Platform/DevOps Engineer

ABOUT VASCO Vasco is the revenue context layer for AI agents. The product was built around one idea: confident is not the same as correct, and revenue decisions get made on confidence all the time. We structure CRM, billing, calls, and support data into a semantic layer where every metric is sourced, every definition is locked, and every answer is deterministic, then build agents that take the manual busywork off people's plates. Our cofounders Guillaume and Seb already built and sold one startup together; today they are building the product they wished they had. Vasco's mission is to enable builders and GTM leaders to build a revenue engine that moves the business forward on data they can trust. Curious how we build? Take a look at our young engineering blog https://engineering.vasco.app/. ABOUT THE ROLE Platform/DevOps at Vasco has been a shared responsibility across our engineers. We're now hiring the first owner of our DevOps practice and infrastructure platform. In this role, you'll be accountable for the quality and standards of our infrastructure, security, observability, and monitoring, reporting to Seb, our CTO, and working with our product and data engineers. You'll set the blueprints and guardrails that let every engineer contribute to the platform fast and safely, and when something falls below the bar, you step in and fix the standard so the same miss does not repeat. Twelve months in, our engineers ship faster and safer on a platform that keeps getting stronger, and production runs with clear ownership when something breaks. You'll take on a lot of ownership and have a direct impact, with little red tape between you and the decisions. This role has a high bar: the problems are hard, we have strong foundations to build on, and you'll own infrastructure decisions and their implementation. We expect high autonomy and accountability, and the scope you own grows with your experience. We'll meet you where you are, and what matters is that you make the team better and more capable of facing complex technical challenges. We're an early-stage startup, so you should be ready to stretch beyond your comfort zone, stay open-minded, and wear more hats than your title suggests. You're AI-forward and you actively contribute to how we work with AI as a team. For transparency, the internal title for this role is Software Developer. WHAT YOU WILL DO - Platform standards: Own the quality bar for our infrastructure, security, observability, and monitoring, and maintain the blueprints and guardrails that let every engineer and their AI tools contribute safely. When a change misses the bar, you step in and fix the standard. - Infrastructure as code: Own our GCP infrastructure and Kubernetes platform as code in Terraform, so every environment is reviewable, repeatable, and ready to grow. - Delivery and developer experience: Maintain and improve the CI/CD, self-service tooling, and your part of our harness so shipping stays fast, safe, and reliable, including for AI-written code, with evidence a change is done. - Reliability and observability: Instrument the production signals that matter, good and bad, and cut the noise. Own the incident process so we catch issues before customers or support do, keep stakeholders informed, and fix fast, while squads own their alert routes. - Cost optimization: Own our cloud, vendor, and LLM costs: set targets, cut waste, and keep the trend visible. - Security and compliance: Own data security and access for systems that hold customer revenue data (IAM, secrets, network controls, Cloudflare, Aikido, model inference), with least privilege for all access, and help Seb keep us compliant. - Data platform support: Support the infrastructure behind our data pipelines and warehouse, alongside our data engineers. WHAT WE’RE LOOKING FOR - Production infrastructure owner, with 6+ years of relevant experience. If you’ve owned production cloud infrastructure end-to-end, on GCP or a close equivalent, as the main person responsible for it, let’s talk. - Infrastructure as code. You've managed production environments with Terraform, with code as the only way infrastructure changes. - Delivery pipelines engineers rely on. You've built or improved CI/CD and self-service tooling that a product team ships through daily, and made it faster or safer without routing their work through you. - AI fluency. You've made AI coding tools part of how you ship real work, you know how to verify what they generate, and you can keep a high volume of AI-written changes safe. - Incident ownership. You've set up monitoring and alerting that catches problems before customers do, owned the incident process, and run postmortems that changed how the team works. - Security for sensitive data. You've implemented IAM, secrets management, and network controls with least privilege as the default, for systems holding sensitive customer data. - Cost ownership. You've cut cloud spend without hurting reliability and kept cost visible to the team. WHAT'LL MAKE YOU STAND OUT - Our stack. You've worked with GCP, Kubernetes, BigQuery, Pub/Sub, Cloud Tasks, Terraform, Atlantis, CircleCI, Datadog, Incident.io http://Incident.io, Cloudflare, Aikido, Node.js, or TypeScript, or close equivalents. - Data platform infrastructure. You've run infrastructure for data pipelines and warehouses (we use Airbyte, Dataform, and BigQuery). - Infrastructure for AI workloads. You've run infrastructure for LLM or agent workloads, including usage and cost controls. - Compliance. You've helped a team through SOC 2 or a similar framework. WHY VASCO - Small, high-caliber team, with experienced founders still building alongside you. - Early-stage pace and real ownership: the problems are unsolved, the path isn't fixed, and your judgment and capabilities shape what happens next. - AI-forward, both in how we work day to day and in what we build for customers. - Real