implementation of Sprout's infrastructure.

📝 Enhancement Note: The Staff Site Reliability Engineer, InfraSec role offers significant growth opportunities in technical expertise, leadership, and architecture. Candidates should be eager to take on new challenges and drive strategic security initiatives.

🌐 Work Environment

Office Type: Sprout offers beautiful, convenient, and state-of-the-art offices in Chicago’s Loop and downtown Seattle for those who prefer an office setting. However, this role is remote-friendly, and employees can work from home or a co-working space if they prefer.

Office Location(s): Sprout's headquarters are in Chicago, IL, and it has an office in Seattle, WA. Remote employees can work from anywhere in the United States.

Workspace Context:

Collaboration: Sprout's engineering team uses collaborative tools like Slack and Microsoft Teams to communicate and work together on projects.
Development Tools: Sprout provides high-quality and well-maintained equipment, including laptops and multiple monitors, to ensure that engineers have the tools they need to be productive.
Cross-Functional Collaboration: The InfraSec team works closely with other teams, such as product, engineering, and security, to ensure that security is integrated into the development process and that Sprout's infrastructure is secure and reliable.

Work Schedule: Sprout offers flexible working hours and remote work options. Employees can work from home or a co-working space and have the flexibility to balance their work and personal lives.

📝 Enhancement Note: Sprout offers a flexible and collaborative work environment that supports remote work and provides the tools and resources needed for engineers to be productive and successful.

📄 Application & Technical Interview Process

Interview Process:

Technical Preparation: Review Sprout's technology stack, including Terraform, Chef, Ansible, SaltStack, AWS, and cloud security tools. Brush up on your programming skills and be prepared to discuss your experience with infrastructure-as-code tools and cloud security tools.
Technical Assessment: Complete a technical assessment that focuses on your experience with infrastructure-as-code tools, cloud security tools, and programming skills.
Behavioral Assessment: Participate in a behavioral assessment to evaluate your problem-solving skills, communication, and collaboration abilities.
Final Evaluation: Meet with Sprout's leadership team to discuss your technical assessment results, behavioral assessment results, and cultural fit.

Portfolio Review Tips:

Portfolio Structure: Organize your portfolio to showcase your experience with infrastructure-as-code tools, cloud security tools, and programming skills.
Project Case Studies: Include detailed case studies that demonstrate your ability to deliver secure infrastructure at scale.
Code Samples: Provide code samples that showcase your proficiency in one or more programming languages.
Technical Documentation: Include clear and concise documentation for infrastructure, configuration, and code changes using tools like Confluence or GitHub Wikis.

Technical Challenge Preparation:

Challenge Format: Familiarize yourself with Sprout's technical assessment format, which may include live coding exercises, system design discussions, and problem-solving challenges.
Time Management: Practice managing your time effectively during technical assessments and prioritizing tasks based on their importance.
Communication: Prepare to articulate your technical concepts clearly and concisely during technical assessments and interviews.

📝 Enhancement Note: Sprout's interview process focuses on evaluating candidates' technical skills, problem-solving abilities, and cultural fit. Candidates should be prepared to discuss their experience with infrastructure-as-code tools, cloud security tools, and programming skills in detail.

🛠 Technology Stack & Web Infrastructure

Frontend Technologies: Not applicable for this role.

Backend & Server Technologies:

Infrastructure-as-Code Tools: Terraform, Chef, Ansible, SaltStack
Cloud Security Tools: WAF, IAM, AWS Config
Programming Languages: Python, Java, Golang, Ruby
Server Platforms: AWS (Amazon Web Services)
Databases: Not applicable for this role.

Development & DevOps Tools:

Version Control: Git
CI/CD Pipelines: Jenkins, Gitlab, Github Actions
Monitoring Tools: Not specified in the job listing

📝 Enhancement Note: Sprout's technology stack includes popular infrastructure-as-code tools, cloud security tools, and programming languages. Candidates should have experience with these tools and be prepared to discuss their proficiency during the interview process.

👥 Team Culture & Values

Web Development Values:

Security-First Mindset: Prioritize security in all aspects of infrastructure design, deployment, and maintenance.
Automation and Simplification: Automate processes and simplify workflows to reduce manual effort and increase efficiency.
Collaboration and Communication: Work closely with cross-functional teams to ensure that security is integrated into the development process and that Sprout's infrastructure is secure and reliable.
Continuous Learning and Improvement: Stay up-to-date with the latest security trends and best practices, and continuously improve Sprout's security posture.

Collaboration Style:

Cross-Functional Integration: Work closely with product, engineering, and security teams to ensure that security is integrated into the development process and that Sprout's infrastructure is secure and reliable.
Code Review Culture: Participate in code reviews to ensure that security best practices are followed and that code quality is maintained.
Knowledge Sharing: Share your expertise with other team members and contribute to Sprout's collaborative culture.

