Job Description & Details
This is a heavy-duty Staff SRE role focused on keeping regulated digital health and medical software platforms running smoothly and securely in Sunnyvale, CA with a 3-day onsite hybrid schedule. You won't just be pushing code and spinning up pods; you will be deeply embedded in compliance workflows, ensuring that every piece of infrastructure strictly aligns with FDA GxP guidelines and HITRUST standards. If you hate compliance paperwork, this isn't for you—regulatory audits and rigorous documentation are core parts of the gig.
What You'll Actually Be Doing
Your day-to-day will be a mix of traditional infrastructure automation and heavily audited reliability engineering. You'll spend a lot of time writing and refining Infrastructure-as-Code using Terraform, Helm, and Ansible while ensuring those modules bake in strict security and compliance controls right out of the box. You'll also lead the charge on incident lifecycles, debugging cloud networking issues, and tuning Prometheus, Grafana, and Datadog alerts to catch anomalies in protected health information (PHI) pipelines before they turn into major audit flags.
The Core Tech Stack
Kubernetes and Docker are absolute non-negotiables here since you'll be managing scalable containerized workloads across major cloud providers like AWS, GCP, or Azure. You need to live and breathe Infrastructure-as-Code tools like Terraform and Ansible, coupled with strong scripting skills in Python, Bash, or Go to build automated remediation. On top of that, fluency with SIEM tools like Splunk or Datadog Security and observability platforms like Elasticsearch is critical for surviving FDA and HITRUST audits.
Interview Expectations
Expect to be grilled on your ability to balance velocity with strict regulatory constraints, with interviewers likely asking how you would architect a zero-downtime deployment pipeline while maintaining immutable audit logs for an FDA-regulated medical device platform. They want to hear that you understand the nuances of data retention, traceability, and how to structure postmortems that satisfy both engineering best practices and strict compliance mandates.
Application Advice
To get past the ATS, your resume needs to explicitly highlight your experience with healthcare compliance frameworks like HITRUST, HIPAA, and FDA GxP alongside your core DevOps tooling. Don't just list Kubernetes and Terraform; explicitly mention how you built auditable CI/CD pipelines, managed SIEM tools in production, and handled incident response playbooks for regulated environments.