Site Reliability Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Develop automation solutions for compliance workflows, covering asset discovery, scanning, and remediation processes.

• Create and uphold the Compliance Register alongside continuous monitoring systems.

• Incorporate security tools like RunZero, Qualys, and vulnerability scanners into automated deployment pipelines.

• Craft policy-as-code frameworks to ensure continuous validation of infrastructure and application configurations.

• Generate dashboards and reports that deliver transparent insights into the organization's compliance status.

• Troubleshoot compliance issues in production environments, focusing on asset inventories, security tools, and automated workflows.

• Collaborate closely with Security, Risk, and SRE teams to convert compliance needs into scalable technical solutions.

• Minimize organizational toil by developing self-service tools, automated guardrails, and dependable compliance workflows.

• Engage in a sustainable on-call rotation, approximately 16 days per year.

⛳️ Requirements

• Proven experience with Linux, cloud infrastructure, automation, or production systems.

• Competence in at least one programming language; experience with Python or Go is particularly valuable.

• Background in building automation, infrastructure-as-code, configuration management, or operational tools.

• Familiarity with APIs and the integration of data across various systems or distributed services.

• Strong troubleshooting and analytical abilities, including debugging skills in production environments.

• Interest in security, compliance, governance, or risk sectors and their relation to reliable infrastructure.

• Capability to convey technical concepts effectively to cross-functional teams.

• Experience in vulnerability management, asset discovery, SIEM, or compliance automation tools; familiarity with RunZero or Qualys is advantageous.

• Knowledge of compliance frameworks such as FedRAMP, NIST, PCI, SOC 2, or ISO.

• Practical experience with AWS or other cloud services.

• Familiarity with infrastructure-as-code or configuration management tools like Terraform or Ansible.

• Experience with observability, reporting, or data pipeline platforms such as Grafana, ELK, or similar technologies.

• Experience managing containerized services using Docker, Kubernetes, or related technologies.

• A strong foundation, ownership mentality, and eagerness to learn are more important than previous compliance-specific experience.

🏝️ Benefits

• Flexible work arrangements