Web Infrastructure Engineer (Contractor)

About Semgrep

Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it’s written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog.

Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Snowflake, Dropbox, and Figma. Learn more at semgrep.dev.

About the role

We are seeking a Contractor to help stabilize and modernize the infrastructure behind our website semgrep.dev. This project focuses on simplifying and strengthening our website’s deployment pipeline to reduce downtime during deployments, improve reliability, and enable faster, more predictable content publishing, while ensuring the marketing website operates independently from the product application so new URLs and pages can be added without requiring Infrastructure’s involvement.

You will work closely with Marketing, Infrastructure, and Engineering teams to streamline how our CMS (Statamic) content is built and deployed. The project includes finding ways to streamline our current submodule-based setup using existing tools to better automate deployments and reduce reliance on manual processes, while optimizing our use of CloudFront, S3, AWS, Kubernetes, and proxy layers for improved stability and performance.

At the end of this engagement, semgrep.dev will have a more reliable deployment process where:

• The Web Development team can deploy and push changes to production without taking down the CMS or disrupting ongoing content work.

• Content updates can be published instantly and automatically through a simplified deployment flow.

• New URLs and pages can be added to the marketing site without Infrastructure support.

What you’ll do

• Scope and assess the current marketing site and product application setup to identify dependencies, bottlenecks, and improvement areas.

• Research and propose infrastructure solutions and optimization strategies to simplify deployments and improve scalability.

• Develop a detailed execution plan outlining milestones, architectural updates, and rollout phases.

• Eliminate CMS downtime during deployments by improving Statamic’s build and publish flow.

• Ensure the marketing site operates independently from the product application so new URLs and pages can be added without Infrastructure involvement.

• Redesign the deployment pipeline with Infrastructure to enable faster, more reliable content releases

• Review and optimize AWS (S3, CloudFront, EKS/Kubernetes) configurations to support the new architecture.

• Partner with Marketing, Infrastructure, and Engineering teams to ensure performance, security, and monitoring best practices are implemented.
  

You are ideal for this role if you have

• 5+ years of experience in web infrastructure or DevOps roles with strong focus on deployment automation and CI/CD systems.

• Expertise with AWS services (S3, CloudFront, EC