Member of Technical Staff | Deployment Platform
ABOUT THE ROLE
At Avra, every technical IC is a Member of Technical Staff (MTS). The title doesn't put anyone in a silo: you own systems and outcomes, not steps in a function, and you keep building depth in your area.
In this role, you'll join the Platform team to own what ships and operates our services in any environment. Banks and large enterprises want their sensitive data to stay in-house, so we run part of our platform on their Kubernetes. On-premise deployment is strategic for Avra. You'll build the channel that installs, upgrades, observes, and operates those dataplanes as if they were our own, along with the infrastructure and continuous delivery foundations every team relies on.
WHAT YOU'LL DO
- Evolve the dataplane deployment channel: portal, OCI registry, deploy agent, Application Agent, and the Control Plane API.
- Install, upgrade, and roll back services on customer Kubernetes via Helm, with Application Agent operating over outbound polling and no inbound ports open on the dataplane.
- Own Kubernetes and cloud foundations on GCP and AWS: Terraform, networking, IAM, and secrets.
- Maintain the packages and distribution registries for everything that ships on-premise.
- Coordinate incident response across dataplanes, including when the fix depends on an action by the customer.
- Define guardrails and standards for the services other teams run in dataplanes, in partnership with Security.
HOW WE MEASURE SUCCESS
- Time from a published release to it running in a dataplane, in our cloud or at a customer.
- Rollout and rollback time between authorized versions.
- Drift between the desired and actual state of each dataplane.
- Health and connectivity of agents across all dataplanes.
- MTTR for incidents, including on-premise.
WHAT WE'RE LOOKING FOR
- Deep, hands-on experience with Kubernetes in production: operating clusters, debugging workloads, networking, RBAC, and upgrades.
- Infrastructure as code with Terraform on a public cloud (GCP and/or AWS).
- Experience building CI/CD pipelines and continuous delivery, with reliable rollback.
- Experience with Helm and packaging software for Kubernetes.
- Production code, ideally in Go, for agents, controllers, and platform tooling.
- A security mindset: least-privilege IAM, secrets management, and isolation between environments.
- Incident response experience, and a willingness to operate what you build.
- Daily use of coding agents, with an opinion on how to use them safely.
NICE TO HAVE
- Shipping software to customer-hosted Kubernetes (on-premise, BYOC, or air-gapped) with Distr, Replicated, or similar.
- GitOps (Argo CD, Flux) and ephemeral preview environments.
- Software supply chain: artifact signing, SBOMs, and verification at install time.
- Observability with OpenTelemetry
- GKE and EKS.
- Financial services or regulated environments (ISO 27001).