Senior Staff DevOps Engineer

SailPoint is the leader in identity security for the cloud enterprise, and they are seeking a Senior Staff DevOps Engineer to join their Infrastructure Platform team. The role involves designing, building, and operating SailPoint's global Identity Security Cloud infrastructure on AWS, with a focus on service mesh implementation and Kubernetes management.

Responsibilities:

• Own and lead the full lifecycle of service mesh implementation at scale, from architecture and rollout planning through production operations across hundreds of microservices running on EKS
• Establish service mesh standards and governance adopted organization-wide, including onboarding runbooks, sidecar injection policies, traffic policy templates, and documented failure-mode playbooks for production incidents
• Mentor and upskill engineers across teams on service mesh architecture, troubleshooting at scale, performance tuning, and capacity planning for mesh-heavy environments
• Design, operate, and optimize production Kubernetes clusters at scale on AWS (EKS), including cluster architecture, upgrades, node management, networking, storage, and multi-tenant isolation patterns
• Define and drive Kubernetes standards and best practices across teams, including workload design, resource management, security hardening (RBAC, Pod Security Standards, network policies), Helm/chart conventions, and deployment patterns
• Design and scale infrastructure to meet rapidly increasing customer demand, data sovereignty requirements, and regional expansion
• Automate deployment, monitoring, incident response, and capacity management using GitOps and CI/CD best practices
• Develop and improve operational practices, runbooks, and platform engineering standards
• Collaborate with development teams to bring new features and services into production safely and efficiently
• Proactively meet information security and compliance standards (e.g., PCI DSS), including supporting SailPoint's PCI compliance initiative through secure platform design, controls implementation, and audit readiness
• Participate in and help improve the on-call rotation; drive post-incident reviews and systemic fixes

Requirements:

• Strong interpersonal and teaming skills, with the ability to set and enforce process and influence engineers across teams and geographies
• Ability to operate effectively in an agile, entrepreneurial environment with global stakeholders
• Prior experience as a technical lead or Staff+ IC in a global engineering organization
• 3+ years of hands-on experience designing, implementing, and operating a service mesh at scale in production Kubernetes environments
• 10+ years of experience in 24x7 production operations, supporting highly available SaaS or cloud service environments
• 10+ years of experience with containerization, virtualization, and configuration management technologies
• 5+ years of hands-on experience with Kubernetes in production at scale
• 5+ years of experience with Terraform (IaC), managing infrastructure across multiple AWS accounts and regions
• 5+ years of experience designing and implementing CI/CD pipelines, especially for Terraform, Kubernetes, and microservices
• 5+ years of experience with scripting/programming languages (Python, Go, or similar) and strong shell scripting proficiency
• Strong understanding of Linux, networking, distributed systems, and production troubleshooting
• Demonstrated experience scaling a service mesh across a large microservices fleet, including phased adoption strategy, sidecar resource management, control plane scaling, and performance tuning under high request volume
• Experience with monitoring and logging stacks (e.g., Prometheus, Grafana, OpenSearch or equivalent)
• Experience with multi-cluster or multi-region service mesh federation (e.g., Istio multi-cluster, Linkerd multicluster extension) in production
• Familiarity with compliance frameworks in regulated enterprise SaaS, including PCI DSS and FedRAMP-adjacent practices, with experience implementing or operating platforms subject to PCI compliance requirements preferred