Senior Agentic Infrastructure Engineer

About Straddle, Inc.

Straddle is an open-banking payments platform for account-to-account money movement. We combine identity verification, fraud detection, and multi-rail payments, ACH, RTP, and soon FedNow, into a single API, so businesses can move money between bank accounts as easily as sending a text.

We're headquartered in Broomfield, Colorado, building infrastructure for how modern businesses get paid. Teams are lean, decisions are quick, and layers are minimal. If you care about quality and velocity in equal measure, you'll be in good company.

Senior Agentic Infrastructure Engineer - Platform & Security

Denver metro area preferred · Hybrid, with remote considered for exceptional candidates · Reports to the Head of Engineering

About the role

Straddle is building the infrastructure for better bank payments. We’re hiring an Agentic Infrastructure Engineer to build, operate, and defend the platform that moves money.

We’re committed to agentic engineering. You’ll work across platform engineering, DevSecOps, and security operations, using agents to build infrastructure, improve delivery, investigate incidents, and strengthen our defenses. You’ll also build the environments, permissions, and verification systems that let the rest of engineering do the same.

You are AI-pilled. You already use agents to do substantial engineering work, and you believe they will change how infrastructure is built, operated, and attacked. You know conventional defenses are a necessary foundation, but it won’t be enough for the world that’s emerging. You want to build defenses that hold up against adversaries using agents-and use agents yourself to detect, investigate, and respond.

This is a hands-on individual contributor role. You’ll report to the Head of Engineering and own production infrastructure and the systems that keep it reliable and secure.

We prefer candidates who can work from our Broomfield office at least three days per week. Remote arrangements are available for exceptional candidates.

What you’ll do

• Own the platform through production. Build and operate cloud infrastructure, networking, infrastructure as code, CI/CD, and developer environments. Make secure deployments easy, systems observable, and recovery dependable.
• Build the infrastructure for agentic engineering. Give engineers and agents repeatable environments, scoped access, and reliable workflows for provisioning resources, running checks, diagnosing failures, and shipping changes. Build verification, rollback, and recovery into the process.
• Secure our own agents. Design scoped identities, short-lived credentials, isolated execution environments, tool permissions, and audit trails. Test defenses against malicious instructions, compromised inputs, credential exposure, and misuse of access.
• Make security part of daily operations. Improve vulnerability management, secrets handling, access reviews, software supply chain security, and detection. Turn recurring investigations and manual procedures into tested automation.
• Own reliability and incident response. Improve telemetry, alerting, runbooks, and recovery procedures. Respond to production failures and security events, identify root causes, and make changes that prevent recurrence.
• Use agents to defend against agentic intrusions. Build workflows that proactively discover vulnerabilities and ship verified fixes before attackers can exploit them. Investigate suspicious activity, correlate evidence, and support containment and response. Test agent failure modes, measure effectiveness, and expand autonomy as they prove reliable.

Must-haves

• 7+ years in platform engineering, infrastructure, SRE, DevOps, or a closely related discipline, with meaningful ownership of production systems.
• Conviction and experience in AI-based development. Agents are central to how you work today. You’ve shipped substantial work with them and understand specification, decomposition, context management, and verification.
• Cloud and automation depth. Hands-on experience with a major cloud platform, infrastructure as code, CI/CD, containers, networking, and observability.
• Security fundamentals and operational judgment. You understand least privilege, secrets management, network boundaries, and secure deployment practices. You can reason about compromised workloads and credentials, limit blast radius, and plan for recovery.

What else you bring

• Startup experience and urgency. You’ve shipped on a small team with limited resources and changing priorities. You keep scope tight and make practical decisions with incomplete information.
• An engineering approach to operations. You write and review code, debug across system boundaries, and build durable automation for recurring problems.
• A drive to build agentic defenses. You want to use agents to proactively discover vulnerabilities, prioritize risk, and ship verified fixes before attackers can exploit them. You also want to detect, investigate, and contain attacks, including those carried out by other agents. You evaluate agent performance against evidence and understand where human judgment remains necessary.
• Accountability after deployment. You stay responsible for what you ship, including changes produced by agents. You can explain how you verified a change, what could fail, and how you would recover.
• Clear communication. You write useful technical plans and runbooks, explain tradeoffs, and work effectively across engineering and security. You reconsider when the evidence changes.

Nice-to-haves

• Hands-on cybersecurity or information security operations experience, including detection engineering, threat hunting, incident response, or SOC automation.
• Relevant security certifications such as CCSP, CISSP, or GCIH, or equivalent hands-on experience securing cloud infrastructure and responding to incidents.
• Building security automation around SIEM, EDR, cloud audit logs, or identity systems.
• Securing agent tools and execution environments against prompt injection, data exfiltration, and excessive permissions.
• Azure, Terraform, and GitHub Actions experience.
• Building agent tooling, evaluation harnesses, or developer infrastructure that other engineers adopted.
• Experience operating payments or other critical financial infrastructure.
• Experience managing the technical implementation of SOC 2.

Interview process

We’ll assess your infrastructure judgment, security experience, and agentic engineering skills through practical evaluation. Expect to discuss systems you’ve owned, controls you’ve operated, and substantial work you’ve shipped with agents. We’ll explore what went wrong, how you investigated it, and how you determined the work was ready for production.

*** There will be an in-person, on-site technical interview at our office. ***