About Keycard
At Keycard, we're building identity and access infrastructure for the agent-native era, where software isn't static but a energetic, constantly changing system of AI agents working on behalf of people and businesses. Keycard gives every agent a verified identity and issues short-lived, task-scoped credentials at runtime, so agents can only do what they were asked to do, and every action is fully auditable. We're backed by a16z, Boldstart, and Acrew, and our founding team built and scaled Snyk, Auth0, Hashi Corp, and Heroku.
The Role
We're hiring two staff-level Software Engineers, Infrastructure to own how Keycard is built, shipped, and run.
Keycard is a control plane for agents: identity, credential exchange, delegation, policy, and audit. Many of the enterprises adopting it need that control plane inside their own cloud, behind their network controls, with no standing access for us. Bring-your-own-cloud (BYOC) is a product at Keycard, not a services engagement. It's versioned, documented, and held to the same reliability and security bar as our hosted service.
You'll own Keycard's build and release systems,



our multi-tenant cloud, dedicated deployments, and deployments in customers' cloud accounts. Build common delivery and operating tools across them, with release safety, reliability, cloud cost, and repeatable installs as priorities. You'll work with founders, engineers, product, and customers, and agree escalation and on-call with engineering. We build on AWS (and later GCP and Azure), EKS, Pulumi, and Helm.
What You'll Do
BYOC product. Own what it's like to install, upgrade, and get support for Keycard in a customer's cloud, from what their security team reviews to how each version is documented.
Compatibility. Decide what we support, from clouds, regions, and Kubernetes versions to customer guardrails like SCPs and egress proxies. Set the skew limits and deprecation policy that keep our control plane and customer-hosted deployments compatible.
Deployments. Make a new deployment, ours or a customer's, a configuration change: infrastructure as code,

📌 Software Engineer, Infrastructure (Winnipeg)
🏢 Keycard
📍 Winnipeg