Job description

Description WHO WE ARE Come join the company at the center of how the world adopts AI securely. Cyera's mission is to give enterprises the confidence to embrace AI safely — deciding exactly what it can see and do as it reaches deeper into the business. We started by solving the hardest problem in data security: finding and securing data faster and more precisely than anyone thought possible. That foundation is now the essential AI trust infrastructure for the Fortune 1000. We're hiring mission-driven talent to put those leaders at the center of our story. THE OPPORTUNITY We are seeking a Platform Architect / Forward Deployed Engineer to join Cyera's Platform Architecture team. This is not an advisory or liaison role. You will personally architect, deploy, and operate Kubernetes-based infrastructure inside customer cloud environments — writing the Terraform, configuring the networking, debugging the production issues that arise — from the first technical conversation in the sales cycle through go-live, then handing off a working system to Customer Success. You'll work inside regulated, high-stakes environments — banks, insurers, government agencies — where standard SaaS deployment doesn't work, and where your judgment on architecture, security, and delivery directly determines whether a multi-million-dollar deal closes and stays closed. RESPONSIBILITIES: Own the Deployment, Not Just the Relationship • Architect and deploy Kubernetes clusters, networking, and identity/security configuration inside customer cloud environments (AWS, Azure, GCP) — hands on keyboard, not just hands on Zoom. Drive the Full Lifecycle • Engage early in the sales cycle for technically complex or regulated deals, own the proof-of-value build, carry it through production go-live, then hand off cleanly to Sales engineering to get the tech win or to Customer Success. Be the Technical Authority in the Room • Bring the technical depth to make the call when R&D, sales, and the customer disagree on what's possible. Combine the architectural depth of a Sales Engineer with the hands-on execution rigor of a Customer Success Engineer — in one person. Operate Independently • Take ambiguous, high-stakes problems and drive them to resolution without hand-holding — using documentation, AI tooling, and internal channels proactively rather than waiting to be told what to do. Give Back • Distribute lessons learned to fellow Platform Architects and Forward Deployed Engineers. If it's not documented, it didn't happen. Travel • Travel to customer sites for kickoffs, critical escalations, and team offsites as needed. Requirements REQUIRED QUALIFICATIONS: REQUIRED QUALIFICATIONS: HARD REQUIREMENTS — we do not waive these: • U.S. Citizenship or U.S. Permanent Residency (Green Card). This role supports customer environments with government and federal compliance requirements (including FedRAMP) that require U.S. person status. • Kubernetes at real workload depth (roughly CKAD level) — authoring manifests and Helm charts, pod and deployment design, ConfigMaps and Secrets, probes and resource limits, services and ingress, and troubleshooting failing workloads live. • Terraform or equivalent IaC that you have personally written and shipped — not reviewed, not inherited. • Genuine depth in at least one major cloud (AWS, Azure, or GCP). Depth in one beats shallow exposure to three. ALSO REQUIRED: • Quantifiable outcomes from your own work — uptime, cost reduction, deployment-time reduction, scale. We will ask for them. • Cloud networking, identity and security configuration — VPC and peering, private connectivity, IAM. • A self-driven, "figure it out" mindset — comfortable being dropped into an unfamiliar customer environment and expected to solve the problem, not wait for a script. • Strong customer-facing communication — able to hold your own technically with a customer's cloud/security team while explaining trade-offs to a non-technical stakeholder. This is a complement to technical depth, not a substitute for it. • Comfortable with a hyper-growth pace — this is not a 9-to-5 role; travel and after-hours work during critical windows should be expected. HOW WE EVALUATE We assess behavior as hard as we assess technology, because that is where our hiring mistakes have actually come from. Expect to be asked about: • Ownership and proactivity — driving ambiguous, high-stakes problems to resolution without hand-holding. • Low ego and coachability — taking feedback, and stating plainly what you don't know. • Work ethic, and team play — sharing credit, unblocking peers, documenting by default. • Your judgment about AI tooling — where you use it meaningfully, and where you deliberately don't. We are interested in both. NOT REQUIRED — PLEASE DON'T SELF-SELECT OUT We have deliberately removed these as filters. Do not rule yourself out on any of them: • A degree of any kind. We hire for demonstrated capability, not credentials — several of our strongest Platform Architects came up through non-traditional paths such as military service or self-taught systems administration. • Certifications. Kubernetes (CKA/CKAD), Security+ and similar are common on our team, but most were earned on the job, and we fund relevant certifications post-hire. • GitOps. Learnable here. • Secondary clouds. We expect you to pick them up. • A cybersecurity or data-security background. General infrastructure depth matters more. • Familiarity with enterprise sales cycles. • Presales experience. Its absence has never blocked anyone we have hired into this role. NICE TO HAVE: - Experience in regulated or government environments — FedRAMP, DoD, or an active or • recent security clearance is a significant plus given our growing federal footprint.- Prior forward-deployed engineering, professional services, or field engineering background. COMPENSATION INFORMATION: Compensation Range: $160,000-$220,000. The range represents total compensation, and may include incentive for sales roles, equity or benefits, as applicable. This compensation range represents Cyera’s good faith and reasonable estimate of the range of possible compensation for this role at the time of posting, and Cyera may ultimately pay more or less than the posted range. The final salary for this position will be determined in Cyera’s sole discretion, consistent with applicable law, and based on a variety of factors, including but not limited to the employee’s work experience, skills, and qualifications for the role, as well as the needs of Cyera’s business and other operational considerations. Final compensation will vary based on seniority and relevance of experience, location, and position requirements. This role may be eligible for potential merit increases based on factors such as individual or company performance, time in role, and other discretionary factors. BENEFITS - Why Cyera? • Ability to work remotely, with office setup reimbursement • Competitive salary • Unlimited PTO • Paid holidays and sick time • Health, vision, and dental insurance • Life, short and long-term disability insurance

