Job Description

Were seeking a Senior Cloud Reliability Engineer to reimagine how we deliver secure, enterprise-ready CIAM solutions. Youll shape the foundation of our commercial SaaS platform by designing infrastructure that transcends cloud boundaries while maintaining the rigor of a security-first mindset. This role is for engineers who see vendor lock-in as an architectural challenge to solve, not an inevitability. Youll own the complete lifecycle of our deployment systems - from crafting cloud-agnostic pipelines to implementing tenant isolation patterns worthy of a Zero Trust product. Your Impact Will: Liberate our platform from cloud-specific dependencies without sacrificing velocity Embed security observability into every layer of the deployment process Empower developers to ship multi-cloud compatible services by default Transform internal tools into marketable SaaS capabilities We Value: Systems thinkers who prototype their way to elegant abstractions Engineers who document through code-first principles Architects who treat compliance as a feature, not a constraint Role Focus Eliminate Cloud Lock-in Redesign current Azure App Services implementation into vendor-agnostic architecture Implement CNCF standards for portable multi-cloud deployments (Crossplane, KCP, Cluster API) Future-Proof CI/CD Foundation Build Dagger-based pipelines with OCI artifact compatibility Design self-contained workflows executable on any compute (GitHub Actions/Azure DevOps/GitLab) Tenant-Aware Platform Engineering Create isolated tenant provisioning system using Cloud Native Building Blocks Implement zero-trust networking for multi-customer deployments Key Responsibilities Cloud Re-architecture Replace app service dependencies with Kubernetes operators Design using cloud-portable services: Backstage for developer portal OpenFGA for relationship-based access control NATS/JetStream for cloud-agnostic messaging Pipeline Ownership Convert existing workflows to Dagger modules with CUE unification Create pipeline execution environments supporting: Air-gapped deployments Hybrid cloud testing matrices WASM-based testing tools Tenant Operations Build multi-tenant control plane with: Capsule for namespace isolation Vcluster for tenant-specific control planes Paralus for zero-trust access Technical Non-Negotiables 5+ years production experience with: Multi-cloud Kubernetes (AKS/EKS/GKE + Rancher/KubeSpray) Pipeline abstraction tools (Dagger, Earthly, Tekton) Secret zero patterns (SPIRE/SPIFFE/Vault) Proven success in: Migrating vendor-locked systems to OSS equivalents Building commercial SaaS from internal platforms Implementing policy-as-code for tenant isolation Deep expertise with: Service meshes (Linkerd/Istio) for multi-tenant networking Cloud cost attribution across tenants OCI-compliant artifact registries Key Differentiators Portability-First Mindset: Rejects cloud-specific services in favor of open standards Product Engineering Focus: Builds internal platform as externalizable product Tenant-Centric Security: Implements commercial-grade isolation patterns Execution Autonomy: Full control over CI/CD and deployment architecture Benefits: The ability to collaborate with, learn from colleagues in a highly complex, global organisation. We provide a working environment with a creative company, paired with a great compensation package, great benefits, and a supportive atmosphere where you can sharpen with new challenges and development opportunities. Hybrid work-from-home and at a determined Rockwell Automation facility. Corporate Social Responsibility opportunities, Support from our 24/7 employee assistance program. Reporting will to Technical Lead.