Staff Site Reliability Engineer (SRE)

Location: Washington, DC - Remote; United States

Salary: $190,000–$250,000/year

Company

hirify.global develops data protection applications and the Trusted Data Format open platform for secure data sharing, serving commercial enterprises, the Department of Defense, the Intelligence Community, law enforcement, and federal civilian agencies.

What you will do

• Own deployment automation for the Data Security Platform, including packaging, installation, upgrades, validation, and release-readiness criteria.
• Build the end-to-end air-gapped delivery path with offline bundles, mirrored registries, signed artifacts, SBOMs, and no-egress upgrades.
• Partner with QA to create reproducible test fleets and deployment harnesses across Kubernetes distributions, identity providers, and version states.
• Establish infrastructure-as-code baselines and instrument deployments to measure time to value, upgrade lag, first-time-right rate, and deployment cost.
• Convert customer findings and escalations into reusable automation, tooling, product decisions, and deployment accelerators.
• Set engineering standards, mentor junior engineers, and promote a DevOps-first approach across the organization.

Requirements

• Hands-on experience shipping software into air-gapped, disconnected, or customer-controlled environments without egress or shell access, including personally building offline installation bundles and upgrade paths.
• Experience with Kubernetes across distributions such as EKS, OpenShift, RKE2, or k3s, including substantial Helm packaging experience and understanding of distribution-specific failure modes.
• Experience with infrastructure as code and reproducible environments using Terraform or OpenTofu, CloudFormation, Ansible, or equivalent tools.
• Ability to reproduce customer-specific combinations of Kubernetes distribution, identity provider, and version state on demand.
• Ability to debug using customer-provided files and phone conversations when shell access and live dashboards are unavailable.
• Ability to automate recurring operational toil rather than relying only on runbooks.
• Ability to build trust and credibility with partners, customers, government security teams, and internal engineering leadership.
• Ability to challenge teammates respectfully, act with urgency, collaborate, adapt to changing priorities, and communicate asynchronously.

Nice to have

• Argo CD or GitOps at scale.
• Windows Server, PowerShell, MSI or MSIX packaging, and code signing.
• Go proficiency.
• Operational experience with Keycloak, OIDC, SAML, and identity providers other than Keycloak.
• Federal compliance and software supply-chain tooling, including STIG, OpenSCAP, SBOM generation, and Sigstore or equivalent artifact signing.
• Experience with Zarf, Hauler, oc-mirror, or troubleshoot.sh.
• Podman and systemd-based container deployment.
• Zero Trust architecture, policy enforcement and decision points, cryptography, ABAC, and identity.
• Existing TS/SCI US security clearance or eligibility to be submitted for one.

Culture & Benefits

• Small, nimble, highly autonomous, and empowered team with high-judgment decision-making.
• Flexible PTO in addition to 14 holidays and a high degree of schedule flexibility.
• $1,500 annual learning and development stipend.
• Retirement contribution, stock options, medical, dental, vision, parental, and bereavement benefits.
• Employee Assistance Program, Headspace access, team celebrations, and inclusive workplace initiatives.
• Structured semi-annual 360-degree performance reviews.