Staff DevOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the technical direction and architecture of cloud infrastructure.

• Design, build, and manage a cloud-native platform tailored for a multi-tenant managed service.

• Ensure production readiness for enterprise launch, encompassing SLOs, error budgets, runbooks, failover testing, and business continuity.

• Manage DNS production infrastructure, which includes zone operations, DNSSEC, registrar and provider integrations, and cross-provider failover.

• Oversee signing and certificate infrastructure, focusing on key custody, rotation, signing-path availability, and certificate lifecycle management.

• Develop the delivery pipeline utilizing policy-as-code, necessary checks, and merge guardrails.

• Release signed versions with provenance and supply-chain controls.

• Enhance the platform through logging, metrics, and tracing instrumentation.

• Automate audit-readiness infrastructure, including audit logging, retention, access reviews, and evidence gathering.

• Monitor cloud expenditure, unit economics, and workload costs.

• Evaluate engineering designs, mentor engineers, and contribute to establishing hiring standards.

• Formulate the on-call practice, serve as incident commander, and facilitate blameless postmortems.

• Uphold Identity Digital’s core values through everyday decisions and interactions.

• Execute additional duties as assigned.

⛳️ Requirements

• Over 10 years of experience in DevOps, site reliability, or platform engineering, including principal or staff-level responsibilities.

• Bachelor’s degree in a relevant discipline or equivalent experience.

• Extensive experience with cloud-native architectures and services, preferably with AWS/GCP.

• High proficiency in Kubernetes, Terraform, and infrastructure-as-code practices.

• Practical experience with CI/CD systems like GitHub Actions, GitLab CI, or ArgoCD.

• Strong scripting or programming capabilities in Python, Go, or TypeScript/JavaScript.

• Experience in building observability stacks such as Prometheus, Grafana, ELK/EFK, or OpenTelemetry.

• In-depth knowledge of DNS operations, zone management, DNSSEC, registrars, resolvers, and authoritative providers.

• Comprehensive understanding of PKI, secrets management, and certificate workflows.

• Experience managing multi-tenant SaaS and distributed systems in production, including incident command roles.

• Proven track record of enhancing operational standards through design reviews and mentorship.

• Willingness to travel as required.

• Capability to work efficiently across time zones within a distributed team.

• Availability to participate in production on-call rotations.

• Ability to lift up to 15 pounds occasionally.

• Preferred: experience with signing infrastructure or certificate-authority operations at scale, including HSM/KMS key custody and rotation without downtime.

• Preferred: knowledge of supply-chain security leveraging SLSA, sigstore/cosign, reproducible builds, and provenance.

• Preferred: familiarity with agentic AI systems, short-lived credentials, egress control, and OWASP Agentic and NHI Top 10.

• Preferred: experience with SOC 2 or similar audit programs.

• Preferred: experience in transitioning products from prototype to general availability.

• Preferred: contributions to open-source infrastructure or operations tooling.

• A successful offer is contingent upon a satisfactory background check.

• Work sponsorship may not be available now or in the future.

🏝️ Benefits

• Medical, dental, and vision insurance options.

• Company contributions to Health Savings Accounts.

• Company-paid life and disability insurance.

• Optional employee-paid supplemental life, accidental death and dismemberment, critical illness, and accident insurance.

• 401(k) plan with a company match of up to 5%.

• 15 days of paid vacation annually, increasing to 20 days after one year of service.

• 5 days of paid sick leave.

• 13 paid holidays throughout the year.

• 20 weeks of paid parental leave for birthing parents.

• 12 weeks of paid parental leave for non-birthing parents.

• Tuition reimbursement for eligible expenses.

• Remote work flexibility.

• Discretionary and/or nondiscretionary bonuses.

• Long-term incentive plans.