Staff Engineer, Deployment Architecture onPrem Paris · Hybrid

Qevlar AI; United States; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Equity

Flexible location (remote or Paris)

Autonomy and ownership

Impactful cybersecurity work

Job summary

Qevlar AI seeks a deployment-focused technologist to run on-premise security deployments end-to-end for large enterprises. You will manage prerequisites, security reviews, and CAB cycles, while documenting every step as a deliverable.

You will coordinate across security, network, PKI, and engineering teams, owning the release train and customer migrations in a fast-moving international team.

Qualifications

• Deployed complex software into large enterprise datacentres.
• Real technical floor: can read values.yaml, TLS handshakes, proxies and container CA.
• Runs several technical projects in parallel with multiple stakeholders.
• Strong writing skills for deploy docs and runbooks.
• Composure with architects, security officers, and CISOs.
• Fluent English and French.

Responsibilities

• Run on-prem deployments end to end for multiple customers.
• Build and run prerequisites assessment (Kubernetes, GPU, storage, identity, network, PKI).
• Navigate security reviews, CAB cycles, and change requests.
• Treat documentation as the product (install guides, runbooks, prereqs).
• Own release planning and migration across a customer fleet.
• Lead L3 triage with engineering inputs and reproduce issues.
• Close the loop with product tickets from field feedback.
• Reduce time from signature to production across deployments.

Skills

Deployment expertise

PKI understanding

OpenShift familiarity

TLS debugging

Technical program management

Documentation writing

Stakeholder management

Tools

Kubernetes

CA certificates

Job description

About Qevlar AI

Qevlar is a B2B SaaS scale-up on a mission to boost the productivity of cybersecurity teams with Artificial Intelligence. We build an AI platform that transitions Security Operations Centers from reactive to proactive units through autonomous security alert investigations.

In just three years, we have:

• Raised a total of $44m in series-A & seed rounds from EQT Ventures, Forgepoint Capital and Partech

• Deployed our solution with major Enterprises such as Sodexo and GlobalConnect, and leading MSSPs like Orange Cyberdefense

• Expanded to the US market with a growing North American presence

• Ended 2025 with a strong multi-million dollar ARR and ambitious goals for 2026

We are launching Qevlar on-premise for customers who cannot let their security data leave their perimeter. Your job is to turn a signed bundle into a running production platform inside their datacentre, and to make each deployment faster than the last.

On these accounts the critical path is rarely the software. It is the security review board, the firewall change request, the PKI team, the change advisory board. Someone has to own that path, with enough technical credibility to be taken seriously by the customer's infrastructure architects: this is your role.

What You Will do

• Run our on-prem deployments end to end, several in parallel, each on its own customer timeline, from technical kickoff to production sign-off. The first one lands within your first few months.

• Own the pre-flight. Build and run the prerequisites assessment: Kubernetes distribution, GPU capacity, storage, identity provider, network egress, certificate authority. Every gap surfaces before install week, not during it.

• Navigate the customer's organisation. Security reviews, firewall change requests, PKI, CAB cycles. You hold the schedule even though you control neither the resources nor the decisions.

• Treat documentation as the product. We cannot log into our customers' environments. The install guide, the prerequisites matrix and the troubleshooting runbook are what these users actually consume. The acceptance test is a customer engineer completing an install without calling us.

• Own the release train to customers. Version announcements, upgrade campaigns, migration planning across a fleet where every customer sits on a different release.

• Run L3 triage. Qualify the issue, reproduce it from a support bundle, and elevate with everything engineering needs. You are the reason our engineers can debug an environment they will never see.

• Close the loop. Every friction point you hit in the field becomes a documented requirement, a product ticket or a change to the bundle. The playbook gets shorter every quarter.

• Cut the cycle time. Signature to production should shrink measurably across your first four deployments. That number is yours.

Who you are

You have:

• Deployed complex software into large enterprise datacentres, as a deployment architect, delivery lead, professional services engineer or technical program manager. You know what a six-week PKI ticket feels like.

• A real technical floor. You read a values.yaml , debug a TLS handshake, explain what a proxy with a custom CA does to a container, and know what an OpenShift SCC is. You will not write the feature, but you will understand exactly why it broke.

• Run several technical projects in parallel, each with its own stakeholders, timeline and definition of done, without losing any of them.

• Serious writing skills. Documentation a stranger can execute without calling you is the bar we hold you to.

• Composure in front of infrastructure architects, security officers and CISOs. These conversations are technical, adversarial by design, and decisive for the account.

• Fluent English and French.

Why join us

• Work on meaningful problems with real-world impact in cybersecurity

• A high-impact role in a small, international, fast-moving team where your contributions directly shape the company and its success

• Shape the future of a product already making noise in AI + security circles

• A company culture that values autonomy and creativity

• Opportunity for equity and early ownership

• We’re flexible on location –you can either work from home or join your colleagues in our beautiful office in Paris’ 9th arrondissement.

If you’re excited about helping security teams adopt cutting-edge AI, we’d love to hear from you. Let’s build the future of cybersecurity together!

Hiring process

1. Intro Call

2. Hiring Manager Interview

3. Technical interview

4. References and Offer