Staff DevOps Engineer

Identity Digital is building DNS-native identity infrastructure for AI agents and other non-human identities through a managed service designed for enterprise availability. The Staff DevOps Engineer will own the cloud infrastructure architecture, build and operate the production platform, establish reliability and operational practices, and guide infrastructure, security, delivery, and observability standards as the team grows.

Responsibilities:

• Own the technical direction for our cloud infrastructure: the architecture across services, build-versus-buy decisions, and the standards other engineers build against
• Design, build, and operate the cloud-native platform behind our multi-tenant managed service, including tenant isolation, capacity planning, and disaster recovery
• Own production readiness for enterprise launch: SLOs and error budgets, runbooks, failover testing, and business continuity
• Run DNS as production infrastructure: zone operations, DNSSEC, registrar and provider integrations, and failover across providers. DNS is the product here, not plumbing
• Operate the signing and certificate infrastructure behind agent identity in partnership with security engineering: key custody, rotation, signing-path availability, and certificate lifecycle at scale
• Build the delivery pipeline for an AI-assisted engineering team, where CI is the enforcement boundary: policy-as-code, required checks, and the guardrails that make machine-authored contributions safe to merge
• Ship releases with integrity for everything we publish: signed artifacts, provenance, and supply-chain controls for our open-source SDKs and tools
• Instrument the platform with logging, metrics, and tracing so problems are found before customers notice them
• Automate the infrastructure side of audit readiness: audit logging and retention, access reviews, and evidence collection that runs itself
• Keep cloud spend visible and healthy as usage grows, including unit economics per tenant and per workload
• Multiply the team: review designs across engineering, mentor engineers on operational practice, and help set the hiring bar as we grow
• Stand up the on-call practice, act as incident commander when production breaks, and drive a blameless postmortem culture
• Actively model and promote Identity Digital’s core values through day-to-day interactions, behaviors, and decision-making
• Other duties as assigned

Requirements:

• • 10+ years in DevOps, site reliability, or platform engineering, including work at principal or staff scope: setting direction across teams rather than executing inside one
• • Bachelor's degree in a relevant field or equivalent experience
• • Deep experience with cloud-native architectures and services (AWS/GCP preferred)
• • Strong proficiency with Kubernetes, Terraform, and modern infrastructure-as-code practice
• • Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, ArgoCD, or similar)
• • Strong scripting or programming skills in Python, Go, or TypeScript/JavaScript
• • Experience building observability stacks (Prometheus, Grafana, ELK/EFK, OpenTelemetry)
• • Working depth in DNS operations: zone management, DNSSEC, and how registrars, resolvers, and authoritative providers behave in production
• • Solid understanding of PKI, secrets management, and certificate workflows, including how these systems fail under attack
• • Experience running multi-tenant SaaS and distributed systems in production, including incident command
• • A track record of raising the operational bar of the teams around you through standards, design review, and mentoring
• • Ability to travel as needed
• • Ability to work effectively across time zones on a distributed team
• • Remote (US) with occasional travel for team gatherings and industry events. This role participates in on-call for production systems; you will build the rotation you join
• • Prolonged periods of sitting at a desk and working on a computer
• • Must be able to lift up to 15 pounds at times
• • Experience operating signing infrastructure or a certificate authority at scale: HSM or KMS key custody, key ceremonies, rotation without downtime
• • Supply-chain security in practice: SLSA, sigstore/cosign, reproducible builds, and provenance for published artifacts
• • Familiarity with agentic AI systems and their operational surface: machine-scale request patterns, short-lived credentials, egress control, and the OWASP Agentic and NHI Top 10
• • Infrastructure-side experience with SOC 2 or a comparable audit program, especially control automation and evidence collection
• • Experience taking a product from prototype to general availability on a small team
• • Contributions to open-source infrastructure or operations tooling