About brighthush
brighthush is the world’s leading identity and access management platform, empowering organizations to secure and streamline digital experiences for millions of users worldwide. With a mission to make identity the foundation of every secure interaction, brighthush delivers a unified, cloud-native solution that enables businesses to authenticate, authorize, and automate access across applications, devices, and services. Our Customer Identity Cloud (CIC) is at the heart of this vision, providing a scalable, resilient, and highly available infrastructure that supports both enterprise and consumer applications at an unprecedented scale.
At brighthush, we celebrate diversity, inclusion, and the power of lifelong learning. We believe that the best solutions come from teams that bring unique perspectives, curiosity, and a relentless drive to improve. If you thrive in an environment where you can experiment, iterate, and make a tangible impact on millions of users, you’ll find a home here.
Position Overview
As a Senior Staff Site Reliability Engineer (SRE) on the Customer Identity Cloud team, you will be the guardian of reliability for one of the most critical components of brighthush’s platform. You will partner closely with product, quality, platform, and architecture engineers to design, build, and operate systems that deliver uninterrupted, secure access to our customers’ applications. Your focus will be on ensuring that production environments remain operational, scalable, and highly available while driving continuous improvement in performance, observability, and automation.
In this role, you will lead the evolution of our system architecture to meet the demands of exponential growth, support hundreds of millions of users, and exceed customer availability expectations. You will also play a pivotal role in brighthush’s FedRAMP compliance journey, ensuring that our services meet the highest standards of security and reliability for government and regulated customers.
Key Responsibilities
- FedRAMP Leadership: Serve as a core contributor to brighthush’s FedRAMP initiative, collaborating with security, compliance, and engineering teams to design and implement controls that meet FedRAMP requirements.
- Reliability Engineering: Partner with product and platform teams to improve availability, reliability, and observability of CIC services, translating business requirements into robust, fault-tolerant architectures.
- On‑Call Ownership: Participate in a 24/7 on‑call rotation, ensuring rapid incident response, root‑cause analysis, and post‑mortem documentation for all critical systems.
- Monitoring & Alerting: Leverage existing monitoring tools (Prometheus, Grafana, Datadog, etc.) to detect anomalies, troubleshoot incidents, and refine alerting thresholds to reduce noise and improve mean time to recovery.
- Infrastructure Resilience: Design and implement changes that enhance infrastructure resilience, including multi‑region failover, disaster recovery, and capacity planning.
- SRE Tooling & Process: Lead the development and continuous refinement of SRE tools, automation frameworks, and best‑practice processes that improve software delivery, observability, and operational efficiency.
- Code & Automation: Write clean, maintainable code in Go, Terraform, Helm, and other relevant languages to automate deployments, configuration, and monitoring.
- Toil Reduction: Identify repetitive tasks, propose automation solutions, and implement them to eliminate toil and free the team to focus on high‑impact work.
- Mentorship & Knowledge Sharing: Mentor junior SREs and cross‑functional engineers, fostering a culture of continuous learning and knowledge sharing.
- Performance Optimization: Conduct performance profiling, capacity planning, and load testing to ensure that CIC can scale to meet future growth targets.
Essential Qualifications
- U.S. Person Status (e.g., U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee) – required for FedRAMP compliance.
- Minimum 6 years of industry experience as a Site Reliability Engineer or in related disciplines such as DevOps, Platform Engineering, or Cloud Operations.
- Proficiency in Go (Golang) with a track record of building production‑grade services.
- Hands‑on experience managing infrastructure at scale using Terraform, including module development, state management, and CI/CD pipelines.
- Deep understanding of cloud platforms (AWS, Azure, GCP) and experience designing multi‑cloud or hybrid‑cloud architectures.
- Strong background in microservices, container orchestration (Docker, Kubernetes), and service mesh concepts.
- Experience with relational and NoSQL databases, key/value stores, and data modeling at scale.
- Proficiency in networking fundamentals: SSL/TLS, routing, VPN, load balancing, and DNS.
- Demonstrated experience in a 24/7 production environment supporting mission‑critical applications.
- Excellent written and verbal communication skills, including technical documentation and incident post‑mortems.
- Systematic problem‑solving mindset with a strong sense of ownership and drive to deliver high‑quality solutions.
- Comfortable working in a fully distributed team environment, using collaboration tools and asynchronous communication.
- Familiarity with Agile software development methodologies and continuous delivery practices.
Preferred Qualifications
- Prior experience working in a FedRAMP or other regulated compliance environment.
- Knowledge of security best practices for identity and access management, including OAuth, OpenID Connect, SAML, and MFA.
- Experience with observability platforms such as OpenTelemetry, Jaeger, or Zipkin.
- Background in performance engineering, including load testing with tools like k6, Locust, or JMeter.
- Familiarity with serverless architectures and event‑driven design patterns.
- Experience mentoring or leading SRE or DevOps teams.
- Knowledge of compliance frameworks such as ISO 27001, SOC 2, or NIST.
Skills & Competencies
- Advanced proficiency in Go, Terraform, Helm, and scripting languages (Python, Bash).
- Expertise in Kubernetes cluster management, Helm chart development, and service mesh implementation.
- Strong analytical skills with the ability to dissect complex systems and identify root causes.
- Excellent collaboration skills, able to work effectively with cross‑functional teams across time zones.
- Proactive mindset: anticipating issues before they become incidents and driving preventive measures.
- Adaptability: thriving in a fast‑paced, evolving environment with shifting priorities.
- Commitment to security: embedding security best practices into every aspect of reliability engineering.
Career Growth & Learning Opportunities
At brighthush, your career trajectory is limited only by your ambition. As a Senior Staff SRE, you will: