SRE-DevOps Engineer for GrayKey Cloud Platform

What You'll Do

• Monitoring and incident response: watch alerts and dashboards during your hours, triage incidents, resolve what you can, and escalate with clear context when you cannot.
• Patching and vulnerability remediation: keep Linux hosts, containers, and dependencies current, and work scanner findings through to closure.
• Network and access: manage VPCs, security groups, VPN, DNS, TLS certificates, IAM, and Fortigate firewalls; diagnose subnet and security-group connectivity issues. Cloud changes go through Terraform and GitLab merge requests.
• Identity: administer Okta, including SAML/OIDC app integrations, user and application provisioning, group-based access, and MFA troubleshooting.
• Kubernetes operations: support EKS clusters (node groups, upgrades, scaling, cluster health), troubleshoot workloads (pods, deployments, services, ingress, PVCs), and resolve Argo CD sync and deployment errors.
• Backup and recovery: maintain backup strategies for critical systems and data, and regularly test restore procedures.
• Runbooks and documentation: write and maintain the operating procedures the team relies on.
• Cost and automation: track AWS spend, remove waste, and script away repetitive toil.
• Compliance support: gather evidence and maintain controls for customer and audit requirements.
• Team practice: take part in code reviews, planning, and post-incident reviews.
• Travel: less than 5%.

What We're Looking For

• 3+ years in an SRE, DevOps, or Linux/cloud systems administration role.
• Hands-on AWS experience: VPC networking, IAM, EC2, RDS, and Lambda.
• Proficiency in Linux administration and scripting in Python and Bash.
• Infrastructure as Code with Terraform.
• Working experience with Kubernetes (EKS), Argo CD, Helm, GitLab CI/CD, and Datadog (or comparable observability tooling).
• Hands-on Okta administration: SAML/OIDC integrations, provisioning, and MFA.
• Practical security experience: least-privilege IAM, secrets handling, patch management, and network segmentation. Certifications such as CompTIA Security+, CySA+, or AWS Certified Security – Specialty count toward this.
• Solid networking fundamentals: TCP/IP, DNS, TLS, routing, firewalls, and VPNs.
• Clear written communication and a track record of working independently across time zones.
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• Must reside in the United States or Canada & be located within the Pacific or Mountain Time Zone.

Nice To Have

• Exposure to SOC 2, CJIS, or FedRAMP compliance work.
• Experience with Active Directory / Azure AD (Entra ID).
• Experience with Ansible, Docker, PostgreSQL, and Redis.
• Experience using AI coding assistants for infrastructure and automation work.
• Background in IT operations or on a security-focused team.