Job description

Introduction to Demandbase: Demandbase is the only pipeline AI platform that empowers GTM teams to automate growth at scale. With a unified view of data, insights, actions, and outcomes, B2B enterprises can seamlessly align and execute their account-based GTM strategies with confidence. Thousands of businesses trust Demandbase to maximize revenue, minimize waste, and consolidate their data and tech stacks – all in one platform. As a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have also continuously been recognized as One of The Best Places To Work in the San Francisco Bay Area by Fortune, and One of The 60 Best Companies To Sell For by Selling Power. Our offices are located in San Francisco, New York, Austin, Seattle, India, and the United Kingdom. ABOUT THE ROLE As a Staff DevOps Engineer on the Developer Experience (DevEx) team, you will set the technical direction for the platforms, tooling, and workflows that every engineering team at Demandbase depends on to ship reliably to production. This is not a single-team execution role you will define multi-quarter platform strategy across build, test, deploy, and operate stages for services and data pipelines running on AWS and GCP, and you'll be the person other senior and staff engineers across the org come to when a platform decision has broad blast radius. You'll act as a force multiplier at organizational scale: abstracting infrastructure complexity into paved roads, driving adoption of self-service platforms, and embedding reliability, security, costawareness, and observability. You are fluent with AI-assisted and agentic engineering workflows and are expected to help define how the broader engineering org adopts these tools safely and effectively. This role is critical to improving local-to-production parity, reducing cognitive load fleetwide, and sustaining high release velocity across our Kubernetes-based services and data platforms. WHAT MAKES THIS ROLE DISTINCTIVE You'll combine technical strategy, platform product thinking, and hands-on systems leadership to make reliable delivery the default for engineering teams. RESPONSIBILITIES PLATFORM STRATEGY & TECHNICAL LEADERSHIP - Set and drive the technical roadmap for the Internal Developer Platform (IDP) - not just execute against one handed to you. - Author and review RFCs/design docs that other teams adopt; act as architecture reviewer for infrastructure-impacting changes org-wide. - Serve as the escalation point for the highest-severity production incidents involving platform infrastructure; lead retrospectives and turn findings into structural fixes, not one-off patches. - Mentor senior and staff-level engineers across teams, raising the technical bar for platform engineering, reliability, and secure software delivery org-wide. DEVELOPER PLATFORM & WORKFLOW ENABLEMENT - Own and evolve Demandbase's Internal Developer Platform (Backstage service/API/group catalog, goldenpath scaffolder templates, cicd-components ) as a product - measured by adoption, time-to-first-deploy, and reduction in platform-support toil. - Partner with software, data, security, and product engineering leadership to identify systemic friction across the SDLC and resolve it through automation and platform abstraction rather than one-off fixes. - Define what "good" looks like for AI-assisted development workflows across the org - evaluate, pilot, and roll out coding-agent tooling with the right guardrails. CI/CD & RELEASE ENGINEERING - Own the architecture of CI/CD orchestration (GitLab CI/CD, shared cicd-components ) supporting high release velocity, strong security guardrails, and local-to-production parity across the engineering org. - Drive standardization of build, test, and deployment patterns across application and data workloads at scale. - Own GitOps-based deployment strategy and evolve it as the org's service count grows. CLOUD INFRASTRUCTURE & KUBERNETES PLATFORMS - Own the architecture and lifecycle of multi-cluster Kubernetes platforms across environments (EKS, and GKE where applicable) - upgrades, node lifecycle (Karpenter), networking, and security posture at fleet scale. - Own multi-account cloud IAM, networking, and security architecture; set the guardrails other teams build against. - Drive Infrastructure-as-Code strategy (Terraform, Crossplane) for consistency and security across accounts, not just individual environments. - Own service mesh (Istio) architecture across multi-cluster environments, including sidecar injection strategy and traffic policy. PLATFORM RELIABILITY, SECURITY & COST - Own core platform components - GitOps tooling, secrets management, service mesh - as production systems. - Own observability platform strategy (Prometheus, Datadog, Grafana/Loki) - what's collected, indexed, and actionable - balancing signal quality against cost. - Own FinOps practice for platform infrastructure - cost visibility, unit economics, and waste reduction - as a standing responsibility. - Define and evolve org-wide SLIs/SLOs and incident response practices; lead blameless postmortem culture at the organizational level. QUALIFICATIONS - 10+ years of overall engineering experience, including meaningful hands-on software development (Go, Python, or Java) and 7+ years building and operating cloud infrastructure at scale. - Demonstrated track record operating as a technical leader across multiple teams - driving cross-team RFCs, architecture decisions, or platform strategy. - Deep, hands-on experience designing and operating multi-account, multi-cluster Kubernetes platforms in production (EKS and/or GKE) at meaningful scale (dozens+ of services/clusters). - Strong proficiency with Infrastructure as Code (Terraform, Crossplane) and GitOps practices (Flux or Argo CD) applied at organizational scale. - Deep experience designing and owning CI/CD systems supporting high release velocity and strong security guardrails (GitLab CI/CD preferred). - Hands-on experience with service mesh (Istio) in multi-cluster environments, including security/traffic policy. - Strong experience building and owning observability platforms (Prometheus, Datadog, Grafana, Loki/Mimir/Thanos) with a cost-aware lens. WHAT YOU'LL BRING - Working knowledge of container/supply-chain security practices (image scanning, hardened base images, vulnerability remediation). - Experience owning or meaningfully contributing to cloud cost governance/FinOps practice. - Fluency with AI-assisted/agentic development tooling (Cursor, Claude Code, Codex, or equivalent) and informed opinions on safe, effective rollout at organizational scale. - Solid understanding of SLIs/SLOs, alerting strategy, and incident response, with experience leading (not just participating in) blameless postmortems. - Excellent written and verbal communication - staff-level influence runs through docs and reviews as much as code. - Experience supporting data pipeline/batch platforms (Airflow, EMR, Dataproc) is a plus. TECH STACK AWS, GCP, Terraform, Crossplane, Kubernetes, Amazon EKS, Google GKE, Karpenter, Istio, GitLab CI/CD, GitOps (Flux, Argo CD), Backstage (Internal Developer Platform), Apache Airflow, Amazon EMR, Google Dataproc, Prometheus, Grafana, Loki, Mimir, Thanos, Datadog, Wiz, Vantage / Finout (FinOps), External Secrets Operator / cloud-native secrets managers, IAM, Go, Python, Java, and AI-assisted/agentic engineering tooling (Cursor, Claude Code, Codex). BUILD THE PAVED ROAD. Help shape the systems, standards, and developer experience that let engineering teams move quickly and safely. Our Commitment to Diversity, Equity, and Inclusion at Demandbase At Demandbase, we believe in creating a workplace culture that values and celebrates diversity in all its forms. We recognize that everyone brings unique experiences, perspectives, and identities to the table, and we are committed to building a community where everyone feels valued, respected, and supported. Discrimination of any kind is not tolerated, and we strive to ensure that every individual has an equal opportunity to succeed and grow, regardless of their gender identity, sexual orientation, disability, race, ethnicity, background, marital status, genetic information, education level, veteran status, national origin, or any other protected status. We do not automatically disqualify applicants with criminal records and will consider each applicant on a case-by-case basis. We recognize that not all candidates will have every skill or qualification listed in this job description. If you feel you have the level of experience to be successful in the role, we encourage you to apply! We acknowledge that true diversity and inclusion requires ongoing effort, and we are committed to doing the work required to make our workplace a safe and equitable space for all. Join us in building a community where we can learn from each other, celebrate our differences, and work together. Unsolicited Submissions At Demandbase, we value thoughtful partnerships and direct connections with candidates. We’re not accepting unsolicited resumes or outreach from third-party recruiting agencies. Any unsolicited submissions will not be reviewed, and no fees will be paid.

