DeliverThat is looking for a full-time, highly motivated Tech Lead to own the platform and security lane of our small but growing tech team. This person will lead a team of DevOps developers and a data engineer, work directly with the CTO, and be responsible for the security, reliability, and scalability of our platform across AWS and Google Cloud. Our customers are multi-location restaurant brands that trust us with their orders, their customers’ data, and their delivery operations, and many of them review our security before they sign. This role makes sure we earn that trust. Expect to wear multiple hats and work across our whole platform and tech stack.
This is a hands-on role. You’ll set technical direction and review your team’s work, and you’ll also write infrastructure code, harden systems, and respond to incidents yourself.
We especially want to hear from you if you’re technically strong, think about security as part of how systems are built rather than something added afterward, and are happy to jump in wherever you can help keep the team moving.
WHAT YOU’LL NEED:
Ideal candidates are self-motivated and have led small engineering teams by example. They have a range of past experience that lets them pick up new software and technologies quickly, and they mentor the people around them.
The experience below is all desired, not required. We are looking for well-rounded people with a strong work ethic and a hunger for learning.
The tech experience we are looking for:
- AWS, including IAM, VPC networking, RDS/Aurora PostgreSQL, S3, and core security services (CloudTrail, GuardDuty, Security Hub, KMS).
- Google Cloud, including IAM, Firestore and Firebase (including Security Rules), Cloud Logging, and Security Command Center.
- Infrastructure as Code (Terraform preferred) and managing environments through code review rather than console changes.
- CI/CD pipelines (GitHub Actions preferred), including deployment controls, branch protection, and secrets management.
- Application security for a TypeScript/Node.js stack: secure code review, dependency and container scanning, and the OWASP Top 10.
- Security architecture: least-privilege access, network segmentation, encryption in transit and at rest, and protection of personal data.
- Security monitoring, detection, and incident response, including centralized logging, alerting, on-call, and postmortems.
- Operating production databases (PostgreSQL and Firestore): backups, recovery testing, access control, and performance under load.
- Identity and access management across cloud, SaaS, and code platforms, including SSO and role-based access.
- Endpoint security and device management for a distributed team.
- Familiarity with SOC 2 or similar compliance frameworks.
- Bonus: Data platform infrastructure, especially Databricks. Familiarity with Vercel.
What you will do:
- Lead a lane of 2–3 engineers covering DevOps, security, and data platform infrastructure: set technical direction, plan and assign work, review code, and help them grow.
- Own the architecture, reliability, and scalability of our platform across AWS and Google Cloud, including environments, deployments, databases, and infrastructure as code.
- Own the security of the platform. Find and close gaps in access, network exposure, configuration, and data handling, and prioritize the work by risk.
- Build security into how we ship. Review designs and code for security issues, run scanning in CI, and set the standards the rest of engineering follows.
- Protect customer, merchant, and driver data through encryption, access restrictions, and database and Firestore access rules.
- Set up monitoring and alerting for both outages and suspicious activity, and lead the response when something happens.
- Own access control across production, the data platform, and SaaS tools, including provisioning, deprovisioning, and regular access reviews.
- Plan and coordinate penetration tests, and make sure findings get fixed.
- Lead us through our first SOC 2 audit, then help maintain the platform’s SOC 2 compliance by operating the technical controls and producing the evidence our audits require.
- Own the infrastructure, security, and reliability of our data lakehouse, partnering with the CTO on data modeling and pipeline direction.
- Support sales by answering customer security questionnaires.
- Suggest process and tooling improvements that make the platform more secure and easier to operate.