Staff Engineer, Deployment Architecture onPrem

Qevlar AI; Paris; Hybrid; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Equity

Paris office access

Remote work option

Job summary

Qevlar AI is seeking a Deployment Architect to run on-prem deployments end to end, coordinating security reviews and CAB cycles with customer teams. You will own pre-flight prerequisites, surface gaps before install, and manage release planning across a fleet of deployments.

You will work closely with infrastructure architects, security officers and CISOs, documenting playbooks and ensuring successful customer production sign-offs while maintaining strong multilingual communication.

Qualifications

• Experience deploying complex software into large enterprise datacentres.
• Strong writing skills to produce executable documentation.
• Ability to lead multiple technical projects with diverse stakeholders.
• Fluent English and French communication.

Responsibilities

• Run on-prem deployments end to end for multiple customers on parallel timelines.
• Own the pre-flight prerequisites assessment and surface gaps before install.
• Coordinate security reviews, CAB cycles and PKI processes with customers.
• Maintain install guides, prerequisites matrices and troubleshooting runbooks.
• Manage the release train and migration planning across deployments.
• Provide L3 triage, reproduce issues and escalate with engineering as needed.
• Document friction points as product tickets and improve playbooks.
• Reduce cycle time from signature to production across deployments.

Skills

Deployment architect expertise

Technical writing

Stakeholder management

Bilingual English/French

Tools

Kubernetes

OpenShift

TLS/PKI concepts

Job description

About Qevlar AI

Qevlar is a B2B SaaS scale-up on a mission to boost the productivity of cybersecurity teams with Artificial Intelligence. We build an AI platform that transitions Security Operations Centers from reactive to proactive units through autonomous security alert investigations.

About Qevlar AI

Qevlar is a B2B SaaS scale-up on a mission to boost the productivity of cybersecurity teams with Artificial Intelligence. We build an AI platform that transitions Security Operations Centers from reactive to proactive units through autonomous security alert investigations.

In Just Three Years, We Have

• Raised a total of $44m in series-A & seed rounds from EQT Ventures, Forgepoint Capital and Partech
• Deployed our solution with major Enterprises such as Sodexo and GlobalConnect, and leading MSSPs like Orange Cyberdefense
• Expanded to the US market with a growing North American presence
• Ended 2025 with a strong multi-million dollar ARR and ambitious goals for 2026

We are launching Qevlar on-premise for customers who cannot let their security data leave their perimeter. Your job is to turn a signed bundle into a running production platform inside their datacentre, and to make each deployment faster than the last.

On these accounts the critical path is rarely the software. It is the security review board, the firewall change request, the PKI team, the change advisory board. Someone has to own that path, with enough technical credibility to be taken seriously by the customer's infrastructure architects: this is your role.

What You Will do

• Run our on-prem deployments end to end, several in parallel, each on its own customer timeline, from technical kickoff to production sign-off. The first one lands within your first few months.
• Own the pre-flight. Build and run the prerequisites assessment: Kubernetes distribution, GPU capacity, storage, identity provider, network egress, certificate authority. Every gap surfaces before install week, not during it.
• Navigate the customer's organisation. Security reviews, firewall change requests, PKI, CAB cycles. You hold the schedule even though you control neither the resources nor the decisions.
• Treat documentation as the product. We cannot log into our customers' environments. The install guide, the prerequisites matrix and the troubleshooting runbook are what these users actually consume. The acceptance test is a customer engineer completing an install without calling us.
• Own the release train to customers. Version announcements, upgrade campaigns, migration planning across a fleet where every customer sits on a different release.
• Run L3 triage. Qualify the issue, reproduce it from a support bundle, and elevate with everything engineering needs. You are the reason our engineers can debug an environment they will never see.
• Close the loop. Every friction point you hit in the field becomes a documented requirement, a product ticket or a change to the bundle. The playbook gets shorter every quarter.
• Cut the cycle time. Signature to production should shrink measurably across your first four deployments. That number is yours.

Who you are

You Have

• Deployed complex software into large enterprise datacentres, as a deployment architect, delivery lead, professional services engineer or technical program manager. You know what a six-week PKI ticket feels like.
• A real technical floor. You read a values.yaml , debug a TLS handshake, explain what a proxy with a custom CA does to a container, and know what an OpenShift SCC is. You will not write the feature, but you will understand exactly why it broke.
• Run several technical projects in parallel, each with its own stakeholders, timeline and definition of done, without losing any of them.
• Serious writing skills. Documentation a stranger can execute without calling you is the bar we hold you to.
• Composure in front of infrastructure architects, security officers and CISOs. These conversations are technical, adversarial by design, and decisive for the account.
• Fluent English and French.

Why join us

• Work on meaningful problems with real world impact in cybersecurity
• A high-impact role in a small, international, fast-moving team where your contributions directly shape the company and its success
• Shape the future of a product already making noise in AI + security circles
• A company culture that values autonomy and creativity
• Opportunity for equity and early ownership
• We're flexible on location - you can either work from home or join your colleagues in our beautiful office in Paris' 9th arrondissement.

Hiring process

• Intro Call
• Hiring Manager Interview
• Technical interview
• References and Offer

Fully autonomous automation for defensive cybersecurity teams (SOC). Explainable AI. Agnostic approach. No playbooks needed.