Senior DevOps Engineer

SailPoint; United States; Remote; USD 101,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401(k) matching

Paid time off

Job summary

SailPoint is seeking a Senior Staff DevOps Engineer to lead design, build, and operation of our Identity Security Cloud infrastructure on AWS. You will collaborate with global teams to ensure a resilient, secure platform with Kubernetes at its core.

You will drive scalable service mesh, security hardening, and automated deployments across regions, contributing to on-call reliability and incident response.

Qualifications

• 4+ years designing, implementing, and operating a service mesh at scale in production Kubernetes.
• 7+ years of 24x7 production operations for SaaS or cloud services.
• Experience with monitoring stacks like Prometheus, Grafana, and OpenSearch.

Responsibilities

• Collaborate on service mesh architecture and scaling across teams.
• Design, operate, and optimize production Kubernetes clusters on AWS (EKS).
• Define Kubernetes standards, security controls, and deployment patterns.
• Scale infrastructure for increasing customer demand and regional expansion.
• Automate deployment, monitoring, and incident response using GitOps and CI/CD.

Skills

Service mesh

Kubernetes

AWS

Terraform

CI/CD

Python/Go

Linux

Education

Bachelor’s or Master’s degree in Computer Science

Tools

Kubernetes

Terraform

CI/CD pipelines

Python/Go

Job description

About SailPoint

SailPoint is the leader in identity security for the cloud enterprise. Our identity security solutions secure and enable thousands of companies worldwide, giving customers unmatched visibility into their digital workforce and ensuring workers have the right access, no more and no less. Built on a foundation of AI and machine learning, our Identity Security Cloud (Atlas) platform delivers the right level of access to the right identities and resources at the right time, matching the scale, velocity, and changing needs of today's cloud-oriented enterprise. SailPoint is all-in on the AI revolution, and our engineers have access to the latest frontier models and agentic frameworks.

About the Role

As a Senior Staff DevOps Engineer on the Infrastructure Platform team, you will be a technical leader responsible for designing, building, and operating SailPoint's global Identity Security Cloud infrastructure on AWS. You will partner with engineering teams across the US, India, EMEA, and APAC to deliver a resilient, secure platform.

About the Team

The Infrastructure Platform Team designs and operates the foundational cloud infrastructure that powers SailPoint's Identity Security Cloud. Our platform runs on a mature, cloud-native, event-driven microservices architecture on AWS, with Kubernetes, GitOps, and Infrastructure-as-Code at the core. We also build and operate the data platform and AI/ML tooling that underpin SailPoint's identity intelligence capabilities, supporting large-scale data pipelines, model serving infrastructure, and the integrations that bring AI-driven insights into our products. Our platform is built on a combination of microservices, data pipelines, machine learning, and AI tooling, most of which relies on Kubernetes for compute. Engineers work closely with global peers with a follow-the-sun on-call rotation. The team owns all of SailPoint's cloud infrastructure, compute capabilities, and operational practices for a mission critical, 24x7 SaaS environment serving large enterprises worldwide. We focus on security, modern practices, and managing web platforms that serve millions of concurrent requests.

Key Responsibilities

• Collaborate with engineers across teams on service mesh architecture, troubleshooting at scale, performance tuning, and capacity planning for mesh-heavy environments.
• Design, operate, and optimize production Kubernetes clusters at scale on AWS (EKS), including cluster architecture, upgrades, node management, networking, storage, and multi-tenant isolation patterns.
• Define and drive Kubernetes standards and best practices across teams, including workload design, resource management, security hardening (RBAC, Pod Security Standards, network policies), Helm/chart conventions, and deployment patterns.
• Design and scale infrastructure to meet rapidly increasing customer demand, data sovereignty requirements, and regional expansion.
• Automate deployment, monitoring, incident response, and capacity management using GitOps and CI/CD best practices.
• Develop and improve operational practices, runbooks, and platform engineering standards.
• Collaborate with development teams to bring new features and services into production safely and efficiently.
• Proactively meet information security and compliance standards (e.g., PCI DSS), including supporting SailPoint's PCI compliance initiative through secure platform design, controls implementation, and audit readiness.
• Participate in and help improve the on-call rotation; drive post-incident reviews and systemic fixes.

Background and Experience Required

• Strong interpersonal and teaming skills, with the ability to set and enforce process and influence engineers across teams and geographies.
• Ability to operate effectively in an agile, entrepreneurial environment with global stakeholders.
• 4+ years of hands-on experience designing, implementing, and operating a service mesh at scale in production Kubernetes environments.
• 7+ years of experience in 24x7 production operations, supporting highly available SaaS or cloud service environments.
• 7+ years of experience with containerization, virtualization, and configuration management technologies.
• 4+ years of hands-on experience with Kubernetes in production at scale.
• 4+ years of experience with Terraform (IaC), managing infrastructure across multiple AWS accounts and regions.
• 4+ years of experience designing and implementing CI/CD pipelines, especially for Terraform, Kubernetes, and microservices.
• 4+ years of experience with scripting/programming languages (Python, Go, or similar) and strong shell scripting proficiency.
• Strong understanding of Linux, networking, distributed systems, and production troubleshooting.
• Demonstrated experience scaling a service mesh across a large microservices fleet, including phased adoption strategy, sidecar resource management, control plane scaling, and performance tuning under high request volume.
• Experience with monitoring and logging stacks (e.g., Prometheus, Grafana, OpenSearch or equivalent).

