Software Engineer

Software Engineer 3Welcome to Our World. We've been leading the charge in the affiliate industry from day one—establishing performance marketing and paving the way for future innovations. We're known for maintaining one of the largest, most reliable partnership platforms with impeccable, personalized service. Founded in Santa Barbara, California in 1998, CJ (formerly Commission Junction) stands as the most trusted name in performance marketing. We specialize in building partnerships between top brands and reputable publishers to drive revenue and business growth. CJ's industry-leading solutions make us the platform of choice for over 3,800 global brands across sectors like retail, travel, finance, technology, and home services. As part of Publicis Groupe, our savvy data capabilities, cutting-edge tech, and strategic expertise facilitate genuine connections, allowing brands to reach consumers wherever they are.A Quick Peek at Affiliate Marketing. Think back to your last online purchase. Did an influencer tip you off about a great product and offer a discount? Or perhaps you relied on a trusted review site to make your decision? Whatever path you took, affiliate publishers likely played a role by influencing, informing, or helping you find the best deal. CJ connects brands with these publishers, creating valuable resources for shoppers like you.ResponsibilitiesWhat systems you will work on:Observability & monitoring — Prometheus, Alertmanager, Grafana, and OpenTelemetry across production regions. This is not dashboard-building: you'll own cardinality budgets and recording-rule design, keep a production Prometheus healthy as it outgrows a single shard (federation / sharding / long-term store), and understand Alertmanager HA and the blast radius of alert-routing config. Deep Prometheus and Alertmanager knowledge is a core requirement.Kubernetes & cloud infrastructure — multi-region EKS clusters: upgrades, node group and Karpenter management, controller lifecycle, and add-on / configuration management. Spot failure modes before they happen (subnet IP exhaustion, API server latency, ArgoCD reconciliation lag, Prometheus cardinality, Karpenter consolidation disruption).AWS networking — VPC and subnet design, CIDR management, VPC peering, Route53, security groups, and NAT gateway topology across accounts and regions, plus the 24/7 networking alarms for prod networking between clusters and squad resources.CI/CD & artifact management — GitLab administration (runner fleet, cache, access - not just pipeline authoring), GitOps delivery through ArgoCD, and the Nexus artifact repository including its storage lifecycle as it grows.Access & identity — Vault secrets management, IAM roles and service accounts for apps in clusters, cluster permission management for audit compliance, and AI model access management. Turn recurring access requests into self-service workflows that are hard to misuse.Cost observability — OpenCost, EBS orphan cleanup, cost anomaly investigation, and rightsizing attribution across teams.What You'll Do:Own and evolve meaningful pieces of the systems above - with a focus on what is happening and whyManage infrastructure-as-code with Terraform across AWS accountsBuild and maintain GitLab CI/CD pipelines and GitOps delivery (ArgoCD)Help enforce platform standards: RBAC, admission webhooks, resource limits, LimitRangesTurn recurring requests (ingress, DNS, service accounts) into self-service workflowsRespond to and help drive resolution of platform incidents, focused on learning and system improvementAct as a reviewer of infrastructure changes - Terraform, Kubernetes configs, observability configTechnologies We Use:Kubernetes / EKS (multi-cluster, multi-region), Karpenter, cert-manager, external-dnsPrometheus, Alertmanager, Grafana, OpenTelemetry (and long-term storage / sharding for Prometheus)AWS networking (VPC, VPC peering, Transit Gateway, Route53, NAT Gateway, security groups, subnet/CIDR design across accounts and regions)Terraform, AWS (IAM, EKS, S3, EBS)ArgoCD, GitLab CI/CD, Nexus (artifact registry), Docker, container image build pipelinesVault, OpenCostKubernetes controllers/operators (reconciliation patterns, restart safety) - Go experience is a plus, not requiredQualificationsWhat We Look For:3+ years of experience in software or infrastructure engineeringBachelor's degree or equivalent experienceHands-on production experience with Kubernetes and at least one major cloud (AWS preferred)Real operational depth in at least one system we own beyond the cluster - most valuably the observability stack (Prometheus/Alertmanager at scale), but AWS networking, Vault, or artifact/CI infrastructure also count. We are filtering for people who have run these systems, not just used them.Comfortable owning infrastructure-as-code (Terraform) and CI/CD pipelinesCan reason about tradeoffs and communicate the pros and cons of multiple approachesEffective communication; thrives in a collaborative, pair-friendly team cultureNice to Have:AWS networking depth (Transit Gateway, multi-account topology)Prometheus long-term storage / sharding (Thanos, Cortex, Mimir, or equivalent)Kubernetes controllers/operators - Go experience is a plus, not requiredPolicy-as-code (Kyverno / OPA)What Success Looks Like:You own platform components independently and ship changes that are intentional and low-riskThe systems you own are understood deeply enough that we stop making decisions we have to reverseProduction issues are understood quickly because of the observability and instincts you bringEngineers can deploy and debug services with less platform intervention over timeAdditional InformationThis is a hybrid role requiring 3 days a week in office. CJ is the leader in Performance Marketing. We take pride in our innovative technology, comprehensive data solutions and our people. We equip our teams with advanced tools, training and career development opportunities all to provide modern solutions, strategies and support to deliver high quality results for our clients. We work in an enthusiastic, collaborative team setting that values outstanding performance.We're a community of creative and passionate problem solvers who go the distance to tackle the tough questions, think creatively, and drive resourceful growth, for our clients—and ourselves. We foster and embody an inclusive and collaborative culture where diverse perspectives are sought, relationships are valued, and people feel accepted with a sense of belonging in expressing themselves authentically. We pride ourselves in having a workplace environment that values both work and play.Why Our Workplace Stands Out Apart from offering competitive salaries, 401K matching, wellness programs, and comprehensive medical, dental, and vision coverage, we provide:Flexible time off without the hassle of accrualA generous number of paid holidaysCompany-sponsored team-building eventsAn Employee Referral ProgramAnnual recognition awardsHybrid work arrangements for optimal work-life balanceParental bonding leaveBackup care options for children and eldersAn employee discount programInternational SOS program for global supportBusiness Resource Groups, where employees connect over shared interests to cultivate an engaging, inclusive environment…and those are just a few of our great perks! Come join us and see what makes our company a great place to work.If you require accommodation or assistance with the application or onboarding process specifically, please contact View email address on click.appcast.io your information will be kept confidential according to EEO guidelines. Compensation Range: USD $88,540.00 - USD $135,632.00/Annually. This is the pay range the Company believes it will pay for this position at the time of this posting. Consistent with applicable law, compensation will be determined based on the skills, qualifications, and experience of the applicant along with the requirements of the position, and the Company reserves the right to modify this pay range at any time. Temporary roles may be eligible to participate in our freelancer/