Principal SRE

Job highlights

• 10-15 years in SRE/DevSecOps with leadership experience; expertise in AI-driven automation, AWS multi-region environments, Infrastructure as Code, CI/CD pipelines, incident management, and AWS WAF security
• Lead and empower multi-disciplinary teams; develop automation for build, test, deployment across on-premises and AWS; manage incident response and security resilience; collaborate with product, InfoSec, and SRE teams; contribute to open-source projects

Responsibilities:

• Enlighten, enable and empower a fast-growing set of multi-disciplinary teams across multiple applications and locations.
• Tackle complex development, automation and business process problems, and champion Cvent standards and best practices.
• Ensure the scalability, performance and resilience of security-related systems and processes.
• Work with product development teams, Information Security, Cloud Automation and other SRE teams to build a holistic understanding of security concerns and resolve them effectively and efficiently.
• Identify recurring problems and anti-pattens in development, operational and security processes.
• Develop build, test and deployment automation that seamlessly targets multiple on-premises and AWS regions.
• Give back by working on and contributing to open-source projects.

What we are looking for:

Experience: 10 to 15 years in SRE, DevSecOps or DevOps, with significant time in a lead, staff or principal role.

• AI and automation: a proven track record applying AI, automation and ML to improve reliability,operational efficiency and developer productivity, for example AI-assisted alert triage, event grouping and incident response.
• Deep fluency in AWS across multi-account, multi-region and high-traffic environments, with a strong foundation in distributed systems and Infrastructure as Code (CloudFormation, CDK or Terraform).
• Demonstrable leadership in scaling SRE practices: CI/CD, observability, incident management, RCAs and blameless postmortems.
• Incident management experience: able to act as Incident Commander, write clear incident summaries, drive RCA, and coordinate resolution across teams under pressure.
• Strong understanding of CI/CD pipelines (Jenkins or equivalent), PR-based deployment workflows, and troubleshooting pipeline failures in distributed environments.
• Change management discipline: communicating changes proactively, documenting rollout strategies, and managing phased production deployments with rollback plans.
• Fluent in at least one scripting or programming language such as Python, Go, TypeScript, JavaScript, Ruby or Bash, with solid Linux and networking fundamentals.
• Experience with APM, monitoring and logging tools (Datadog, New Relic, Splunk, Prometheus,Grafana).
• Excellent communication skills and a track record of driving alignment across multi-disciplinary teams, plus a passion for mentoring and making things better for your peers.
• Experience with SDLC methodologies (preferably Agile).

WAF and security exposure (strongly preferred; candidates with hands-on experience are prioritised)

• AWS WAF: rule authoring, rate-based rules, Bot Control integration, rule group management, and multi-product WAF sharing strategies (e.g., managing rule limits across applications sharing the same WebACL).
• DDoS protection with AWS Shield Advanced, including moving endpoints from count to block mode and building observability (Lambda + CloudWatch alarms).
• CDN experience, ideally Amazon CloudFront, as part of a layered security posture with WAF and Shield.
• Bot mitigation strategies, including AWS Bot Control, token-based traffic classification, JA4+ASN fingerprinting, and evaluation of third-party vendors (e.g., Datadome).

Good to Have Skills

• Disaster recovery planning and execution: multi-region failover, DR runbooks, and RTO/RPO management.
• Experience managing API Gateways and ALBs as part of a layered security posture.
• Experience with APM, monitoring and logging tools (Datadog, New Relic, Splunk).
• Good understanding of containerization concepts: Docker, ECS, EKS, Kubernetes.
• Experience managing 3-tier application stacks.
• Understanding of basic networking concepts.
• Familiarity with risk assessment and management concepts and practices.l