Note: The job is a remote job and is open to candidates in USA. SailPoint is a leader in identity security for the cloud enterprise, providing AI- and machine-learning-powered solutions through its Identity Security Cloud platform. The Senior Staff DevOps Engineer will lead the design, implementation, and operation of global AWS infrastructure, serving as the Kubernetes and service mesh platform leader across large-scale EKS and microservices environments. The role also drives infrastructure standards, security and PCI compliance, operational excellence, mentoring, and cross-functional technical leadership without direct people management.
Responsibilities
- Own and lead the full lifecycle of service mesh implementation at scale, from architecture and rollout planning through production operations across hundreds of microservices running on EKS
- Establish service mesh standards and governance adopted organization-wide, including onboarding runbooks, sidecar injection policies, traffic policy templates, and documented failure-mode playbooks for production incidents
- Mentor and upskill engineers across teams on service mesh architecture, troubleshooting at scale, performance tuning, and capacity planning for mesh-heavy environments
- Design, operate, and optimize production Kubernetes clusters at scale on AWS (EKS), including cluster architecture, upgrades, node management, networking, storage, and multi-tenant isolation patterns
- Define and drive Kubernetes standards and best practices across teams, including workload design, resource management, security hardening (RBAC, Pod Security Standards, network policies), Helm/chart conventions, and deployment patterns
- Design and scale infrastructure to meet rapidly increasing customer demand, data sovereignty requirements, and regional expansion
- Automate deployment, monitoring, incident response, and capacity management using GitOps and CI/CD best practices
- Develop and improve operational practices, runbooks, and platform engineering standards
- Collaborate with development teams to bring new features and services into production safely and efficiently
- Proactively meet information security and compliance standards (e.g., PCI DSS), including supporting SailPoint's PCI compliance initiative through secure platform design, controls implementation, and audit readiness
- Participate in and help improve the on-call rotation; drive post-incident reviews and systemic fixes
Skills
- Strong interpersonal and teaming skills, with the ability to set and enforce process and influence engineers across teams and geographies
- Ability to operate effectively in an agile, entrepreneurial environment with global stakeholders
- Prior experience as a technical lead or Staff+ IC in a global engineering organization
- 3+ years of hands-on experience designing, implementing, and operating a service mesh at scale in production Kubernetes environments
- 10+ years of experience in 24x7 production operations, supporting highly available SaaS or cloud service environments
- 10+ years of experience with containerization, virtualization, and configuration management technologies
- 5+ years of hands-on experience with Kubernetes in production at scale
- 5+ years of experience with Terraform (IaC), managing infrastructure across multiple AWS accounts and regions
- 5+ years of experience designing and implementing CI/CD pipelines, especially for Terraform, Kubernetes, and microservices
- 5+ years of experience with scripting/programming languages (Python, Go, or similar) and strong shell scripting proficiency
- Strong understanding of Linux, networking, distributed systems, and production troubleshooting
- Demonstrated experience scaling a service mesh across a large microservices fleet, including phased adoption strategy, sidecar resource management, control plane scaling, and performance tuning under high request volume
- Experience with monitoring and logging stacks (e.g., Prometheus, Grafana, OpenSearch or equivalent)
- Experience with multi-cluster or multi-region service mesh federation (e.g., Istio multi-cluster, Linkerd multicluster extension) in production
- Familiarity with compliance frameworks in regulated enterprise SaaS, including PCI DSS and FedRAMP-adjacent practices, with experience implementing or operating platforms subject to PCI compliance requirements preferred
Benefits
- Corporate Bonus Plan may be available for eligible roles
- Role-specific commission may be available
- Potential eligibility for equity participation
- Medical, dental, and vision insurance
- Short-term and long-term disability coverage
- Life insurance and Accidental Death & Dismemberment (AD&D)
- Supplemental life insurance for employees, spouses, and children
- Flexible spending accounts for health care and dependent care
- Limited purpose flexible spending account
- 401(k) Savings and Investment Plan with company matching
- Flexible vacation policy
- 8 paid holidays annually
- Sick leave
- Paid parental leave
- Employee Assistance Program (EAP) and Care Counselors
- Voluntary Legal Assistance, Critical Illness, Accident, Hospital Indemnity, and Pet Insurance options
- Health Savings Account (HSA) with employer contribution
- Fully remote position for candidates based in the USA or Canada
Company Overview