VGS is building the trust infrastructure for a new era of commerce. As commerce becomes agentic, payments are increasing dramatically in volume, speed, and complexity, and the companies driving that shift need a foundation they can fully trust.
That's where VGS comes in. We're the world's leader in payment tokenization, trusted by the most innovative AI and Fortune 500 companies, merchants, banks, and fintechs to power modern payments and agentic commerce. We store more than 9 billion tokens and process more than 10 billion monthly interactions, touching a third of all e-commerce. That scale isn't incidental. It's why leading companies embed our universal token vault and credential management platform directly into their stack, taming the complexity of payment data so they can move faster.
Come build the platform that enables modern payments for the world's largest companies. We're helping businesses unlock new possibilities in an industry that never stops moving. And that takes exceptional people.
Trusted Engineering That Matters
Engineering at VGS
VGS is building the platform powering agentic commerce and global payments infrastructure. VGS Engineering is the pillar that supports that vision. We create a platform that is an indispensable, ubiquitous component of our partners' payments and security infrastructure. We build and operate high-scale, reliable, and resilient systems that manage mission-critical payment data across the globe. We don't just participate in the payments ecosystem; we power it.
Our Environment & Culture
Modern Tooling as Leverage: We value speed and impact. To ensure nothing slows you down, we arm you with a highly consistent modern stack (e.g. AWS, Kubernetes, Java, TypeScript, Python) and world-class AI-augmented SDLC tooling. We strip away the friction so you can focus on the problems that demand creativity and judgment.
Ownership of Outcomes: Scaling global payments infrastructure requires individuals who take personal ownership of outcomes from day one. We look for builders who combine high agency with deep strategic alignment; channeling their urgency and relentless iteration into what matters most.
Mission-Critical Accountability: We power payments infrastructure for global market leaders, making system trust and integrity our core deliverable. We don't treat compliance (PCI, SOC2, ISO27001), security patching, and platform maintenance as administrative overhead—we engineer them with first-class product discipline. In payments infrastructure, reliability is not background work, it’s part of what customers buy.
Learn More: See how our engineering practices drive trust and innovation in our official blog and our reliability practices.
About the Role
As a Sr. Infrastructure Engineer (DevOps), you will serve as a key technical practitioner on our Platform Engineering team, taking personal ownership of our cloud platform, CI/CD pipelines, and internal developer platforms. In this role, you will help build, scale, and fortify global cloud infrastructure designed to handle mission-critical, high-throughput payment applications with zero downtime.
You will lead initiatives that strip away friction for engineering teams, architecting golden paths, automating deployment pipelines, and building self-healing infrastructure. Rather than executing against rigid task lists or managing manual deployments, you will bring high agency to your daily work, pioneering automated CI/CD pipelines, GitOps workflows, and AI-augmented developer tooling across the entire SDLC. We are looking for hands-on builders who refuse to settle for the status quo, hate manual toil, and take immense pride in elevating developer velocity, platform reliability, and cloud security.
What You'll Do
Build Immutable, Self-Healing Platform Foundations: Design, build, and optimize high-availability AWS infrastructure. Drive our evolution toward standardized, globally scalable platform infrastructure managed entirely through code (IaC).
Accelerate CI/CD & Developer Velocity: Own, modernize, and scale our continuous integration and continuous delivery (CI/CD) pipelines. Build self-service platforms and "Golden Paths" that empower feature developers to ship code to production safely, autonomously, and rapidly.
Drive Resiliency & GitOps Automation: Replace manual toil with self-healing, automated infrastructure using GitOps methodologies (Flux/ArgoCD), modern automation scripts, and reproducible environment templates.
Deep Observability & Operational Rigor: Configure and maintain comprehensive telemetry tooling (Prometheus, Grafana, OpenTelemetry) to proactively spot system bottlenecks. Participate in on-call rotations and lead blameless post-mortems to continuously harden system resilience.
Security & Network Engineering: Embed security guardrails and compliance practices directly into deployment workflows, ensuring cloud security, API gateways, and network isolation are enforced continuously as code.
Platform Enablement & Mentorship: Partner strategically with product and engineering teams to drive platform adoption. Mentor mid-level and junior engineers on modern SRE, DevOps, and cloud-native practices.
What You Bring
Ownership at Scale: 5+ years of hands-on experience in DevOps, Platform Engineering, or Infrastructure roles, taking personal ownership of complex, large-scale distributed systems within mission-critical environments.
Containerization & GitOps Orchestration: Advanced experience with Kubernetes (EKS), Docker, and modern GitOps deployment workflows (ArgoCD, Flux, GitHub Actions).
CI/CD Pipeline Mastery: Proven track record building, optimizing, and securing automated CI/CD deployment pipelines that support high-frequency engineering releases.
Automation & Scripting: Strong coding/scripting skills in Python, Go, or Bash for platform tooling, custom operators, and operational automation.
Observability & SRE Practice: Hands-on experience implementing end-to-end telemetry and monitoring stacks using Prometheus, Grafana, OpenTelemetry, or similar modern toolchains.
Growth Mindset & High Agency: An innate drive to eliminate manual friction, automate repetitive tasks, and acquire whatever missing context is needed to solve complex platform challenges end-to-end.
Nice to Have:
Experience with tokenization, payment processing, or security products
BA/BS degree
A knack for out-of-the-box thinking that thrives in a fast-paced startup environment
Experience managing distributed data streaming platforms like Kafka (MSK) or high-concurrency database platforms under heavy load.
Hands-on experience integrating AI developer tools, agentic workflows, or automated testing into CI/CD pipelines.
Practical understanding of operating within regulated security frameworks such as PCI-DSS, SOC2, or ISO27001.
We consider all applicants without regard to race, color, national origin, sex, age, religion, sexual orientation, gender identity, veteran status, marital status, physical or mental disability, or other protected classes under all applicable local, state, and federal laws and ordinances (AA/EOE/W/M/Vet/Disabled).
Qualified applicants with arrest and conviction records will be considered for this position in accordance with the San Francisco Fair Chance Ordinance.
Skills Required
- 5+ years of hands-on experience in DevOps, Platform Engineering, or Infrastructure roles
- Experience owning complex, large-scale distributed systems in mission-critical environments
- Advanced experience with Kubernetes, including EKS, Docker, and GitOps workflows
- Experience with ArgoCD, Flux, and GitHub Actions
- Proven ability to build, optimize, and secure automated CI/CD deployment pipelines
- Strong coding or scripting skills in Python, Go, or Bash
- Hands-on experience implementing telemetry and monitoring with Prometheus, Grafana, OpenTelemetry, or similar tools
- Experience with tokenization, payment processing, or security products
- BA or BS degree
- Experience managing Kafka or MSK and high-concurrency database platforms under heavy load
- Experience integrating AI developer tools, agentic workflows, or automated testing into CI/CD pipelines
- Understanding of PCI-DSS, SOC 2, or ISO 27001 security frameworks
What We Do
Providing essential security and compliance infrastructure, Very Good Security (VGS) enables startups and enterprises to focus on their core business instead of compliance and regulatory overhead. With one single integration, VGS customers unlock the value of sensitive data without the cost and liability of securing it themselves, while also accelerating compliances like PCI, SOC 2 and more.
