Site Reliability Engineer II

• Provision and manage Azure infrastructure using Terraform or OpenTofu, maintaining drift-free state aligned with GitOps principles.
• Own Kubernetes cluster operations including workload scheduling, resource optimization, RBAC, network policy, and cost governance.
• Identify and act on infrastructure cost optimization opportunities (compute rightsizing, storage tier selection, idle resource elimination).
• Support Crossplane or similar operator patterns for Kubernetes-native infrastructure management where applicable.

• Define, instrument, and enforce SLIs and SLOs in partnership with product engineering teams.
• Build and maintain observability infrastructure – metrics, logs, and distributed traces – using Prometheus, Grafana, OpenTelemetry, or equivalent tooling.
• Conduct proactive capacity planning and performance tuning across multi-tenant, distributed environments.
• Establish and maintain runbooks, dashboards, and alerting policies that reduce cognitive overhead during incidents.

• Participate in shared on-call rotation covering core platform and infrastructure services; on-call load is balanced across the team with structured handoff practices.
• Lead mitigation of live production incidents with a focus on minimizing MTTR and clear stakeholder communication under pressure.
• Facilitate blameless post-incident reviews and drive preventative engineering to closure – not just documentation.

• Embed with product engineering teams during design and architecture phases to establish reliability, scalability, and security requirements before code is written.
• Maintain clear, comprehensive documentation for infrastructure architecture, operational procedures, and onboarding guides.
• Push back constructively when proposed designs compromise reliability or operability, proposing alternatives rather than just raising concerns.

In addition to a great work environment, we provide excellent benefits (Medical/Dental/Vision, 401K, Tuition/Training Assistance, BrightHorizons Lifestyle Assistance, Wellness Program, etc.) and we're proud to be a Certified Great Place to Work !

For more information about what it's like to work with us, please visit Kastle Careers .

• Experience: 4–6 years in an SRE, Platform Engineering, or Infrastructure Engineering role, with demonstrated ownership of production systems.
• Cloud – Azure: Hands-on experience managing production infrastructure in Azure: AKS, Azure Container Registry, Azure Monitor, Cosmos DB, Key Vault, Azure Front Door, or equivalent services. AWS/GCP backgrounds considered with clear willingness to operate in Azure.
• Kubernetes: Deep operational experience with Kubernetes in production: resource management, network policies, RBAC, HPA/VPA, persistent volumes, and debugging live workload issues.
• GitOps & Release Tooling: Experience with ArgoCD, Flux, or equivalent GitOps deployment tools. Familiarity with multi-stage progressive delivery and approval gate patterns is a strong plus.
• Infrastructure as Code: Proven track record with Terraform, OpenTofu, or Pulumi in a production GitOps context – not just writing HCL, but maintaining drift-free state and managing state backends safely.
• Observability: Hands-on configuration of Prometheus, Grafana, OpenTelemetry, and/or ELK/OpenSearch. Ability to go from symptom to instrumentation to dashboard without hand-holding.
• Programming & Scripting: Proficiency in Python or Go for automation and tooling; strong Bash scripting. Ability to read and reason about application code when debugging production issues. Proficiency in C# and SQL for reviewing deliverables and participating in triage.
• Linux & Networking: Solid understanding of Linux internals, TCP/IP, DNS, TLS, and HTTP semantics. Comfortable debugging at the network and OS layer.
• Experience with Crossplane or other Kubernetes-native infrastructure operators.
• Familiarity with feature flag platforms (LaunchDarkly, Flagsmith, or similar) and gradual rollout strategies.
• Background in IoT, physical security, access control, or other latency-sensitive, event-driven domains.
• Comfort with async collaboration across distributed time zones (US + India team structure).
• Experience with AI-assisted development tooling and an appetite to incorporate it into engineering workflows.
• Knowledge of CMMC 2.0, SOC 2, or FedRAMP compliance postures as they apply to infrastructure and access control.

Beyond technical qualifications, we are looking for a particular kind of engineer:

• Systems thinker: You approach problems by understanding dependencies and failure modes, not just symptoms.
• Opinionated communicator: You write clearly, speak plainly during incidents, and can translate technical detail to non-technical stakeholders without losing accuracy.
• Collaborative by default: You partner with development teams as a reliability advisor, not a gatekeeper. You build trust by being helpful before problems occur.
• Bias toward fixing: Post-mortems produce engineering work items with owners and due dates, not just write-ups.
• Continuous learner: You stay current with the open-source and cloud-native ecosystem and bring relevant improvements back to the team proactively.

At Kastle, we believe that diversity makes us stronger - at work and in the world.

Kastle Systems International, LLC is an Equal Opportunity / Affirmative Action employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, marital status, pregnancy or any other basis protected by applicable federal or state laws.