📝 Enhancement Note: Sprout's team culture emphasizes security, automation, collaboration, and continuous learning. Candidates should be prepared to discuss their experience with these values and how they have applied them in previous roles.

⚡ Challenges & Growth Opportunities

Technical Challenges:

Infrastructure Security: Design and implement secure infrastructure that protects Sprout's data and systems from unauthorized access and attacks.
Cloud Security: Manage and configure cloud security tools to protect Sprout's cloud-based infrastructure and data.
Security Best Practices: Enforce security best practices through code and ensure that Sprout's infrastructure is secure and compliant with industry standards.
Emerging Technologies: Stay up-to-date with the latest security trends and best practices, and continuously improve Sprout's security posture.

Learning & Development Opportunities:

Technical Skill Development: Deepen your expertise in infrastructure security, automation, and collaboration through hands-on projects and mentorship opportunities.
Leadership Development: Develop leadership skills by leading cross-functional initiatives and driving alignment on security best practices.
Architecture Decision-Making: Gain experience in technical architecture by working on strategic projects and contributing to the design and implementation of Sprout's infrastructure.

📝 Enhancement Note: The Staff Site Reliability Engineer, InfraSec role offers significant technical challenges and growth opportunities in infrastructure security, automation, and collaboration. Candidates should be eager to take on new challenges and drive strategic security initiatives.

💡 Interview Preparation

Technical Questions:

Infrastructure Security: Discuss your experience with infrastructure security, including designing and implementing secure infrastructure, managing cloud security tools, and enforcing security best practices.
Cloud Security: Describe your experience with cloud security tools, such as WAF, IAM, and AWS Config, and how you have used them to protect cloud-based infrastructure and data.
Security Best Practices: Explain your understanding of security best practices and how you have enforced them through code to ensure that infrastructure is secure and compliant with industry standards.
Emerging Technologies: Discuss your familiarity with emerging security trends and best practices, and how you have stayed up-to-date with the latest developments in the field.

Company & Culture Questions:

Security Culture: Describe your experience working in a security-focused culture and how you have contributed to maintaining a strong security posture.
Collaboration: Discuss your experience working with cross-functional teams, including product, engineering, and security teams, to ensure that security is integrated into the development process and that infrastructure is secure and reliable.
Problem-Solving: Explain your approach to problem-solving, including how you identify, diagnose, and resolve technical issues related to infrastructure security.

Portfolio Presentation Strategy:

Project Case Studies: Present detailed case studies that demonstrate your experience with infrastructure security, cloud security tools, and security best practices.
Code Samples: Showcase your proficiency in one or more programming languages through code samples or projects.
Technical Documentation: Include clear and concise documentation for infrastructure, configuration, and code changes using tools like Confluence or GitHub Wikis.

📝 Enhancement Note: Sprout's interview process focuses on evaluating candidates' technical skills, problem-solving abilities, and cultural fit. Candidates should be prepared to discuss their experience with infrastructure security, cloud security tools, and security best practices in detail and provide specific examples of their work.

📌 Application Steps

To apply for this Staff Site Reliability Engineer, InfraSec position:

Customize Your Resume: Tailor your resume to highlight your experience with infrastructure-as-code tools, cloud security tools, and programming skills. Include specific examples of your work and how it aligns with the requirements of this role.
Prepare Your Portfolio: Organize your portfolio to showcase your experience with infrastructure-as-code tools, cloud security tools, and programming skills. Include detailed case studies, code samples, and clear and concise documentation for infrastructure, configuration, and code changes.
Research Sprout: Familiarize yourself with Sprout's technology stack, including Terraform, Chef, Ansible, SaltStack, AWS, and cloud security tools. Understand Sprout's company culture and values, and be prepared to discuss how your experience aligns with their priorities and goals.
Prepare for Technical Assessments: Review Sprout's technical assessment format, which may include live coding exercises, system design discussions, and problem-solving challenges. Brush up on your programming skills and be prepared to discuss your experience with infrastructure-as-code tools, cloud security tools, and security best practices.
Prepare for Behavioral Assessments: Participate in a behavioral assessment to evaluate your problem-solving skills, communication, and collaboration abilities. Be prepared to discuss your experience working with cross-functional teams and your approach to problem-solving, including how you identify, diagnose, and resolve technical issues related to infrastructure security.

⚠️ Important Notice: This enhanced job description includes AI-generated insights and web technology industry-standard assumptions. All details should be verified directly with the hiring organization before making application decisions.

Staff Site Reliability Engineer, InfraSec