Jobs / Virtru
Staff Site Reliability Engineer (SRE)
Virtru · New York, NY, United States
New York, NY, United States190,000-250,000 USD/yearlyOnsite
Remuneration
$190,000 - 250,000/year
Location
New York, NY, United States
Visa sponsorship
Not specified
Job summary
Own the deployment path for a data security platform used in customer-controlled environments, including disconnected and air-gapped settings. Build automation for packaging, installation, upgrades, release validation, reproducible testing, and diagnostics, using technologies such as Kubernetes, Helm, Infrastructure as Code, and signed offline artifacts with software bills of materials. Partner with QA, deployment, platform, and product engineering teams to improve deployment reliability and turn field findings into reusable tooling.
Benefits
Flexible paid time off14 holidays1,500 annual learning and development stipend3% retirement account contributionStock optionsMedical, dental, and vision benefitsParental, medical, and bereavement policiesEmployee Assistance ProgramHeadspace access
Qualifications
- Experience shipping software into air-gapped, disconnected, or customer-controlled environments.
- Experience building offline installation bundles and upgrade paths.
- Experience with Kubernetes across distributions and Helm packaging.
- Experience with Infrastructure as Code and reproducible environments using tools such as Terraform, OpenTofu, CloudFormation, or Ansible.
- Ability to reproduce customer combinations of Kubernetes distribution, identity provider, and software versions.
- Preferred: Argo CD or GitOps at scale.
- Preferred: Windows Server, PowerShell, MSI or MSIX packaging, and code signing.
- Preferred: Go proficiency.
- Preferred: Operational experience with Keycloak, OIDC, SAML, and other identity providers.
- Preferred: Federal compliance and software supply-chain tooling, including STIG, OpenSCAP, SBOM generation, and artifact signing.
- Preferred: Experience with Zarf, Hauler, oc-mirror, or troubleshoot.sh.
- Preferred: Podman and systemd-based container deployment.
- Preferred: Familiarity with Zero Trust, policy enforcement and decision points, cryptography, ABAC, and identity.
- Existing TS/SCI clearance or eligibility to be submitted for one is a plus, not a requirement.
Responsibilities
- Own deployment automation, packaging, installation, upgrades, and validation for the Data Security Platform.
- Build an end-to-end air-gapped delivery path with offline bundles, mirrored registries, signed artifacts, and upgrades that require no network egress or shell access.
- Partner with QA to create reproducible deployment test fleets and harnesses across customer Kubernetes distributions, identity providers, and version states.
- Establish Infrastructure-as-Code baselines for standard deployments.
- Instrument deployments to measure time to value, upgrade lag, first-time-right rate, and deployment cost.
- Design diagnostics for disconnected environments, including locally reviewed diagnostic files.
- Turn engagement findings into reusable automation and tooling.
- Define release criteria and partner with Platform Engineering to enforce them.
- Bring field findings into product decisions and resolve recurring deployment failures.
- Lead difficult customer deployment escalations and convert findings into enduring assets.
- Set technical standards and mentor junior engineers.
Skills
AnsibleArgo CDBashCloudFormationEKSGoHelmK3sKeycloakKubernetesOpenShiftOpenTofuPodmanPowerShellSigstoreSlackTerraformWindowsWindows Server
Industry
Data securityCybersecurity
Security clearance
Existing TS/SCI US security clearance or eligible to be submitted for one is pre
Relocation
No