Staff SRE Engineer

Staff SRE Engineer Bengaluru, India Hybrid Set-up Role Overview: We're looking for a Cloud Reliability Engineer to reimagine how we deliver secure, enterprise-ready CIAM solutions. You'll shape the foundation of our commercial SaaS platform by designing infrastructure that transcends cloud boundaries while maintaining the thoughtfulness of a security-first mindset. This role is for engineers who see vendor lock-in as an architectural challenge to solve, not an inevitability. You'll lead the complete lifecycle of our deployment systems ? from creating cloud-agnostic pipelines to implementing tenant isolation patterns worthy of a Zero Trust product. The ideal candidate should have 5+ years production experience and be able to perform the following: Liberate our platform from cloud-specific dependencies without sacrificing velocity Embed security observability into every layer of the deployment process Empower developers to ship multi-cloud compatible services by default Transform internal tools into marketable SaaS capabilities Multi-cloud Kubernetes (AKS/EKS/GKE + Rancher/KubeSpray) Pipeline abstraction tools (Dagger, Earthly, Tekton) Secret zero patterns (SPIRE/SPIFFE/Vault) Migrating vendor-locked systems to OSS equivalents Building commercial SaaS from internal platforms Implementing policy-as-code for tenant isolation Service meshes (Linkerd/Istio) for multi-tenant networking Cloud cost attribution across tenants OCI-compliant artifact registries The candidate should also be able to demonstrate the following: Eliminate Cloud Lock-in: Redesign current Azure App Services implementation into vendor-agnostic architecture Implement CNCF standards for portable multi-cloud deployments (Crossplane, KCP, Cluster API) Future-Proof CI/CD Foundation: Build Dagger-based pipelines with OCI artifact compatibility Design self-contained workflows executable on any compute (GitHub Actions/Azure DevOps/GitLab) Tenant-Aware Platform Engineering: Create isolated tenant provisioning system using Cloud Native Building Blocks Implement zero-trust networking for multi-customer deployments Additional Responsibilities: Replace app service dependencies with Kubernetes operators Design using cloud-portable services: Backstage for developer portal OpenFGA for relationship-based access control NATS/JetStream for cloud-agnostic messaging Convert existing workflows to Dagger modules with CUE unification Create pipeline execution environments supporting: Air-gapped deployments Hybrid cloud testing matrices WASM-based testing tools Build multi-tenant control plane with: Capsule for namespace isolation Vcluster for tenant-specific control planes Paralus for zero-trust access OCI-compliant artifact registries