Site Reliability Professional

Job Description:

We are seeking a highly skilled Site Reliability Engineer II to join our team. The successful candidate will be responsible for ensuring the availability, latency, performance, and efficiency of our SaaS on Azure.

The ideal candidate will have a strong background in production ops, platform, and SRE, with at least 5 years of experience on Azure. They will also have deep operational expertise in PostgreSQL, including HA/DR, logical/physical replication, performance tuning, autovacuum strategy, partitioning, backup/restore testing, and connection pooling.

The successful candidate will work closely with engineering and product teams to define and enforce reliability standards, lead high-impact projects, mentor engineers, and eliminate toil at scale.

Key Responsibilities:

• Define customer-centric SLIs/SLOs for Tier-0/Tier-1 services.
• Implement error-budget policy with multi-window, multi-burn-rate alerts; clear runbooks and paging thresholds.
• Gates changes by budget status (freeze/relax rules) wired into CI/CD.
• Maintain SLO/EB dashboards (Azure Monitor, Grafana/Prometheus, App Insights). Run weekly SLO reviews with engineering/product.
• Drive roadmap tradeoffs when budgets are at risk; land reliability epics.
• Lead SEV1/SEV2 incidents without drama: own comms, run blameless postmortems, and make corrective actions stick.
• Engineer reliability in: Multi-AZ/region patterns (active-active/DR), PDBs/Pod Topology Spread, HPA/VPA/KEDA, resilient rollout/rollback.
• Azure AKS at scale: Harden clusters (network, identity, policy), optimize node/pod density, ingress (AGIC/Nginx); mesh optional.
• Observability that works: Metrics/traces/logs with Azure Monitor/App Insights, Log Analytics, Prometheus/Grafana, OpenTelemetry. Alert on symptoms, not noise.
• IaC & policy: Terraform/Bicep modules, GitOps (Flux/Argo), policy-as-code (Azure Policy/OPA Gatekeeper). No snowflakes.
• CI/CD reliability: Azure DevOps/GitHub Actions with canary/blue-green, progressive delivery, auto-rollback, Key Vault-backed secrets.
• Capacity & performance: Load testing, right-sizing, autoscaling; partner with FinOps to reduce spend without hurting SLOs.
• Disaster recovery you can trust: Define RTO/RPO, test backups/restore, run game days/chaos drills, validate ASR and multi-region failover.
• Secure by default: Entra ID (Azure AD), managed identities, Key Vault rotation, VNets/NSGs/Private Link, shift-left checks in CI.
• Reduce toil: Automate recurring ops, build self-service runbooks/chatops, publish golden paths for product teams.
• Customer escalations: Be the technical owner on calls; communicate tradeoffs and recovery plans with authority.
• Document to scale: Architectures, runbooks, postmortems, SLIs/SLOs—kept current and discoverable.
• (If applicable) Streaming/ETL reliability: Apply SRE practices (SLOs, backpressure, idempotency, replay) to NiFi/Flink/Kafka/Redpanda data flows.

Requirements:

• Bachelor's in CS/Engineering (or equivalent experience).
• 12+ years in production ops/platform/SRE, including 5+ years on Azure.
• Deep operational expertise in PostgreSQL.
• Azure core knowledge: AKS, Front Door/App Gateway, API Management, VNets/NSGs/Private Link, Storage, Key Vault, Redis, Service Bus/Event Hubs.
• Observability knowledge: Azure Monitor/App Insights, Log Analytics, Prometheus/Grafana; SLO design and error-budget operations.
• IaC/automation knowledge: Terraform and/or Bicep; PowerShell and Python; GitOps (Flux/Argo). Pipelines in Azure DevOps or GitHub Actions.
• Proven incident leadership at scale, blameless postmortems, and SLO/error-budget governance with change gating.
• Mentorship and crisp written/verbal communication.

Preferred Qualifications:

• Apache NiFi, Apache Flink, Apache Kafka or Redpanda (self-managed on AKS or managed equivalents); schema management, exactly-once semantics, backpressure, dead-letter/replay patterns.
• Azure Solutions Architect Expert, CKA/CKAD.
• ITSM (ServiceNow), on-call tooling (PagerDuty/Opsgenie).
• Compliance/SecOps (SOC 2, ISO 27001), policy-as-code, workload identity.
• OpenTelemetry, eBPF tooling, or service mesh.
• Multi-tenant SaaS and cost optimization at scale.