Senior DevOps Engineer

About Nabis Nabis is the #1 licensed cannabis wholesale platform in the world, supplying $1B+ worth of cannabis products annually from hundreds of brands to retailers across California, New York, and Nevada. Our mission is to empower the world to discover cannabis by providing choice, access, and innovation.Through modern, scalable infrastructure, our mission is to empower the world to discover cannabis by providing choice, access, and innovation. We’re at the forefront of this movement, building an innovative, technology-first platform to scale the entire cannabis industry. Backed by Y Combinator and investors, including DoorDash Co-Founder Stanley Tang, NFL Hall of Famer Joe Montana, Gmail creator Paul Buchheit, and Twitch co-founder Justin Kan, Nabis is rapidly expanding across the U.S. with the goal of becoming the largest and most influential cannabis distribution network globally. Location Eligibility: This role is open to candidates based in the following states: CA, CO, FL, GA, IA, ID, IL, KS, MA, MD, ME, MI, MO, NJ, NV, NY, TN, TX, UT, VA, or WA. Applicants residing outside of these states will not be considered at this time. About the Role We're a platform engineering team operating the infrastructure behind a data and application platform on AWS. We've built the core (the 0-to-1) — now we need someone who has done the 1-to-2 before: taking proven-but-scrappy systems and making them resilient, secure, and repeatable as the organization grows. You'll own the systems that let our application and data teams ship safely and fast — CI/CD pipelines, Kubernetes operations, our managed Postgres fleet, and the streaming/CDC backbone — and you'll bring the operational, security, and compliance rigor that lets us scale without breaking. This is a hands-on senior role with real ownership: you'll set standards, not just follow them. Responsibilities: Own and evolve our CI/CD pipelines, leading the in-flight migration from GitLab CI to GitHub Actions — driving the cutover with the team, standardizing reusable workflows, and improving build and deploy speed and reliability. Operate and harden our EKS clusters alongside the team: upgrades, networking, autoscaling, security, and the day-to-day reliability of the workloads running on them. Help own our RDS/Aurora Postgres fleet — performance tuning, replication, connection management, backup and restore — partnering with application engineers on schema and query concerns. Operate our Kafka platform (self-hosted on Kubernetes via Strimzi) and the Debezium-based CDC pipelines that depend on it, working with the team on connector health, schema evolution, and throughput. Help provision and operate our data lake: Apache Iceberg tables in S3 fed by the CDC pipeline above, with Snowflake as the query and compute layer and dbt for transformations. You'll own infrastructure management, table and storage operations, access governance, and cost controls — warehouse sizing, auto-suspend, and credit monitoring — keeping the lake reliable and affordable as data volume grows. Support analytics-engineering workflows on dbt — environments, CI/CD for dbt projects, automated testing and deployment — partnering with the data and analytics teams who own the models themselves. Own and extend our infrastructure-as-code in Terraform, treating infra changes with the same rigor as application code: review, testing, and repeatability. Help build security into the platform and pipelines: secrets management, least-privilege IAM, network segmentation, dependency and image scanning, and OWASP-aligned practices baked into CI/CD rather than bolted on after. Contribute to and help mature our SOC 2 posture from the infrastructure side — access and change-management controls, audit logging, evidence collection, and automation — working toward a compliance process that's continuous rather than a fire drill. Help mature our operational practices as we scale: codifying standards, formalizing on-call and incident response,