Job description

About Delinea: Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities – including workforce, IT administrator, developers, and machines – assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime, Delinea delivers robust security and operational efficiency without compromise. Learn more about Delinea on Delinea.com delinea.com, LinkedIn nam12.safelinks.protection.outlook.com, X nam12.safelinks.protection.outlook.com, and YouTube nam12.safelinks.protection.outlook.com. Join our passionate, global team at Delinea and help us make the world a safer and more secure place. Our success is driven by world-class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness. If you're ready to push boundaries and challenge the status quo in security, we want to hear from you. Apply today to help us achieve our mission. Summary: Delinea is looking for a Senior Site Reliability Engineer to join our Cloud Engineering team. You will own the availability and performance of several production SaaS services running in Azure and AWS, including our FedRAMP High environment. This is a hands-on role focused on measuring reliability, tuning detection, responding to incidents, and removing the manual work that keeps engineers awake at night. Prior experience in a government cloud environment is welcome but not required; we will teach you the compliance side. What You'll Do: - Own reliability for a set of production SaaS services end to end: availability, performance, and capacity. - Define service-level indicators, set service-level objectives and error budgets, and use them to prioritize reliability work with engineering and product teams. - Build and tune monitoring in Datadog and Azure Monitor, including threshold, composite, and anomaly detection monitors, synthetic checks, dashboards, and alert routing that shorten time to detect and cut alert noise. - Automate response. Wire monitors into remediation workflows for known failure conditions and replace manual runbook steps with code. - Participate in an on-call rotation, lead incident response for high-severity events, and coordinate resolution across support, engineering, and product. - Write post-incident reviews and customer-facing root cause analyses, then drive the preventive actions to completion rather than filing and forgetting them. - Work support escalations: reproduce the issue, diagnose it from logs, traces, and network captures, resolve it or route it with evidence, and feed recurring patterns back into the product backlog. - Build and maintain infrastructure as code with Terraform and Azure DevOps pipelines. - Administer the web application firewall: rule tuning, rate limiting, false positive triage, and coordination with the security team. - Own the cost of our observability platform: Datadog index and retention spend, custom metric and APM volume, log ingestion rates, and S3 and blob storage for archived logs. Decide what gets indexed, sampled, or archived without losing the signal needed to troubleshoot. - Operate within our FedRAMP High environment following established change control and continuous monitoring processes, and contribute to the runbooks and standard operating procedures that support it. - Improve how the team runs on-call: rotation design, escalation paths, alert quality, runbook coverage, and handoff between regions. - Partner across Support, Security, Product, and Development to make sure new services ship with monitoring, runbooks, and SLOs in place. What You'll Bring: - 8+ years in Site Reliability Engineering, DevOps, cloud operations, or production engineering for a SaaS product. - Hands-on Azure experience across AKS, App Service, Azure SQL, Redis, Service Bus, Front Door, and Storage, including cloud networking and cloud security fundamentals. - Production experience with an observability platform such as Datadog: metrics, logs, APM, dashboards, and monitor design. You should be comfortable writing queries, not just reading dashboards. - Demonstrated ownership of SLIs, SLOs, and error budgets for services you supported. - Incident response experience: you have run a bridge, made calls under pressure, and written the postmortem afterward. - Kubernetes in production, including ingress, deployments, resource limits, and troubleshooting failing workloads. - Infrastructure as code with Terraform, plus CI/CD pipeline creation and troubleshooting (Azure DevOps preferred). - Scripting in PowerShell and Python, and fluency with YAML and JSON. - Strong networking and web fundamentals: DNS, TLS and certificate chains, load balancing, reverse proxies, firewalls, and packet-level troubleshooting. - Knowledge of redundancy, backup, and disaster recovery strategies in cloud environments. - Clear written communication. Your RCAs will be read by customers and executives. - Willingness to participate in an on-call rotation covering weekends and emergencies. - Up to 10% travel. We'd Love to See: - Exposure to a regulated or audited environment: FedRAMP, NIST 800-53, SOC 2, ISO 27001, PCI, or similar. Direct FedRAMP experience is a plus, not a requirement. - AWS experience alongside Azure, including CloudFormation and SES. - Hands-on experience with Jenkins pipeline creation and maintenance, SaltStack configuration management, and Consul for service discovery and distributed system coordination. - Advanced log analysis in the ELK stack, and/or CloudWatch Logs Insights QL. - Web application firewall administration (Imperva, Azure WAF, Cloudflare) and bot or rate-limiting rule tuning. - A track record of controlling observability tooling spend at scale: index tuning, sampling strategy, retention tiering, and archive and rehydration workflows. - Microsoft Entra ID and troubleshooting SAML and OIDC authentication flows. - Large-scale, multi-region, geo-redundant architectures and hands-on disaster recovery testing. - Experience with Jira Service Management, PagerDuty, or similar on-call and alerting tooling, and with public status page communication. - Running game days or chaos exercises, and mentoring engineers newer to SRE practice. For this Job, Delinea is not considering candidates that need any type of US work authorization now or in the future. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, L-1, J1, etc. Why work at Delinea? - We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities. - We invest in people who are smart, self-motivated, and collaborative. - What we offer in return is meaningful work, a culture of innovation and great career progression. At Delinea, our core values are STRONG and guide our behaviors and success: - Spirited - We bring energy and passion to everything we do - Trust - We act with integrity and deliver on our commitments - Respect - We listen, value different perspectives, and work as one team - Ownership - We take initiative and follow through - Nimble - We adapt quickly in a fast-changing environment - Global - We embrace diverse people and ideas to drive better outcomes We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie. We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays. Delinea is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.