Preferred Experience

• Experience with multi-cluster or multi-region service mesh federation (e.g., Istio multi-cluster, Linkerd multicluster extension) in production.
• Familiarity with compliance frameworks in regulated enterprise SaaS, including PCI DSS and FedRAMP-adjacent practices, with experience implementing or operating platforms subject to PCI compliance requirements preferred.

What Success Looks Like

First 30 Days

• Onboard into the role; learn Identity Security Cloud architecture, platform tooling, and team processes.
• Build relationships with peers and stakeholders across the US and global DevOps/SRE teams.
• Begin scoping and designing the enterprise-scale service mesh rollout strategy.
• Join team ceremonies, contribute to in-flight projects, and begin participating in on-call shadowing.

First 60 Days

• Join the on-call rotation; become proficient in core services, escalation paths, and runbooks.
• Own significant platform initiatives and contribute to architecture decisions and operational improvements.
• Deliver a prioritized service mesh scale and maturity roadmap, covering observability gaps, security policy coverage, and onboarding backlog.

First 90 Days

• Join the on-call rotation; become proficient in core services, escalation paths, and runbooks.

First 6 Months

• Become a recognized SME on platform services and independently handle complex production escalations.
• Influence roadmap and engineering practices across the broader Infrastructure organization.

First 12 Months

• Establish durable standards, guardrails, and documentation adopted by multiple teams.
• Demonstrate sustained impact on uptime, deployment success rate, cost efficiency, or engineering productivity.

Work Model

This is a fully remote position for candidates based in the USA or Canada. Candidates must be eligible to work in the United States or Canada and be available for collaboration with global teams across US, EMEA, and APAC time zones. Participation in an on-call rotation is required. We anticipate approximately 10% travel, with flexibility to travel to our headquarters in Austin, TX as needed for leadership meetings, architectural planning sessions, and cross-functional team discussions.

Education

Bachelor's and/or Master’s degree in Computer Science or equivalent technical experience.

Benefits and Compensation

Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint. As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD): $101,000 - $170,274.00. Base salaries for employees based in other locations are competitive for the employee’s home location.

Benefits Overview

• Health and wellness coverage: Medical, dental, and vision insurance
• Disability coverage: Short-term and long-term disability
• Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
• Additional life coverage options: Supplemental life insurance for employees, spouses, and children
• Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
• Financial security: 401(k) Savings and Investment Plan with company matching
• Time off benefits: Flexible vacation policy
• Holidays: 8 paid holidays annually
• Sick leave
• Parental support: Paid parental leave
• Employee Assistance Program (EAP) and Care Counselors
• Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
• Health Savings Account (HSA) with employer contribution

EEO Statement

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.

Anti-Discrimination Policy

The employment policy of SailPoint is to provide equal opportunity to all persons, and it is SailPoint’s policy to take affirmative action to employ and advance in employment protected veterans and individuals with disabilities. It is SailPoint’s policy to recruit, hire, train and promote qualified individuals in all job titles, and ensure that all other personnel actions are administered without regard to race, color, religion, national origin, sex, military and/or veteran status, disability, or other legally protected status, and we will ensure that all employment decisions are based only on valid job requirements. SailPoint does not discriminate on the basis of national origin or citizenship status as provided under the Immigration Reform and Control Act of 1986. Employees and applicants shall not be subjected to harassment, intimidation, threats, coercion, or discrimination because they have engaged in or may engage in any of the following activities: Filing a complaint; Assisting or participating in an investigation, compliance evaluation, hearing, or any other activity related to the administration of the affirmative action provisions of Section 503, VEVRAA, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; Opposing any act or practice made unlawful by Section 503, VEVRAA, or their implementing regulations in this part, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; or Exercising any other right protected by section 503, VEVRAA or their implementing regulations.

SailPoint will also provide reasonable accommodation to known physical or mental limitations of an otherwise qualified employee or applicant for employment, unless the accommodation would impose undue hardship on the operation of our business. SailPoint’s affirmative action program contains an audit and reporting system which enables us to measure the effectiveness of our program, indicate any need for remedial action, determine the degree to which our objectives have been attained, determine whether protected veterans and individuals with disabilities had had the opportunity to participate in company-sponsored activities, measure our compliance with the program’s specific obligations, and document actions taken to comply with these obligations.

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.

SailPoint (Nasdaq: SAIL) is defining the new era of adaptive identity security. In a world where non-human identities now significantly outnumber humans, our AI-powered platform unifies identity, security, and data intelligence to protect today’s enterprise from advanced identity-based threats. We deliver the identity solution that spans both the breadth of identities and the depth of context needed to drive real-time access with confidence. Built on principles like zero-standing privilege and contextualized risk, our SailPoint platform transforms identity from a point of vulnerability into a powerful security advantage. Trusted by many of the world’s leading organizations, SailPoint secures the enterprise with intelligent, autonomous identity security.