Staff Software Engineer, Security Infrastructure

About ParafinAt Parafin, we're on a mission to grow small businesses. Small businesses are the backbone of our economy, but traditional banks often don't have their backs. We build tech that makes it simple for small businesses to access the financial tools they need through the platforms they already sell on. We partner with companies like DoorDash, Amazon, Worldpay, and Mindbody to offer fast and flexible funding, spend management, and savings tools to their small business users via a simple integration. Parafin takes on all the complexity of capital markets, underwriting, servicing, compliance, and customer service for our partners. We're a tight-knit team of innovators hailing from Stripe, Square, Plaid, Coinbase, Robinhood, CERN, and more all united by a passion for building tools that help small businesses succeed. Parafin is backed by prominent venture capitalists including GIC, Notable Capital, Redpoint Ventures, Ribbit Capital, and Thrive Capital. Parafin is a Series C company, and we have raised more than $194M in equity and $340M in debt facilities. Join us in creating a future where every small business has the financial tools they need.About the PositionWe're seeking an experienced software engineer to join our Infrastructure team to lead key initiatives around security-focused platform engineering. At Parafin, the Infrastructure team owns core platforms spanning cloud infrastructure, compute, networking, developer experience, data infrastructure, and security.In this role, you'll design and implement scalable, secure systems and tooling that empower engineers to move quickly while maintaining a strong security posture. You'll play a critical role in shaping how we manage access, secure our compute and networking layers, and build foundational infrastructure that supports our rapidly growing platform.What You'll Be DoingLead the design and implementation of secure, reliable infrastructure platformsacross compute, networking, identity, and policy enforcement.Own and evolve the security posture of our Kubernetes platform, focusing on isolation, observability, and resilience.Build and operate systems for managing secrets, service-to-service auth, and access control.Define and codify best practices in infrastructure security, infrastructure-as-code, and software integrity.Collaborate with engineers across Infrastructure and Product teams to introduce secure-by-default tooling and abstractions.Drive improvements to our availability, incident response, and audit capabilities through automation and thoughtful platform design.Mentor engineers and influence a culture of security-minded engineering across the company.What We're Searching For8+ years of experience in software or infrastructure engineering, with significant focus on secure infrastructure and platform development.Strong proficiency in coding languages such as PythonDeep expertise with Kubernetes and its surrounding ecosystem (e.g., service mesh, admission controllers, observability, RBAC).Experience operating cloud infrastructure (preferably AWS), including IAM, VPCs, and secure configuration management.Proficiency with infrastructure-as-code tools such as Terraform.Familiarity with secrets management (e.g., Vault), CI/CD hardening, and runtime/container security practices.Strong problem-solving and debugging skills in distributed systems.Excellent communication skills and experience collaborating with cross-functional teams.We Prefer If You HaveExperience building or maturing security infrastructure in a fast-paced or regulated environment.Understanding of compliance requirements in fintech (e.g., SOC 2, PCI) and how to build guardrails that support them.A track record of building internal tools or reusable platform abstractions adopted by multiple teams.What We OfferSalary Range: $235k - $300kEquity grantMedical, dental & vision insuranceUnlimited PTO & work from home flexibilityCommuter benefitsFree lunchesPaid parental leave401(k)Employee assistance programIf you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please contact us.