Staff Site Reliability Engineer – SRE

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Take charge of deployment automation for the Data Security Platform, which includes packaging, installation, upgrades, and validation in environments controlled by customers.

• Create release criteria and assess whether environments are prepared for customer deployment.

• Develop the complete air-gapped delivery pipeline, encompassing offline bundles, mirrored registries, signed artifacts with SBOMs, and upgrades with no egress.

• Collaborate with QA to establish reproducible test fleets and deployment test harnesses across Kubernetes distributions, identity providers, and version states.

• Generate a published compatibility matrix through automated testing.

• Set up infrastructure-as-code baselines for standard deployments.

• Measure deployments by instrumenting them to track time to value, upgrade lag, first-time-right rate, and cost per deployment.

• Design telemetry collectors for disconnected operations that facilitate local file review and release.

• Transform customer engagement insights into reusable accelerators.

• Work with Platform Engineering on build and release pipelines, taking ownership of the deployment criteria they enforce.

• Incorporate field findings into documented product decisions.

• Serve as the technical authority for challenging customer deployment escalations, converting insights into automation, tooling, or product tickets.

• Establish technical standards for future engineers and define organizational best practices.

• Mentor and coach junior engineers while fostering a DevOps-first mentality.

• Collaborate with deployment engineers, forward deployed engineers, product engineering, QA, Platform Engineering, Operations, partners, and customers.

• Create AI-native design patterns that enhance velocity while ensuring quality and security.

⛳️ Requirements

• Experience in delivering software to inaccessible, air-gapped, disconnected, or customer-controlled environments without egress or shell access.

• Have personally constructed an offline installation bundle and a functional upgrade pathway.

• Proficient in Kubernetes across various distributions, including EKS, OpenShift, RKE2, or k3s.

• Deep understanding of Helm packaging.

• Familiarity with infrastructure as code and reproducible environments.

• Experience with Terraform or OpenTofu, CloudFormation, and Ansible.

• Capable of reproducing a customer's specific combination of Kubernetes distribution, identity provider, and version state on demand.

• Experience with Argo CD or GitOps at scale is a plus.

• Preferred, but not required: Windows Server, PowerShell, and MSI or MSIX packaging with code signing.

• Go proficiency is an advantage.

• Operational knowledge in Keycloak, OIDC, and SAML is beneficial.

• Familiarity with federal compliance and software supply-chain tools, including STIG, OpenSCAP, SBOM generation, and artifact signing with Sigstore or equivalent, is a plus.

• Hands-on experience with Zarf, Hauler, oc-mirror, or troubleshoot.sh is a plus.

• Podman and systemd-based container deployment experience are advantageous.

• Awareness of Zero Trust security architecture, Policy Enforcement/Decision Points, cryptography, ABAC, and identity is a plus.

• Existing TS/SCI US security clearance or eligibility for submission is a plus.

• Ability to collaborate, adapt to changing priorities, and communicate asynchronously via Slack, email, Zoom, etc.

• Proven ability to earn trust and credibility with partners and customers.

• Strong sense of urgency and an action-oriented mindset.

🏝️ Benefits

• Flexible PTO policy, in addition to 14 holidays.

• $1,500 annual Learning & Development Stipend.

• Company-sponsored team celebrations.

• Employee Assistance Program.

• Headspace mental health app.

• Flat 3% contribution to retirement account.

• High degree of flexibility for appointments, errands, and family emergencies.

• Competitive compensation.

• Generous parental, medical, and bereavement policies.

• 401K contribution and stock options.

• Comprehensive medical, dental, and vision benefits.

• New Hire Swag and IT Welcome boxes.

• Structured semi-annual 360° performance reviews.