Site Reliability Engineer (SRE)

Enformion provides identity and contact data through APIs and supports consumer-facing websites built on that data. The Site Reliability Engineer keeps these sites and APIs available, fast, and protected from abusive traffic by maintaining reliable, scalable, and secure infrastructure, resolving incidents, and automating operational solutions.

Responsibilities:

• Monitor availability, latency, and error rates across Enformion APIs. Define service level objectives and alerting that catch problems before customers do
• Lead troubleshooting and resolution of production incidents. Run blameless post-incident reviews and track follow-up actions to completion
• Automate recurring operational work and remediation, reducing manual toil
• Plan capacity and tune performance across the CDN, application, and data tiers
• Design solutions that automatically identify harmful or unwanted traffic, including scraping, malicious bots, credential stuffing, fake account creation, and API key abuse
• Configure and tune CDN, WAF, bot management, and rate-limiting controls to block abusive traffic without degrading the experience for legitimate users and clients
• Analyze traffic logs to understand how abusive actors behave, how they evade controls, and what they cost in infrastructure load and revenue
• Investigate new abuse patterns and trends, and work with the Data Abuse & Detection Engineer to turn findings into enforced edge and application controls
• Enforce acceptable-use and terms-of-service policies at the infrastructure level
• Manage infrastructure as code and apply security policy checks before changes reach production
• Apply least-privilege IAM, network segmentation, TLS management, and secrets handling across AWS environments
• Integrate security checks into CI/CD pipelines in partnership with the DevSecOps Lead, including dependency, container, and configuration scanning
• Detect and remediate configuration drift, and maintain centralized logging that supports both operations and security investigations
• Provide evidence from automated controls for audits and client security questionnaires
• Work with Engineering, Marketing, Product, and Legal/Compliance to update policies, close product loopholes, and protect site quality and data integrity
• Help marketing and product teams understand how traffic quality affects analytics, conversion metrics, and campaign reporting

Requirements:

• Bachelor's degree in computer science, a related technical field, or equivalent practical experience
• 3 years of experience with security attacks and mitigation methods, particularly bot, scraping, and application-layer threats
• Hands-on experience with CDN providers (Akamai, Cloudflare, Fastly) and their traffic management, WAF, and bot management features
• Experience with Elastic/OpenSearch or a comparable platform for log mining and analytics
• Solid understanding of TCP/IP, DNS, HTTP, and TLS, and how to manage traffic at each layer
• Proficiency in Linux administration and scripting (Python, Bash, or similar)
• Experience operating production systems in a public cloud environment
• Infrastructure as code (e.g. Terraform)
• Experience integrating security tooling into CI/CD pipelines
• Container and orchestration experience, including container security basics
• Observability tooling (e.g. Datadog)
• Experience protecting high-traffic commercial APIs
• Familiarity with SLOs, error budgets, and incident management practices
• Exposure to SOC 2 or ISO 27001 control environments