Software Engineer | Infra

Department: Engineering

Location: San Francisco

Employment Type: FullTime

About Formal

Formal is building a network security platform for the AI era. As agents gain access to sensitive data and production systems, organizations need control over the actions they take and the data they receive. We enforce those controls directly in the network path, with a shared policy layer for humans and agents across databases, infrastructure, APIs, and AI tools.

We are trusted by leading companies such as Cursor, Decagon, Notion, and more to solve problems across data security and compliance, data quality management, and infrastructure access.

Formal is backed by top-tiers VCs including Thrive Capital and Y Combinator with angel investors that include executives and founders from Datadog, Clickhouse, Plaid, and Vanta.

About the role

Formal secures billions of requests daily. Join a small team tackling the infrastructure behind that scale: Kafka-to-Quickwit log ingestion, fast search and APIs, and reliable cloud and on-prem deployments. You'll help lead our move to Kubernetes and make the platform easier to deploy, operate, and upgrade in our cloud and customer environments.

What you'll do

• Lead our migration to Kubernetes and operate reliable clusters, networking, access controls, and data services.

• Scale Kafka-to-Quickwit ingestion and search; improve throughput, indexing lag, API latency, and storage costs.

• Build repeatable on-prem installations and upgrades, including configuration, data migrations, and rollback.

• Establish useful alerts and reliability targets; lead incident response and eliminate recurring failures.

• Automate provisioning with Terraform and Helm; improve CI/CD, capacity planning, backups, and recovery.
  

What you need

• Experience building and operating production cloud infrastructure on AWS or Google Cloud using Terraform.

• Experience operating production Kubernetes clusters, including deployments, ingress, autoscaling, and upgrades.

• Strong Linux and networking fundamentals, including DNS, TLS, and load balancing.

• Experience with Go, Python, Rust, or another relevant programming language.

• Experience with CI/CD, observability, and operating data pipelines or distributed APIs in production.

• A track record of automating operational work and owning services through incidents and upgrades.

Nice-to-haves

• Experience deploying and supporting on-prem software across customer networks and infrastructure.

• Experience with Quickwit or similar search systems, Kafka, PostgreSQL, or Temporal.

• Experience with Helm, Bazel, self-hosted CI runners, or environments for AI coding agents.
  

Compensation

• This role offers cash compensation and a stock options grant.

• The positioning of offers within a certain range depends on various factors, including: candidate experience, qualifications, skills, business requirements and geographical location.
  

Benefits (for U.S.-based full-time employees)

• 100% medical, dental & vision insurance coverage for you

  • Partially covered for your dependents

• Flexible PTO