Container Engineer

About the Role
Join a globally distributed engineering team focused on building and operating a high-performance container platform that supports modern, cloud-native applications at scale. As a Container Engineer, you will ensure the reliability, security, observability, and cost efficiency of multi-tenant Kubernetes infrastructure across various regions. This position combines software engineering, platform architecture, and Site Reliability Engineering (SRE) practices to create robust automation and enhance operational resilience. Collaborating closely with infrastructure specialists and product engineers, you will simplify reliable deployment practices and contribute to the core platform architecture while tackling complex infrastructure challenges. This role is ideal for an experienced engineer who values autonomy, open-source technologies, and the creation of scalable systems in a dynamic, asynchronous environment.

Accountabilities

• Platform reliability and operations: Define and maintain service-level indicators (SLIs), service-level objectives (SLOs), and error budgets for the container platform. Develop policies that align reliability targets with platform changes and deployment decisions.
• Operational readiness and observability: Lead Operational Readiness Reviews (ORRs) for new features and significant changes, establish meaningful uptime metrics, and enhance visibility through comprehensive metrics, logs, and distributed traces across platform components.
• Incident management and continuous improvement: Participate in the on-call rotation, respond to platform incidents, facilitate blameless postmortems, identify recurring failure patterns, and implement improvements to decrease detection and recovery times.
• Platform software engineering: Build, maintain, and deploy production-grade automation, controllers, operators, internal tools, and platform APIs. Create custom solutions when existing tools do not meet technical challenges.
• Deployment automation and release management: Design and enhance platform CI/CD pipelines, rollout mechanisms, and release processes for safe, efficient, and predictable deployments.
• Security and operational automation: Implement security automation, including intrusion detection, automated remediation, and patch management. Efficiently automate repetitive operational tasks.
• Testing and quality assurance: Develop and maintain automated testing suites and pipelines to validate platform releases before deployment to production workloads.
• Architecture and ecosystem development: Evaluate and evolve the container technology stack, including orchestration, runtimes, networking, workload isolation, and observability tools. Conduct failure-mode analysis, mapping dependencies, and designing resilient architectures for multi-tenant environments.
• Infrastructure efficiency: Optimize platform architecture to improve infrastructure costs while maintaining security, reliability, and performance standards across tenants.
• Engineering enablement: Assist product teams in adopting sustainable operational practices, including effective alerting, escalation procedures, runbook coverage, and minimizing notification noise.

Requirements

• Professional experience: Minimum of five years in platform engineering, Kubernetes or container platform operations, Site Reliability Engineering (SRE), or managing production infrastructure, including operating systems at scale and participating in on-call rotations.
• Deep technical expertise: Strong expertise in at least one of the following areas, ideally knowledge across two:
  • Container tooling and ecosystem: In-depth knowledge of Kubernetes, containerd, OCI/CRI standards, and the broader Cloud Native Computing Foundation (CNCF) ecosystem, with familiarity in technologies such as Argo CD, Argo Rollouts, Cilium, eBPF, Gateway API, Karpenter, KEDA, gVisor, or Kata Containers.
  • Software engineering: Proficiency in writing production-quality code in Go or a comparable systems programming language, along with experience building controllers and operators and designing platform APIs.
  • Operational excellence and SRE: Strong grasp of SLOs, error budgets, operational KPIs, incident response, blameless postmortems, and strategies for reducing MTTD and MTTR.
• Multi-tenant infrastructure: Background in managing large-scale, multi-tenant systems, with an understanding of workload isolation mechanisms such as namespaces, role-based access control (RBAC), network policies, resource quotas, and VM-based isolation models.
• Cloud infrastructure: Experience working with AWS environments, including managing multiple accounts, IAM, and VPC networking.
• Infrastructure as code: Familiarity with infrastructure-as-code tools, preferably Pulumi, with Terraform or AWS CDK also applicable.
• Kubernetes proficiency: Hands-on experience deploying, operating, troubleshooting, and improving Kubernetes-based infrastructure.
• Automation mindset: Proactive approach to scripting and automating repetitive tasks to enhance reliability, efficiency, and consistency.
• Communication and collaboration: Ability to articulate complex technical concepts effectively to both infrastructure experts and product engineers, and work collaboratively across disciplines in an asynchronous, globally distributed environment.
• Adaptability and ownership: Comfortable navigating ambiguity, making informed technical trade-offs, and continuously improving systems as requirements evolve.

Nice to Have

• Experience in building and operating a multi-tenant Kubernetes platform used by internal engineering teams.
• Familiarity with policy enforcement tools such as Kyverno or OPA/Gatekeeper.
• Experience with infrastructure cost management and optimization tools like OpenCost or Kubecost.
• Knowledge of managed database platforms or PostgreSQL.
• Experience with observability technologies such as OpenTelemetry, Prometheus, VictoriaMetrics, and Grafana.
• A strong interest in open-source software and the cloud-native ecosystem.

Benefits

• Fully remote work: Work from anywhere with no central office requirement.
• Co-working allowance: Access to a WeWork membership or co-working budget for a productive working environment.
• Employee equity: Participate in an employee stock ownership plan (ESOP) to share in the company's growth.
• Technology allowance: Budget for equipment and tools, including laptops and other essentials.
• Health insurance: Comprehensive health coverage for employees, with 80% coverage for eligible dependents.
• Annual company off-sites: Join colleagues for annual gatherings focused on collaboration and team building.
• Flexible working arrangements: An asynchronous work culture that emphasizes trust and autonomy in managing your schedule.
• Professional development: Annual budget for learning activities like courses, books, and conferences.
• International collaboration: Work with a diverse, globally distributed team.
• Open-source innovation: Contribute to modern cloud-native infrastructure and support the wider developer community.