Site Reliability Engineer II

Senior Site Reliability Engineer (SRE II)

Own availability, latency, performance, and efficiency for Zafin's SaaS on Azure. You'll define and enforce reliability standards, lead high-impact projects, mentor engineers, and eliminate toil at scale. Reports to the Director of SRE.

What you'll do

• SLIs/SLOs & contracts: Define customer-centric SLIs/SLOs for Tier-0/Tier-1 services. Publish, review quarterly, and align teams to them.
• Error budgeting (policy & tooling):
• Run the error-budget policy with multi-window, multi-burn-rate alerts; clear runbooks and paging thresholds.
• Gate changes by budget status (freeze/relax rules) wired into CI/CD.
• Maintain SLO/EB dashboards (Azure Monitor, Grafana/Prometheus, App Insights). Run weekly SLO reviews with engineering/product.
• Drive roadmap tradeoffs when budgets are at risk; land reliability epics.
• Incidents without drama: Lead SEV1/SEV2, own comms, run blameless postmortems, and make corrective actions stick.
• Engineer reliability in: Multi-AZ/region patterns (active-active/DR), PDBs/Pod Topology Spread, HPA/VPA/KEDA, resilient rollout/rollback.
• AKS at scale: Harden clusters (network, identity, policy), optimize node/pod density, ingress (AGIC/Nginx); mesh optional.
• Observability that works: Metrics/traces/logs with Azure Monitor/App Insights, Log Analytics, Prometheus/Grafana, OpenTelemetry. Alert on symptoms, not noise.
• IaC & policy: Terraform/Bicep modules, GitOps (Flux/Argo), policy-as-code (Azure Policy/OPA Gatekeeper). No snowflakes.
• CI/CD reliability: Azure DevOps/GitHub Actions with canary/blue-green, progressive delivery, auto-rollback, Key Vault-backed secrets.
• Capacity & performance: Load testing, right-sizing, autoscaling; partner with FinOps to reduce spend without hurting SLOs.
• DR you can trust: Define RTO/RPO, test backups/restore, run game days/chaos drills, validate ASR and multi-region failover.
• Secure by default: Entra ID (Azure AD), managed identities, Key Vault rotation, VNets/NSGs/Private Link, shift-left checks in CI.
• Reduce toil: Automate recurring ops, build self-service runbooks/chatops, publish golden paths for product teams.
• Customer escalations: Be the technical owner on calls; communicate tradeoffs and recovery plans with authority.
• Document to scale: Architectures, runbooks, postmortems, SLIs/SLOs—kept current and discoverable.
• (If applicable) Streaming/ETL reliability: Apply SRE practices (SLOs, backpressure, idempotency, replay) to NiFi/Flink/Kafka/Redpanda data flows.

Minimum qualifications

• Bachelor's in CS/Engineering (or equivalent experience).
• 12+ years in production ops/platform/SRE, including 5+ years on Azure.
• PostgreSQL (must-have): Deep operational expertise incl. HA/DR, logical/physical replication, performance tuning (indexes/EXPLAIN/ANALYZE, pg_stat_statements), autovacuum strategy, partitioning, backup/restore testing, and connection pooling (pgBouncer). Prefer experience with Azure Database for PostgreSQL – Flexible Server.
• Azure core: AKS (must-have); Front Door/App Gateway, API Management, VNets/NSGs/Private Link, Storage, Key Vault, Redis, Service Bus/Event Hubs.
• Observability: Azure Monitor/App Insights, Log Analytics, Prometheus/Grafana; SLO design and error-budget operations.
• IaC/automation: Terraform and/or Bicep; PowerShell and Python; GitOps (Flux/Argo). Pipelines in Azure DevOps or GitHub Actions.
• Proven incident leadership at scale, blameless postmortems, and SLO/error-budget governance with change gating.
• Mentorship and crisp written/verbal communication.

Preferred (nice to have)

• Apache NiFi, Apache Flink, Apache Kafka or Redpanda (self-managed on AKS or managed equivalents); schema management, exactly-once semantics, backpressure, dead-letter/replay patterns.
• Azure Solutions Architect Expert, CKA/CKAD.
• ITSM (ServiceNow), on-call tooling (PagerDuty/Opsgenie).
• Compliance/SecOps (SOC 2, ISO 27001), policy-as-code, workload identity.
• OpenTelemetry, eBPF tooling, or service mesh.
• Multi-tenant SaaS and cost optimization at scale.