autonomy, with room to experiment, pick up new skills, and take on projects outside your role: nobody here is boxed in. - Compensation within the top of the national market, stock options for every team member, uncapped paid time off, generous parental leave, and 100% employer-paid health benefits for you and your dependents. WHERE YOU’LL WORK This position is hybrid in Montreal— three days in-person per week (Monday, Tuesday, and Thursday) at WeWork Place Ville-Marie in downtown Montreal. HIRING PROCESS - Discovery Call with our talent partner (30mins) - Hiring Manager Interview (45mins) - Technical Stage (Challenge + 60 to 90mins Interview) - Final Interview with our CEO (30mins) We want you to feel informed and supported at every step. You'll always know where you stand, and we encourage you to ask us anything along the way. A note on AI: We use AI to help with note-taking during interviews. You can opt out anytime with no impact on your candidacy, and AI plays no part in our hiring decisions. On your side, feel free to use AI the way you would in the actual work, just use it thoughtfully. We're an AI company; we know polished AI output when we see it, and what we're really after is how you think and what you can do. Background check: The selected candidate will be required to complete a background check before starting. We hire on the strength of what you bring, regardless of who you are. Need an accommodation at any point in the process? Tell us at jobs@vasco.app and we'll make it work. ______ À PROPOS DE VASCO Vasco est la couche de contexte revenu pour les agents IA. Le produit a été bâti autour d'une idée: être confiant, ce n'est pas être dans le vrai, et les décisions de revenu se prennent sur la confiance tout le temps. Nous structurons les données de CRM, de facturation, d'appels et de support dans une couche sémantique où chaque métrique est sourcée, chaque définition est verrouillée, et chaque réponse est déterministe, puis nous bâtissons des agents qui automatisent des tâches manuelles et répétitives. Nos cofondateurs Guillaume et Seb ont déjà bâti et vendu une startup ensemble; aujourd'hui, ils bâtissent le produit qu'ils auraient voulu avoir. La mission de Vasco: permettre aux builders et aux leaders GTM de bâtir un moteur de revenu qui fait avancer l'entreprise, sur des données auxquelles ils peuvent faire confiance. À PROPOS DU RÔLE Chez Vasco, le Platform/DevOps a été une responsabilité partagée entre nos ingénieurs. Nous recrutons maintenant la première personne à prendre en charge notre pratique DevOps et notre plateforme d'infrastructure. Dans ce rôle, tu seras responsable de la qualité et des standards de notre infrastructure, de notre sécurité, de notre observabilité et de notre surveillance, en relevant de Seb, notre CTO, et en travaillant avec nos ingénieurs produit et données. Tu établiras les blueprints et les guardrails qui permettent à chaque ingénieur de contribuer à la plateforme rapidement et en toute sécurité, et quand quelque chose passe sous la barre, tu interviens et tu corriges le standard pour que la même erreur ne se répète pas. Douze mois plus tard, nos ingénieurs livrent plus vite et plus sûrement sur une plateforme qui ne cesse de se renforcer, et la production roule avec une responsabilité claire quand quelque chose plante. Tu auras beaucoup d'autonomie et un impact direct, avec peu de bureaucratie entre toi et les décisions. Ce poste place la barre haut: les problèmes sont difficiles, nous avons de solides fondations sur lesquelles bâtir, et tu prendras en charge des décisions d'infrastructure et leur implémentation. On attend une grande autonomie et une grande responsabilisation, et l'envergure de ce que tu prends en charge grandit avec ton expérience. On te rejoint là où tu es, et ce qui compte, c'est que tu rendes l'équipe meilleure et plus capable de faire face à des défis techniques complexes. Nous sommes une startup en démarrage, alors tu dois être prêt·e à sortir de ta zone de confort, à rester ouvert·e d'esprit et à porter plus de chapeaux que ton titre le laisse croire. Tu as le réflexe IA et tu contribues activement à notre façon de travailler avec l'IA en équipe. Pour être transparents, le titre interne de ce poste est Développeur·se logiciel. CE QUE TU FERAS - Normes de la plateforme: Prendre en charge la barre de qualité de notre infrastructure, de notre sécurité, de notre observabilité et de notre surveillance, et maintenir les blueprints et les guardrails qui permettent à chaque ingénieur et à ses outils d'IA de contribuer en toute sécurité. Quand un changement n'atteint pas la barre, tu interviens et tu corriges le standard. - Infrastructure en code: Prendre en charge notre infrastructure GCP et notre plateforme Kubernetes sous forme de code dans Terraform, pour que chaque environnement soit révisable, reproductible et prêt à grandir. - Livraison et expérience développeur: Maintenir et améliorer le CI/CD, les outils en libre-service et ta part de notre harness, pour que la livraison reste rapide, sûre et fiable, y compris pour le code écrit avec l'IA, avec la preuve qu'un changement est terminé. - Fiabilité et observabilité: Instrumenter les signaux de production qui comptent, bons comme mauvais, et réduire le bruit. Prendre en charge le processus d'incident pour détecter les problèmes avant nos clients ou l'équipe de soutien, garder les parties prenantes informées et corriger vite, pendant que les squads gardent leurs routes d'alerte. - Optimisation des coûts: Prendre en charge nos coûts cloud, fournisseurs et LLM: fixer des cibles, éliminer le gaspillage et garder la tendance visible. - Sécurité et conformité: Prendre en charge la sécurité des données et les accès pour les systèmes qui contiennent les données de revenu de nos clients (IAM, secrets, contrôles réseau, Cloudflare, Aikido, sécurité de l'inférence des modèles), avec le moindre privilège pour tous les accès, et aide…