Staff Site Reliability Engineer (Kubernetes)

Okta; Ashington; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Work from home opportunities

Health + Wellness

Financial Benefits

Pay + Incentives

Time Off

Everyday Living

Resources

Job summary

Okta is seeking a Site Reliability Engineer to design, build and operate scalable Kubernetes platforms on AWS, ensuring high availability and security for cloud-native services.

You will manage Helm charts, Karpenter, Istio, and CI/CD pipelines, automate deployments, monitor systems with Prometheus/Grafana, and mentor teams while travel to SF/Chicago onboarding as needed. Experience with Terraform, AWS, Istio, and strong security practices is required.

Qualifications

• 4+ years of Terraform experience.
• Hands-on Helm for Kubernetes deployment and management.
• Proficiency with CI/CD pipelines & automation tools (Jenkins, GitLab, CircleCI, Terraform, Ansible, Spinnaker).
• Experience with multi-region cloud environments & AWS (EC2, RDS, S3, IAM).
• Expertise in Kubernetes platform creation, management and optimisation (HA clusters, networking, storage).
• 4+ years of Kubernetes/Helm experience; strong scripting in Python, Bash, or Go.
• Practical use of Karpenter for dynamic scaling of clusters & resource optimization.
• Travel for onboarding to SF HQ or Chicago office during first week; U.S. person status documentation may be required.
• Familiarity with security best practices: RBAC, encryption, compliance frameworks.

Responsibilities

• Design, build and maintain scalable Kubernetes platforms on AWS.
• Manage Helm charts, Karpenter scaling, Istio service mesh.
• Automate deployment pipelines and CI/CD integrations across environments.
• Monitor, log, and secure cloud-native platforms with best practices.
• Respond to incidents and optimize performance, availability and cost.

Skills

Kubernetes

AWS

Helm

Karpenter

Istio

CI/CD

Automation

Python

Bash

Go

Terraform

Monitoring

Education

Bachelor’s degree in CS/Engineering

CKA/CKAD (certifications)

AWS DevOps Engineer (certification)

Tools

Terraform

Docker

Prometheus

Grafana

CloudWatch

ELK Stack

Jenkins

GitLab

CircleCI

Spinnaker

Ansible

Job description

• The Site Reliability Engineer (SRE) will play a key role in building and managing Kubernetes platforms that support cloud-native applications and services
• This position focuses on architecting and managing reliable, scalable, and secure Kubernetes-based platforms on AWS, ensuring high availability and performance while optimizing costs and automation. The ideal candidate will have hands-on experience with AWS infrastructure, Kubernetes platform creation, Helm charts, Karpenter scaling, and Istio service mesh
• Kubernetes Platform Creation: Design, implement, and maintain highly available, scalable, and fault-tolerant Kubernetes platforms. Ensure clusters are optimized for production workloads, providing high resilience and operational efficiency
• AWS Infrastructure Management: Build, manage, and optimize AWS cloud infrastructure, including EKS,ECS, S3, VPCs, RDS, IAM, and more. Implement best practices for cost management, scaling, and security within AWS
• Helm Management: Utilize Helm to automate and streamline the deployment of applications and services to Kubernetes clusters. Create, maintain, and manage Helm charts for production-ready deployments
• Karpenter Implementation: Implement and manage Karpenter to dynamically scale Kubernetes clusters in response to workload demands
• Istio Service Mesh Management: Configure and manage Istio to provide service-to-service communication, security, and observability within the Kubernetes clusters. Enable fine-grained traffic management, service discovery, and policy enforcement
• Platform Automation & Scaling: Automate the deployment, scaling, and management of infrastructure and applications. Work with CI/CD pipelines to ensure a seamless flow from development to production with minimal downtime
• Incident Management & Troubleshooting: Respond to incidents, troubleshoot, and resolve system issues related to performance, availability, and security in a timely and effective manner
• Security & Compliance: Design and implement secure cloud infrastructure with appropriate access controls, network security, and compliance frameworks
• Documentation & Knowledge Sharing: Create and maintain detailed documentation for Kubernetes platform setup, operational procedures, and best practices. Promote knowledge sharing across teams

Benefits

• Work from home opportunities
• Health + Wellness
• Financial Benefits
• Pay + Incentives
• Time Off
• Everyday Living
• Resources

4+ years of Experience with TerraformHands-on experience with Helm for Kubernetes application deployment and managementProficiency in CI/CD pipelines and automation tools (e.g., Jenkins, GitLab, CircleCI, Terraform, Ansible, Spinnaker)Experience with multi-region cloud environments5+ years of Experience with AWSExpertise in managing and securing Istio for service mesh, including traffic management, security, and observability featuresExperience with monitoring, logging, and alerting tools such as Prometheus, Grafana, CloudWatch, and ELK StackProven experience with AWS (EC2, RDS, S3, CloudFormation, IAM, etc.) and solid understanding of cloud-native architecturesStrong expertise in Kubernetes platform creation, management, and optimisation (e.g., setting up highly available clusters, networking, and storage)4+ years of experience with Kubernetes/HelmStrong scripting and automation skills in Python, Bash, or Go for infrastructure management and platform automationPractical experience with Karpenter for dynamic scaling of Kubernetes clusters and optimising resource usageRequires in-person onboarding and travel to our San Francisco, CA HQ office or our Chicago office during the first week of employmentThis position requires the ability to access federal environments and/or have access to protected federal data. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hireUnderstanding of security best practices for cloud platforms and Kubernetes (e.g., role-based access control (RBAC), encryption, and compliance frameworks)Familiarity with Docker and containerization principlesBachelor’s degree in Computer Science, Engineering, or related field (or equivalent professional experience)Certifications (Preferred): CKA (Certified Kubernetes Administrator), CKAD (Certified Kubernetes Application Developer), or AWS Certified DevOps Engineer are highly desirable