Director, DevOps & Identity Platform

Gruve; San Francisco (CA); On-site; USD 200,000 - 230,000; Full time

Job summary

Gruve is seeking an experienced Platform Engineer specializing in IAM/IGA to own environments, pipelines, and secure operation of identity platforms across client and Gruve-hosted estates. You will lead CI/CD for identity artifacts, manage secrets and workload identities, and ensure HA/DR readiness.

You will guide architecture decisions and support presales for hosting and platform modernization. The role requires strong experience with Terraform, Ansible, Kubernetes, and security controls, plus

Qualifications

• CKA/CKAD, HashiCorp Terraform Associate, or Azure/AWS Solutions Architect certification.
• CISSP or CCSP.
• SRE practice — SLI/SLO definition, error budgets, chaos and DR testing.
• Zero Trust architecture, ZTNA and micro segmentation experience.
• Experience running a hosted or managed identity service with contractual SLAs.

Responsibilities

• Own environment strategy across the portfolio: development, test, UAT and production estates for IGA platforms, including refresh cadence, data masking and anonymization of production identity data in lower environments.
• Build and govern CI/CD for identity artifacts — configuration-as-code promotion, object versioning and packaging for SailPoint, Saviynt, and Okta, automated deployment, drift detection and rollback.
• Own infrastructure-as-code (Terraform, Ansible) for identity platform infrastructure and containerized deployment on Kubernetes (EKS/AKS/GKE).
• Own secrets and non-human identity management across the practice: vaulting, workload identity federation, service-account and API-key lifecycle, and certificate and PKI lifecycle for connector and federation endpoints.
• Design and validate platform reliability for identity workloads: HA and DR architecture, RPO/RTO validation, and capacity and performance tuning for aggregation cycles, certification campaigns and peak provisioning load.
• Secure the delivery chain: SAST/DAST and dependency scanning in the pipeline, SBOM generation, artifact signing, and least-privilege pipeline and repository access.
• Stand up observability for identity platforms — provisioning failure rates, aggregation SLA, connector health, task and workflow queue depth — and route identity audit logs into the client SIEM.
• Lead the DevOps and platform engineering team across US and Pune; set engineering standards, chair change advisory for platform changes, and own audit evidence for client and internal audit.
• Partner with the Principal Engineering Manager on architecture decisions with platform impact, and support presales for hosting, managed-service and platform-modernization scope.
• Own platform upgrade and patch strategy across client estates, including vendor release tracking, regression risk assessment and coordinated upgrade windows.

Skills

CI/CD ownership

SRE practices

Zero Trust

Identity platforms

Education

CKA/CKAD or Azure/AWS Solutions Architect

CISSP or CCSP

Tools

Terraform

Ansible

Kubernetes

Job description

Gruve is seeking an experienced Platform Engineer specializing in IAM/IGA to own environments, pipelines, and secure operation of identity platforms across client and Gruve-hosted estates. You will lead CI/CD for identity artifacts, manage secrets and workload identities, and ensure HA/DR readiness.

You will guide architecture decisions and support presales for hosting and platform modernization. The role requires strong experience with Terraform, Ansible, Kubernetes, and security controls, plus