Lead Tech SRE
Job description
Lead Tech SRE to own Kestra Cloud, the fully managed SaaS edition of Kestra, end to end: architecture and specs, delivery, monitoring, and continuous improvement. Leads a team of three (including themselves) while staying hands-on.
At a glance
- Employment
- Full-time
- Work mode
- Remote
- Languages
- English – fluent
What you'll do
- Own the target architecture of Kestra Cloud on GCP: the per-customer dedicated stack (cluster, network, databases, queues), how it is templated and versioned, regions, and the path from Beta to GA
- Write the specs (design docs, RFCs, ADRs) that turn product needs into infrastructure work, and defend the trade-offs: cost per customer vs isolation level, GCP project vs cluster vs node pool per customer, managed service vs self-run
- Define SLOs and error budgets per service and per tier, and make them the basis for prioritization
- Break specs into work and dispatch it across the team, then review and unblock; set the bar for Terraform modules, Helm charts, and GitOps conventions
- Automate the customer instance lifecycle: provisioning, upgrades, scaling, backups, migration, and decommissioning, with no manual steps
- Own the release path of Kestra Cloud with ArgoCD and GitHub Actions: progressive rollouts, rollback, and upgrade safety across the whole fleet of customer instances
- Build the observability stack (metrics, logs, traces, alerting) so that issues are caught before customers report them
- Run on-call and incident response for the team: rotation, runbooks, blameless postmortems, and follow-ups that actually ship
- Plan capacity for a workload that is bursty by nature, and keep autoscaling honest
- Drive cost efficiency (FinOps) on GCP: per-customer cost visibility, right-sizing, committed use, and spot where it fits
- Harden the platform with the security engineer: network policies, workload identity, secrets, and audit trails toward SOC 2 expectations
- Feed back into the product: when Kestra itself makes the cloud hard to run, write the issue, propose the fix, and work with core engineering to land it
What we're looking for
- 8+ years in SRE, platform, or infrastructure engineering, including at least 2 years leading the technical direction of a team or a platform
- Deep, production-grade Kubernetes expertise: operated fleets of clusters at scale and know where they break (upgrades, configuration drift, networking, resource sizing)
- Strong Google Cloud experience: GKE, IAM, networking (VPC, private clusters, load balancing), and managed data services; equivalent depth on AWS or Azure is not a substitute
- Expert Terraform: designed module structures and state layouts that scale to many identical customer environments, not just written resources
- Proven ability to architect, spec, and dispatch: can show design docs written, explain trade-offs made, and describe how work was split and delivered
- Real on-call and incident experience, including running postmortems and turning them into durable fixes
- SaaS operations background: run a product for paying customers, with SLOs that mattered
- Fluent in English and comfortable working autonomously in a fully remote environment
- Pragmatism: pick the boring solution when it works and can explain why
Nice to have
- Experience running workloads that execute untrusted or user-defined code (sandboxing, gVisor, node pool isolation)
- Built or operated a fleet control plane for per-customer environments (Kubernetes operators, Crossplane, GKE Fleet / Config Sync, or custom provisioning services)
- FinOps practice on GCP: per-customer cost attribution, committed use discounts, spot node pools
- Exposure to SOC 2 or ISO 27001 audits from the infrastructure side
- Familiarity with workflow orchestration (Kestra, Airflow, Temporal, or similar) or the JVM in production
Your team
Kestra Cloud
Fully managed SaaS edition of Kestra; each customer gets a dedicated Kestra instance on dedicated infrastructure, a fleet of isolated stacks. In Beta today, with General Availability planned for 2027.
How to get hired
- 1Intro call with our CEO (30 min)
- 2Technical scenario / Practical assessment (2 hours, asynchronous: write a short design spec for a Kestra Cloud scenario on GKE and Terraform, including how you would split the work across a team of three)
- 3Architecture review with our CTO, walking through your spec and the trade-offs (45 min)
Apply
Direct apply at Kestra Technologies
Opens the job posting at Kestra Technologies
About Kestra Technologies
The universal orchestration platform
Kestra is the universal orchestration platform: open source, declarative, and designed to orchestrate data pipelines, IT automation, business workflows, and AI/agentic systems.
Key facts
- Trusted by over 10,000 organizations worldwide
- Open-source project has close to 30,000 GitHub stars, hundreds of contributors, and a fast-growing global community
- Remote-first company
Partners & customers