Requirements

Must-haves

Own the Deployment, Not Just the Relationship
Architect and deploy Kubernetes clusters, networking, and identity/security configuration inside customer cloud environments (AWS, Azure, GCP) — hands on keyboard, not just hands on Zoom.
Drive the Full Lifecycle
Be the Technical Authority in the Room
Operate Independently
Take ambiguous, high-stakes problems and drive them to resolution without hand-holding — using documentation, AI tooling, and internal channels proactively rather than waiting to be told what to do.
Distribute lessons learned to fellow Platform Architects and Forward Deployed Engineers. If it's not documented, it didn't happen.
Travel to customer sites for kickoffs, critical escalations, and team offsites as needed.
REQUIRED QUALIFICATIONS: REQUIRED QUALIFICATIONS:
HARD REQUIREMENTS — we do not waive these:
U.S. Citizenship or U.S. Permanent Residency (Green Card). This role supports customer environments with government and federal compliance requirements (including FedRAMP) that require U.S. person status.
Terraform or equivalent IaC that you have personally written and shipped — not reviewed, not inherited.
Genuine depth in at least one major cloud (AWS, Azure, or GCP). Depth in one beats shallow exposure to three.
Quantifiable outcomes from your own work — uptime, cost reduction, deployment-time reduction, scale. We will ask for them.
Cloud networking, identity and security configuration — VPC and peering, private connectivity, IAM.
A self-driven, "figure it out" mindset — comfortable being dropped into an unfamiliar customer environment and expected to solve the problem, not wait for a script.
Comfortable with a hyper-growth pace — this is not a 9-to-5 role; travel and after-hours work during critical windows should be expected.
We assess behavior as hard as we assess technology, because that is where our hiring mistakes have actually come from. Expect to be asked about:
Ownership and proactivity — driving ambiguous, high-stakes problems to resolution without hand-holding.
Low ego and coachability — taking feedback, and stating plainly what you don't know.
Work ethic, and team play — sharing credit, unblocking peers, documenting by default.
Your judgment about AI tooling — where you use it meaningfully, and where you deliberately don't. We are interested in both.

Nice-to-haves

Experience in regulated or government environments — FedRAMP, DoD, or an active or
recent security clearance is a significant plus given our growing federal footprint.- Prior forward-deployed engineering, professional services, or field engineering background.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aikubernetesgoawsazuregcp

Platform: comeet
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Pto