Staff Site Reliability Engineer – SRE

Virtru

. Own deployment automation for the Data Security Platform, including packaging, installation, upgrades, and validation in customer-controlled environments .

Posted 10/27/2026full-timeRemote • United StatesLead💰 $190,000 - $250,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in deployment automation for Data Security Platforms, including infrastructure-as-code practices and Kubernetes distributions. Capable of mentoring engineers and establishing technical standards while ensuring compliance with federal regulations.

Highest-signal resume keywords

Deployment AutomationKubernetes ExperienceInfrastructure As CodeTerraform ProficiencyFederal Compliance Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Deployment AutomationKubernetesInfrastructure As CodeTerraformOpenTofuCloudFormationAnsibleHelm PackagingSBOM GenerationArtifact Signing

Soft Skills

CollaborationAdaptabilityCommunicationTrust BuildingAction-Oriented Mindset

Tools & Technologies

ZarfHaulerOc-mirrorTroubleshoot.shPodmanSystemdArgo CDGitOpsWindows ServerPowerShell

Certifications & Qualifications

TS/SCI US Security Clearance

Industry Keywords

Air-Gapped EnvironmentsDisconnected OperationsZero Trust Security ArchitecturePolicy Enforcement PointsCryptographyABACSAMLOIDCSTIGOpenSCAP

Tech Stack

Tools & technologies

AnsibleKubernetesOpenShiftTerraformTypeScriptGo

About the role

Key responsibilities & impact

Own deployment automation for the Data Security Platform, including packaging, installation, upgrades, and validation in customer-controlled environments
Author release criteria and determine whether environments are ready for customer deployment
Build the end-to-end air-gapped delivery path, including offline bundles, mirrored registries, signed artifacts with SBOMs, and no-egress upgrades
Partner with QA to build reproducible test fleets and deployment test harnesses across Kubernetes distributions, identity providers, and version states
Produce a published compatibility matrix through automated testing
Establish infrastructure-as-code baselines for standard deployments
Instrument deployments to measure time to value, upgrade lag, first-time-right rate, and cost per deployment
Design disconnected-operation telemetry collectors that support local file review and release
Convert customer engagement learnings into reusable accelerators
Partner with Platform Engineering on build and release pipelines, owning the deployment criteria they enforce
Carry field findings into documented product decisions
Act as technical authority for difficult customer deployment escalations and convert findings into automation, tooling, or product tickets
Set technical standards for future engineers and define organizational best practices
Mentor and coach junior engineers while cultivating a DevOps-first mentality
Collaborate with deployment engineers, forward deployed engineers, product engineering, QA, Platform Engineering, Operations, partners, and customers
Develop AI-native design patterns that increase velocity while maintaining quality and security

Requirements

What you’ll need

Experience shipping software into inaccessible, air-gapped, disconnected, or customer-controlled environments with no egress or shell access
Personally built an offline install bundle and working upgrade path
Experience with Kubernetes across distributions, including EKS, OpenShift, RKE2, or k3s
Real Helm packaging depth
Infrastructure as code and reproducible environments
Experience with Terraform or OpenTofu, CloudFormation, and Ansible
Ability to reproduce a customer's combination of Kubernetes distribution, identity provider, and version state on demand
Argo CD or GitOps at scale is a nice to have
Windows Server, PowerShell, and MSI or MSIX packaging with code signing are preferred, not required
Go proficiency is a nice to have
Operational depth in Keycloak, OIDC, and SAML is a nice to have
Federal compliance and software supply-chain tooling, including STIG, OpenSCAP, SBOM generation, and artifact signing with Sigstore or equivalent, are nice to have
Hands-on experience with Zarf, Hauler, oc-mirror, or troubleshoot.sh is a nice to have
Podman and systemd-based container deployment are nice to have
Familiarity with Zero Trust security architecture, Policy Enforcement/Decision Points, cryptography, ABAC, and identity is a nice to have
Existing TS/SCI US security clearance or eligibility to be submitted for one is a nice to have
Ability to collaborate, adapt to shifting priorities, and communicate asynchronously using Slack, email, Zoom, etc.
Ability to earn trust and credibility with partners and customers
Strong sense of urgency and action-oriented mindset

Benefits

Comp & perks

Flexible PTO policy, in addition to 14 holidays
$1,500 annual Learning & Development Stipend
Company-sponsored team celebrations
Employee Assistance Program
Headspace mental health app
Flat 3% contribution to retirement account
High degree of flexibility for appointments, errands, and family emergencies
Competitive compensation
Generous parental, medical, and bereavement policies
401K contribution and stock options
Full medical, dental, and vision benefits
New Hire Swag and IT Welcome boxes
Structured semi-annual 360° performance reviews