Web Infrastructure Engineer (Contractor)

About Semgrep

Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it’s written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog.

Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Snowflake, Dropbox, and Figma. Learn more at semgrep.dev.

About the role

We are seeking a Contractor to help stabilize and modernize the infrastructure behind our website semgrep.dev. This project focuses on simplifying and strengthening our website’s deployment pipeline to reduce downtime during deployments, improve reliability, and enable faster, more predictable content publishing, while ensuring the marketing website operates independently from the product application so new URLs and pages can be added without requiring Infrastructure’s involvement.

You will work closely with Marketing, Infrastructure, and Engineering teams to streamline how our CMS (Statamic) content is built and deployed. The project includes finding ways to streamline our current submodule-based setup using existing tools to better automate deployments and reduce reliance on manual processes, while optimizing our use of CloudFront, S3, AWS, Kubernetes, and proxy layers for improved stability and performance.

At the end of this engagement, semgrep.dev will have a more reliable deployment process where:

• The Web Development team can deploy and push changes to production without taking down the CMS or disrupting ongoing content work.

• Content updates can be published instantly and automatically through a simplified deployment flow.

• New URLs and pages can be added to the marketing site without Infrastructure support.

What you’ll do

• Scope and assess the current marketing site and product application setup to identify dependencies, bottlenecks, and improvement areas.

• Research and propose infrastructure solutions and optimization strategies to simplify deployments and improve scalability.

• Develop a detailed execution plan outlining milestones, architectural updates, and rollout phases.

• Eliminate CMS downtime during deployments by improving Statamic’s build and publish flow.

• Ensure the marketing site operates independently from the product application so new URLs and pages can be added without Infrastructure involvement.

• Redesign the deployment pipeline with Infrastructure to enable faster, more reliable content releases

• Review and optimize AWS (S3, CloudFront, EKS/Kubernetes) configurations to support the new architecture.

• Partner with Marketing, Infrastructure, and Engineering teams to ensure performance, security, and monitoring best practices are implemented.

You are ideal for this role if you have

• 5+ years of experience in web infrastructure or DevOps roles with strong focus on deployment automation and CI/CD systems.

• Expertise with AWS services (S3, CloudFront, EC2/ECS, Lambda, Route53, etc.).

• Hands-on experience with Kubernetes, Docker, and containerized deployment workflows.

• Deep understanding of CI/CD pipelines and experience improving deployment processes for static or hybrid sites.

• Familiarity with static site generators or CMS-driven sites (Statamic, Laravel, or similar frameworks a plus).

• Strong knowledge of Git, branching strategies, and repository management.

• Comfort working in cross-functional environments across Marketing, Infrastructure, and Engineering.

• Excellent written documentation and communication skills.

Bonus Points For:

• Understanding of CDN caching, proxy routing, and build optimization techniques.

• Familiarity with Netlify or other static site hosting workflows.

Compensation

Contract hourly range: $80-$100 per hour, up to 40 hours a week

What we offer (FTE only)

Our goal is to competitively and fairly compensate every Semgrep employee with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. To that end, we generate internal compensation bands that are used when discussing and negotiating salaries. We update these based on market data to make sure they’re above the average for comparable roles.

We invest in our employees’ well-being and long-term success through a competitive, market-aligned benefits program that meets or exceeds local market standards across all of the regions in which we hire. Benefits offerings vary by location to reflect local requirements and norms. For more detailed, location-specific information, please visit Semgrep Benefits.

Who we are

We bring together people from a wide range of backgrounds and disciplines—from physics and philosophy to formal methods research and full-fledged corporations. We’re new parents and new grads, dog lovers and dogfooders. We get together often to bike, bake, and meet up in parks. In our interactions, we believe respect and honesty go hand in hand, and prioritize both.

Semgrep is an equal-opportunity employer seeking a diverse range of backgrounds. We value who you are — including your cultural heritage, your socioeconomic status, your age, your race, your gender, your sexual orientation, your disabilities. We value what’s vitally important to you — your family, your religion, your politics. We value what you love in this world — your music, your weekend pursuits. We believe in welcoming varied professional backgrounds, educations, and interests. If you’re exceptional in your role, believe in Semgrep’s mission, and treat Semgrep’s values as your own, you belong here.

Please Note: For US-based roles open to remote work, we are currently able to hire employees in the following states only: Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Illinois, Maryland, Massachusetts, Michigan, Missouri, Nebraska, New Jersey, New York, North Carolina, Oregon, Tennessee, Texas, Virginia, Washington, and Wisconsin.