SRE Engineer | USC​/GC​/H4 ead | W2 | On-site

SRE Engineer | USC/GC/H4 ead Only | W2 only | On-site role.

Positon:: SRE

Location::

Boca Raton FL/ Alpharetta GA (Onsite) Only - USC/GC/H4 ead.

• Implement and configure observability capabilities for applications.
• Help design and prepare the core infrastructure and environments required to support application observability.
• Support the organization’s move toward Grafana, including deployment and implementation of the supporting infrastructure.
• Work with application and infrastructure teams to establish observability across applications and cloud services.
• Identify, track, and help remediate cloud and infrastructure vulnerabilities.
• Review Kubernetes and AKS configurations to identify security gaps or improperly configured controls.
• Implement or improve security controls related to access, permissions, cluster configuration, and infrastructure exposure.
• Apply Kubernetes security policies and infrastructure-level vulnerability-management practices.
• Configure and maintain access controls, including role-based access control, access lists, and related authorization mechanisms.
• Support TLS implementation and certificate management.
• Assist with the remediation of findings identified through vulnerability-management and cloud-security tooling.
• Contribute to infrastructure automation using Terraform.
• Support Kubernetes deployment processes using Argo CD.
• Work with Git Hub and Git Hub Actions for CI/CD workflows.
• Create or enhance CI/CD pipelines as needed.
• Support secrets-management practices using an enterprise secrets-management platform.
• Collaborate with teams across the broader SRE organization, which has resources in the United States, India, and the United Kingdom.

Candidates should have the following experience:

• Strong hands‑on Site Reliability Engineering or platform engineering experience.
• Practical experience implementing or supporting Grafana.
• Experience with application and infrastructure observability.
• Hands‑on experience with Kubernetes and Azure Kubernetes Service.
• Ability to identify security limitations and configuration risks within Kubernetes or AKS environments.
• Experience addressing vulnerabilities at the infrastructure or platform level.
• Demonstrated security‑minded approach to SRE and cloud engineering.
• Experience with Kubernetes security controls and policies.
• Strong understanding of:
• Role‑based access control
• Access controls and access lists
• TLS
• Certificates and certificate implementation
• Secure cluster configuration
• Experience with vulnerability mitigation and vulnerability‑management processes.
• Experience with Microsoft Azure or sufficient Azure background to work effectively in an Azure‑first environment.
• Hands‑on experience with Terraform.
• Experience with Argo CD.
• Experience with Git Hub and Git Hub Actions.
• Experience with secrets management, using Hashi Corp Vault, Azure Key Vault, or a comparable platform.
• Ability to work in a hybrid arrangement in Boca Raton or Alpharetta approximately one to two days per week, unless an exception is approved for an exceptional remote candidate.
• Availability to begin quickly is strongly preferred.

• Hands‑on experience with Wiz.
• Experience responding to or remediating findings generated by Wiz or similar cloud‑security platforms.
• Deeper cloud‑security or information‑security project experience.
• Previous ownership of vulnerability‑management activities in Kubernetes environments.
• Experience establishing security policies within Kubernetes.
• Strong Grafana implementation experience, including deployment of the supporting observability infrastructure.
• Experience working across both Microsoft Azure and Amazon Web Services.
• AWS experience is valuable because the observability and security capabilities may eventually extend to AWS.
• Experience with Azure Key Vault.
• Broader experience with Hashi Corp Vault or other enterprise secrets‑management solutions.
• Experience building CI/CD pipelines rather than only maintaining existing pipelines.
• Experience working with geographically distributed SRE, infrastructure, or cloud engineering teams.
• A proven track record of successful delivery in client‑facing consulting or contract environments.