We're a fully distributed team and as required by federal law this role is open only to any US citizen based in the US.

➡️  Overview | What we do | The Role | Compensation | The Company | **Apply** | The Interview

Overview

• We’re looking for a backend infrastructure engineer to build deployment tooling as a product for large users self-hosting our platform within their cloud.
• You would be joining folks like Ross, Madi, Hugh, and Cameron to:
  • create an unexpectedly great deployment experience for self-hosting our product platform on any cloud
  • ensure the platform can scale to fulfill the needs in our SaaS cloud and self-hosted environments
  • develop backend product features as needed
• We build with Golang, Postgres, AWS, and Docker. We deploy on ECS on AWS and Kubernetes via AKS on Azure (Experience with these specific technologies not required!)

“Okay, but what would I be working on?”

Our flagship product is a message processing pipeline that runs detection rules written in MQL — "Message Query Language", our first-party DSL for querying email messages. This core function protects organizations from phishing. The Sublime Security platform monitors and analyzes all incoming email for an organization's employees, flagging suspicious messages for the security team to triage.

Here’s a conceptual view of how a rule is processed and what a flagged message looks like in our UI:

Behind MQL for writing detection rules are ML classification models, external services, functions like WHOIS lookup, headless browsing, and more.

Our systems handle large datasets and perform inherently complex and resource-intensive operations. However, our core competency—detecting and remediating attacks—requires extremely low latency. As a result, we have very little tolerance for performance degradation.

We can host a customer’s Sublime instance, or they can deploy our entire product stack on their own infra via AWS CloudFormation on ECS or Azure Resource Manager on Kubernetes via AKS. This diversity of deployment type adds some complexity to our development lifecycle. Our goal is to consolidate our infrastructure setup to make it easy for users to deploy Sublime in any environment.

A backend deployment engineer will focus on:

• Building our deployment product to enable users to easily deploy our product stack in their self-hosted environment. This involves directly partnering with users and incorporating their feedback to develop our deployment products.
• Ensuring our first-party SaaS deployment of the Sublime Platform can scale effectively to protect an expanding set of customer mailboxes.

Because we’re a small engineering team of generalist engineers, you sometimes may be asked to build general backend application features or fixes as needed.

Keep reading for specific examples of what you’d work on!