Description:

Join the VRChat Team, a platform offering a unique collection of social VR experiences and empowering community creation.
The company has raised $100M to date and has a diverse team from notable companies like Netflix, Twitter, and Google.
The role is for a DevOps Engineer with security experience, responsible for the uptime, security, and cost-effectiveness of VRChat's infrastructure.
The position involves ensuring the smooth operation of infrastructure supporting millions of active users and petabytes of user-generated content.
Responsibilities include day-to-day operation and maintenance of infrastructure, incident management, implementing security controls, designing IT infrastructure in a hybrid cloud environment, automating monitoring systems, and coordinating with internal and external stakeholders.
The role reports to the VP of Engineering and requires collaboration with IT and Development teams.

Requirements:

A minimum of 8 years of proven experience in a DevOps role, preferably in a high-growth consumer-facing company or startup environment.
Experience with hybrid cloud environments and infrastructure as code tools such as Terraform and OpenTofu.
Proficiency in reliable networking tools like Wireguard and Tailscale.
Familiarity with content delivery networks (CDNs).
Knowledge of data stores setup, configuration, and operation, specifically MongoDB and Redis.
Experience in proactive system hardening, technical security audits, and threat-hunting across interconnected systems.
Ability to respond to and mitigate operational and security incidents, coordinating with internal security, legal, and public relations teams.
Strong knowledge of web application and API security, with scripting skills in Node.js and Golang.
Experience with real-time multiplayer game engines and application security is desirable.
Familiarity with cybersecurity frameworks such as MITRE ATT&CK, COBIT, and ITIL.
Knowledge of ISO27001/27002, SOC2, IG2 certifications and standards.
Expertise in building security infrastructure compliant with FTC guidance and international privacy laws like GDPR is preferred.
Exceptional communication skills to articulate concepts to both technical and non-technical stakeholders.