Staff Site Reliability Engineer (SRE)

Virtru protects data wherever it travels, for customers ranging from commercial enterprises to the Department of Defense, the Intelligence Community, Law Enforcement, and Federal Civilian agencies. As a Staff Site Reliability Engineer in the Delivery Engineering organization, you will help build a team focused on making customer deployments simple, easy, and fast, including one-click deployability, customer self-service compatibility matrices, pre-release deployability validation, and observability and diagnostics customers can act on without Virtru present. The role works alongside a Principal Software Development Engineer who owns Delivery Engineering's engineering standard and reusable-asset architecture.

Responsibilities

Own deployment automation for the Data Security Platform, including packaging, installation, upgrades, and validation in environments Virtru does not operate; Author the criteria a release must meet before it ships to a customer and be the authority on whether an environment is ready; Build the air-gapped delivery path end to end (offline bundles, mirrored registries, signed artifacts with an SBOM, upgrades with no egress, no shell access, and no telemetry); Partner with QA to build the reproducible test fleet and deployment test harness that produces the published compatibility matrix; Establish the infrastructure-as-code baseline for a standard deployment; Instrument deployments to measure time to value, upgrade lag, first-time-right rate, and cost per deployment; Design for disconnected operation, including human-reviewed local file release for collectors; Convert engagement learnings into reusable accelerators; Partner with Platform Engineering on the build and release pipeline; Carry field findings into product decisions with documented outcomes; Act as technical authority on hard customer deployment escalations and convert each into an enduring asset; Set the technical bar for future engineers and help define good SRE practice across the organization; Mentor and develop junior engineers while cultivating a DevOps-first mentality; Work with deployment engineers, forward deployed engineers, and product engineering teams to influence the roadmap

Requirements

You have shipped software into environments you could not reach (air-gapped, disconnected, or customer-controlled, with no egress and no shell access) and personally built an offline install bundle and a working upgrade path; Have worked with Kubernetes across distributions (EKS, OpenShift, RKE2, k3s, or equivalents) with real Helm packaging depth; You embrace Infrastructure as code and reproducible environments (Terraform or OpenTofu, CloudFormation, Ansible) and can stand up a fleet that reproduces a customer's specific combination of distribution, identity provider, and version state on demand

Nice to have

Argo CD or GitOps at scale; Windows Server, PowerShell, and MSI or MSIX packaging with code signing; Go proficiency; Operational depth in Keycloak, OIDC, and SAML, particularly identity providers that are not Keycloak; Federal compliance and software supply-chain tooling (STIG and OpenSCAP, SBOM generation, artifact signing with Sigstore or equivalent); Hands-on experience with Zarf, Hauler, oc-mirror, or troubleshoot.sh; Podman and systemd-based container deployment; Familiarity with Zero Trust security architecture (Policy Enforcement/Decision Points, cryptography, ABAC, identity); Existing TS/SCI US security clearance or eligible to be submitted for one

Benefits

Flexible PTO policy plus 14 holidays; $1,500 annual Learning & Development Stipend; Company-sponsored team celebrations; Employee Assistance Program; Headspace mental health app access; Flat 3% contribution to retirement account; High degree of schedule flexibility; Generous parental, medical, and bereavement policies; 401K contribution and stock options; Full medical, dental, and vision benefits; New hire swag and IT welcome boxes; Structured semi-annual 360° performance reviews; Competitive compensation