Want to know if this job is worth applying to?
United States
Remote only
Not Available
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff Site Reliability Engineer (SRE) based in the United States.
The Staff Site Reliability Engineer will lead the development of reliable, repeatable, and secure deployment solutions for a data security platform used by enterprise and government customers. You will focus on automating software delivery in customer-controlled environments, including air-gapped and disconnected systems where traditional remote access and telemetry may not be available. Working within a small, autonomous Delivery Engineering team, you will transform manual deployment procedures into reusable software, automated validation tools, and self-service resources. You will also define release readiness standards, strengthen compatibility testing across Kubernetes distributions, and improve deployment observability. This role combines deep infrastructure expertise with technical leadership and close collaboration across engineering, operations, and customer-facing teams. Your work will directly support scalable deployments while maintaining high standards for security, reliability, and operational excellence.
As a technical leader within Delivery Engineering, you will own the deployment lifecycle, establish engineering standards, and turn real-world customer challenges into scalable solutions. Your responsibilities will include:
Own deployment automation for the data security platform, including packaging, installation, upgrades, and validation across customer-managed environments.
Define and enforce release readiness criteria, serving as the technical authority on whether a customer environment is suitable for deployment.
Build and maintain end-to-end delivery workflows for air-gapped environments, including offline installation bundles, mirrored registries, signed artifacts, software bills of materials (SBOMs), and upgrades that operate without internet connectivity, shell access, or outbound telemetry.
Partner with QA to develop reproducible test environments and deployment test harnesses that validate releases across customer-relevant Kubernetes distributions, identity providers, and software versions.
Automate the generation of a customer-facing compatibility matrix so users can assess environment compatibility without relying on engineering support.
Establish infrastructure-as-code baselines that ensure deployments and upgrades begin from consistent, reproducible states.
Instrument deployment workflows to measure time to value, upgrade lag, first-time-right rates, and deployment costs, sharing relevant insights with operations teams to drive continuous improvement.
Design diagnostic and telemetry tools for disconnected environments, including workflows that allow customers to review and securely release local diagnostic files when automated data collection is restricted.
Convert customer engagement findings and recurring deployment challenges into reusable automation, tooling, and product improvements rather than relying on manual runbooks.
Collaborate with Platform Engineering on build and release pipelines, ensuring that required deployment and reliability standards are enforced before software reaches customers.
Bring field findings into product decisions, document outcomes, and help prevent recurring deployment failures.
Lead technical responses to complex customer deployment escalations, turning each issue into a lasting engineering improvement.
Develop AI-native engineering patterns that increase development and delivery velocity without compromising quality or security.
Establish technical standards for future team members, mentor junior engineers, and promote a DevOps-first culture across the organization.
Requirements:
The ideal candidate combines extensive site reliability and deployment engineering experience with strong automation skills, a security-first mindset, and the ability to solve problems in environments with limited access and visibility. Qualifications include:
Demonstrated experience shipping software into customer-controlled, disconnected, or air-gapped environments where internet access and shell access may be unavailable.
Hands-on experience building offline installation bundles and reliable software upgrade workflows for restricted environments.
Strong experience with Kubernetes across multiple distributions, such as EKS, OpenShift, RKE2, and k3s, including deep expertise in Helm packaging and troubleshooting distribution-specific issues.
Strong infrastructure-as-code and reproducible-environment practices, using tools such as Terraform or OpenTofu, CloudFormation, and Ansible.
Ability to build reproducible test environments that reflect specific combinations of Kubernetes distributions, identity providers, and software versions.
A proven commitment to replacing recurring operational toil with automation and reusable software rather than relying solely on documentation or manual procedures.
Strong troubleshooting and diagnostic skills, including the ability to resolve complex issues when remote access, live dashboards, and automated telemetry are unavailable.
Excellent communication and relationship-building skills, with the confidence to explain technical decisions to customers, partners, security teams, and engineering leadership.
A proactive, action-oriented approach, strong judgment, and the ability to make high-quality decisions independently in a fast-moving environment.
Ability to collaborate effectively across teams, adapt to changing priorities, challenge existing approaches constructively, and communicate asynchronously through tools such as Slack, email, and video calls.
Additional experience that would be valuable includes:
Argo CD or GitOps practices at scale.
Windows Server, PowerShell, MSI or MSIX packaging, and code signing.
Go programming, particularly in environments using Go-based data security platforms.
Identity and access management technologies, including Keycloak, OpenID Connect (OIDC), SAML, and alternative identity providers.
Federal compliance and software supply-chain security tooling, including STIG, OpenSCAP, SBOM generation, and artifact signing with Sigstore or equivalent solutions.
Offline deployment and troubleshooting tools such as Zarf, Hauler, oc-mirror, or troubleshoot.sh.
Podman and systemd-based container deployments for environments that do not use Kubernetes.
Zero Trust security architecture, policy enforcement and decision points, cryptography, attribute-based access control (ABAC), and identity systems.
An active TS/SCI security clearance or eligibility to obtain one. This is preferred but not required.
Benefits:
Annual compensation range of $190,000–$250,000 USD.
Flexible paid time off, in addition to 14 company holidays.
Annual learning and development stipend of $1,500.
Retirement plan with a flat 3% employer contribution.
401(k) contribution and stock options.
Comprehensive medical, dental, and vision benefits.
Generous parental, medical, and bereavement policies.
Employee Assistance Program.
Access to Headspace for mental health and well-being support.
Flexible working arrangements that accommodate personal appointments, family needs, and emergencies.
Company-sponsored team celebrations and opportunities to connect with colleagues.
New-hire welcome swag and IT equipment packages.
Structured semi-annual 360-degree performance reviews.
An inclusive workplace focused on diversity, equity, inclusion, belonging, and psychological safety.
The opportunity to shape deployment engineering practices and build scalable solutions for enterprise and government customers.
