2 days ago
Remote, United StatesStaff+
Base Salary
$190k - $250k/yr
Responsibilities
- Own deployment automation for the Data Security Platform, including packaging, installation, upgrades, validation, and release-readiness criteria.
- Build the end-to-end air-gapped delivery path with offline bundles, mirrored registries, signed artifacts, software bills of materials, and no-egress upgrades.
- Partner with QA to build reproducible test fleets and deployment harnesses across Kubernetes distributions, identity providers, and version states.
- Establish infrastructure-as-code baselines and reproducible environments for standard deployments and upgrades.
- Instrument deployments to measure time to value, upgrade lag, first-time-right rate, and cost per deployment.
- Design diagnostics and telemetry workflows that support disconnected operation and local human review.
- Convert customer engagement findings and escalations into reusable automation, tooling, product tickets, and deployment accelerators.
- Partner with Platform Engineering on release pipelines and own the deployment criteria enforced by those pipelines.
- Set technical standards, define quality expectations, and mentor junior engineers while promoting an automation-first DevOps culture.
Requirements
- Demonstrated experience shipping software into air-gapped, disconnected, or customer-controlled environments without egress or shell access, including personally building offline installation bundles and upgrade paths.
- Hands-on Kubernetes experience across distributions such as EKS, OpenShift, RKE2, and k3s, with substantial Helm packaging experience.
- Strong infrastructure-as-code and reproducible-environment experience with Terraform or OpenTofu, CloudFormation, and Ansible.
- Experience building deployment automation, release validation, compatibility testing, observability, diagnostics, or software delivery tooling.
- Preferred experience with Argo CD, Windows Server, PowerShell, MSI or MSIX packaging, code signing, Go, Keycloak, OIDC, SAML, STIG, OpenSCAP, SBOM tooling, Sigstore, Zarf, Hauler, oc-mirror, troubleshoot.sh, Podman, and systemd.
- Preferred familiarity with Zero Trust architecture, policy enforcement and decision points, cryptography, ABAC, identity systems, and federal software supply-chain requirements.
- Existing TS/SCI clearance or eligibility for submission is preferred but not required.
- Ability to communicate with customers, government security teams, internal executives, and engineering partners while making independent, high-judgment decisions.
Benefits
- Flexible PTO plus 14 holidays, flexible work arrangements, parental, medical, bereavement, medical, dental, and vision benefits.
- $1,500 annual Learning & Development stipend, Employee Assistance Program, Headspace access, retirement contribution, stock options, team celebrations, new-hire swag, and IT welcome boxes.
- Structured semi-annual 360-degree performance reviews and an emphasis on diversity, inclusion, belonging, and psychological safety.
Tech Stack
Categories
DevOpsSite Reliability
About Virtru
Virtru builds data protection software that encrypts email and files and enforces access controls across Google Workspace, Microsoft 365, and other platforms. Its Data Security Platform is offered as SaaS or on‑premises, with SDKs and APIs for developers, used by enterprises and public-sector teams in regulated industries. Founded in 2012 and headquartered in Washington, DC, Virtru is privately held.