Requirements

Must-haves

Own reliability for a set of production SaaS services end to end: availability, performance, and capacity.
Define service-level indicators, set service-level objectives and error budgets, and use them to prioritize reliability work with engineering and product teams.
Build and tune monitoring in Datadog and Azure Monitor, including threshold, composite, and anomaly detection monitors, synthetic checks, dashboards, and alert routing that shorten time to detect and cut alert noise.
Automate response. Wire monitors into remediation workflows for known failure conditions and replace manual runbook steps with code.
Participate in an on-call rotation, lead incident response for high-severity events, and coordinate resolution across support, engineering, and product.
Write post-incident reviews and customer-facing root cause analyses, then drive the preventive actions to completion rather than filing and forgetting them.
Work support escalations: reproduce the issue, diagnose it from logs, traces, and network captures, resolve it or route it with evidence, and feed recurring patterns back into the product backlog.
Build and maintain infrastructure as code with Terraform and Azure DevOps pipelines.
Administer the web application firewall: rule tuning, rate limiting, false positive triage, and coordination with the security team.
Operate within our FedRAMP High environment following established change control and continuous monitoring processes, and contribute to the runbooks and standard operating procedures that support it.
Improve how the team runs on-call: rotation design, escalation paths, alert quality, runbook coverage, and handoff between regions.
Partner across Support, Security, Product, and Development to make sure new services ship with monitoring, runbooks, and SLOs in place.
8+ years in Site Reliability Engineering, DevOps, cloud operations, or production engineering for a SaaS product.
Hands-on Azure experience across AKS, App Service, Azure SQL, Redis, Service Bus, Front Door, and Storage, including cloud networking and cloud security fundamentals.
Production experience with an observability platform such as Datadog: metrics, logs, APM, dashboards, and monitor design. You should be comfortable writing queries, not just reading dashboards.
Demonstrated ownership of SLIs, SLOs, and error budgets for services you supported.
Incident response experience: you have run a bridge, made calls under pressure, and written the postmortem afterward.
Kubernetes in production, including ingress, deployments, resource limits, and troubleshooting failing workloads.
Scripting in PowerShell and Python, and fluency with YAML and JSON.
Strong networking and web fundamentals: DNS, TLS and certificate chains, load balancing, reverse proxies, firewalls, and packet-level troubleshooting.
Knowledge of redundancy, backup, and disaster recovery strategies in cloud environments.
Clear written communication. Your RCAs will be read by customers and executives.

Nice-to-haves

Infrastructure as code with Terraform, plus CI/CD pipeline creation and troubleshooting (Azure DevOps preferred).
Exposure to a regulated or audited environment: FedRAMP, NIST 800-53, SOC 2, ISO 27001, PCI, or similar. Direct FedRAMP experience is a plus, not a requirement.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiazureawssqlkubernetesci/cdpythonjira

Platform: ashby
Effort: quick