Lead Tech SRE

Contract type
Ongoing
Work mode
Remote
Experience
Senior · 8+ years

Job description

Lead Tech SRE to own Kestra Cloud, the fully managed SaaS edition of Kestra, end to end: architecture and specs, delivery, monitoring, and continuous improvement. Leads a team of three (including themselves) while staying hands-on.

At a glance

Employment
Full-time
Work mode
Remote
Languages
English – fluent

What you'll do

  • Own the target architecture of Kestra Cloud on GCP: the per-customer dedicated stack (cluster, network, databases, queues), how it is templated and versioned, regions, and the path from Beta to GA
  • Write the specs (design docs, RFCs, ADRs) that turn product needs into infrastructure work, and defend the trade-offs: cost per customer vs isolation level, GCP project vs cluster vs node pool per customer, managed service vs self-run
  • Define SLOs and error budgets per service and per tier, and make them the basis for prioritization
  • Break specs into work and dispatch it across the team, then review and unblock; set the bar for Terraform modules, Helm charts, and GitOps conventions
  • Automate the customer instance lifecycle: provisioning, upgrades, scaling, backups, migration, and decommissioning, with no manual steps
  • Own the release path of Kestra Cloud with ArgoCD and GitHub Actions: progressive rollouts, rollback, and upgrade safety across the whole fleet of customer instances
  • Build the observability stack (metrics, logs, traces, alerting) so that issues are caught before customers report them
  • Run on-call and incident response for the team: rotation, runbooks, blameless postmortems, and follow-ups that actually ship
  • Plan capacity for a workload that is bursty by nature, and keep autoscaling honest
  • Drive cost efficiency (FinOps) on GCP: per-customer cost visibility, right-sizing, committed use, and spot where it fits
  • Harden the platform with the security engineer: network policies, workload identity, secrets, and audit trails toward SOC 2 expectations
  • Feed back into the product: when Kestra itself makes the cloud hard to run, write the issue, propose the fix, and work with core engineering to land it

What we're looking for

  • 8+ years in SRE, platform, or infrastructure engineering, including at least 2 years leading the technical direction of a team or a platform
  • Deep, production-grade Kubernetes expertise: operated fleets of clusters at scale and know where they break (upgrades, configuration drift, networking, resource sizing)
  • Strong Google Cloud experience: GKE, IAM, networking (VPC, private clusters, load balancing), and managed data services; equivalent depth on AWS or Azure is not a substitute
  • Expert Terraform: designed module structures and state layouts that scale to many identical customer environments, not just written resources
  • Proven ability to architect, spec, and dispatch: can show design docs written, explain trade-offs made, and describe how work was split and delivered
  • Real on-call and incident experience, including running postmortems and turning them into durable fixes
  • SaaS operations background: run a product for paying customers, with SLOs that mattered
  • Fluent in English and comfortable working autonomously in a fully remote environment
  • Pragmatism: pick the boring solution when it works and can explain why

Nice to have

  • Experience running workloads that execute untrusted or user-defined code (sandboxing, gVisor, node pool isolation)
  • Built or operated a fleet control plane for per-customer environments (Kubernetes operators, Crossplane, GKE Fleet / Config Sync, or custom provisioning services)
  • FinOps practice on GCP: per-customer cost attribution, committed use discounts, spot node pools
  • Exposure to SOC 2 or ISO 27001 audits from the infrastructure side
  • Familiarity with workflow orchestration (Kestra, Airflow, Temporal, or similar) or the JVM in production

Your team

Kestra Cloud

Fully managed SaaS edition of Kestra; each customer gets a dedicated Kestra instance on dedicated infrastructure, a fleet of isolated stacks. In Beta today, with General Availability planned for 2027.

How to get hired

  1. 1Intro call with our CEO (30 min)
  2. 2Technical scenario / Practical assessment (2 hours, asynchronous: write a short design spec for a Kestra Cloud scenario on GKE and Terraform, including how you would split the work across a team of three)
  3. 3Architecture review with our CTO, walking through your spec and the trade-offs (45 min)

Apply

Direct apply at Kestra Technologies

Opens the job posting at Kestra Technologies

About Kestra Technologies

The universal orchestration platform

Kestra is the universal orchestration platform: open source, declarative, and designed to orchestrate data pipelines, IT automation, business workflows, and AI/agentic systems.

Key facts

  • Trusted by over 10,000 organizations worldwide
  • Open-source project has close to 30,000 GitHub stars, hundreds of contributors, and a fast-growing global community
  • Remote-first company

Partners & customers

JPMorgan ChaseBloombergFILACrédit Agricole