Staff / Principal Software Engineer, Infrastructure Security

Job summary

Responsibilities

TL;DR You'll be the most senior engineer making sure Lovable's infrastructure is impossible to compromise. Cloud, identity, build pipelines, and runtime - yours to harden.

• Set the technical direction for cloud, identity, and build/runtime security at Lovable.
• Design and ship guardrails: workload identity, least-privilege IAM, network segmentation, secrets management, and prod access.
• Harden the supply chain end-to-end - from developer laptop to production deploy.
• Partner with Platform, SRE, and the Lovable Apps Platform team to make the secure path the easy path.
• Mentor engineers across the company and raise the security bar by default, not by review.

What they're looking for

• 8+ years in infrastructure or cloud security, with at least 3 at staff/principal level.
• Deep expertise in GCP, AWS, and Cloudflare security primitives - IAM, network, KMS, workload identity, edge security.
• Hands-on with Kubernetes, Terraform, Wiz, GitHub Actions, and modern CI/CD - and a clear view on supply-chain security (SLSA, sigstore, SBOMs).
• Comfort writing Go, Python, or Rust to ship guardrails as code, not policies as PDFs.
• Track record of measurably reducing blast radius - secrets, lateral movement, prod access - at a high-growth company.

Tech stack

• GCP
• AWS
• Kubernetes
• Terraform
• Go
• Python
• Rust
• React