Requirements

Must-haves

You'll combine technical strategy, platform product thinking, and hands-on systems leadership to make reliable delivery the default for engineering teams.
Set and drive the technical roadmap for the Internal Developer Platform (IDP) - not just execute against one handed to you.
Author and review RFCs/design docs that other teams adopt; act as architecture reviewer for infrastructure-impacting changes org-wide.
Serve as the escalation point for the highest-severity production incidents involving platform infrastructure; lead retrospectives and turn findings into structural fixes, not one-off patches.
Mentor senior and staff-level engineers across teams, raising the technical bar for platform engineering, reliability, and secure software delivery org-wide.
Partner with software, data, security, and product engineering leadership to identify systemic friction across the SDLC and resolve it through automation and platform abstraction rather than one-off fixes.
Define what "good" looks like for AI-assisted development workflows across the org - evaluate, pilot, and roll out coding-agent tooling with the right guardrails.
Own the architecture of CI/CD orchestration (GitLab CI/CD, shared cicd-components ) supporting high release velocity, strong security guardrails, and local-to-production parity across the engineering org.
Drive standardization of build, test, and deployment patterns across application and data workloads at scale.
Own GitOps-based deployment strategy and evolve it as the org's service count grows.
Own the architecture and lifecycle of multi-cluster Kubernetes platforms across environments (EKS, and GKE where applicable) - upgrades, node lifecycle (Karpenter), networking, and security posture at fleet scale.
Own multi-account cloud IAM, networking, and security architecture; set the guardrails other teams build against.
Drive Infrastructure-as-Code strategy (Terraform, Crossplane) for consistency and security across accounts, not just individual environments.
Own service mesh (Istio) architecture across multi-cluster environments, including sidecar injection strategy and traffic policy.
Own core platform components - GitOps tooling, secrets management, service mesh - as production systems.
Own observability platform strategy (Prometheus, Datadog, Grafana/Loki) - what's collected, indexed, and actionable - balancing signal quality against cost.
Own FinOps practice for platform infrastructure - cost visibility, unit economics, and waste reduction - as a standing responsibility.
Define and evolve org-wide SLIs/SLOs and incident response practices; lead blameless postmortem culture at the organizational level.
10+ years of overall engineering experience, including meaningful hands-on software development (Go, Python, or Java) and 7+ years building and operating cloud infrastructure at scale.
Demonstrated track record operating as a technical leader across multiple teams - driving cross-team RFCs, architecture decisions, or platform strategy.
Deep, hands-on experience designing and operating multi-account, multi-cluster Kubernetes platforms in production (EKS and/or GKE) at meaningful scale (dozens+ of services/clusters).
Strong proficiency with Infrastructure as Code (Terraform, Crossplane) and GitOps practices (Flux or Argo CD) applied at organizational scale.

Nice-to-haves

Deep experience designing and owning CI/CD systems supporting high release velocity and strong security guardrails (GitLab CI/CD preferred).
Experience supporting data pipeline/batch platforms (Airflow, EMR, Dataproc) is a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsgcpkubernetesapici/cdgopythonjava

Platform: ashby
Effort: quick