SRE/DevOps Engineer

📋 Job Overview

We are building a SRE-DevOps team for the GrayKey cloud platform: the services that license, provision, and support GrayKey and VeraKey devices used by law enforcement and government agencies around the world. You will own day-to-day reliability during Pacific and Mountain hours, extending the team's coverage well into the Eastern evening. As a result you will often be the person on point: you need to work independently, make sound calls, and hand off clearly.

🏢 About Magnet Forensics

Magnet Forensics is a global leader in the development of digital investigative software that acquires, analyzes, and shares evidence from computers, smartphones, tablets, and IoT-related devices. We are continually innovating so our customers can deploy advanced and effective tools to protect their companies, communities, and countries. Serving thousands of customers globally, our solutions are playing a crucial role in modernizing digital investigations, helping investigators fight crime, protect assets, and guard national security. With employees based around the world, Magnet Forensics has been expanding our global presence. As a part of Magnet Forensics, you can expect to make a difference in the world, no matter what role you play. You’ll be supported through learning and development, not to mention an incredible team with unbelievable talent and integrity.

🎯 The Role

The focus of this role is SRE and infrastructure operations responsibility. You will write automation and code (AI-assisted tooling is encouraged), but your core strength is keeping production AWS environments, identity, and network security healthy, secure, and well documented.

✅ Key Responsibilities

• Monitoring and incident response: watch alerts and dashboards during your hours, triage incidents, resolve what you can, and escalate with clear context when you cannot.
• Patching and vulnerability remediation: keep Linux hosts, containers, and dependencies current, and work scanner findings through to closure.
• Network and access: manage VPCs, security groups, VPN, DNS, TLS certificates, IAM, and Fortigate firewalls; diagnose subnet and security-group connectivity issues. Cloud changes go through Terraform and GitLab merge requests.
• Identity: administer Okta, including SAML/OIDC app integrations, user and application provisioning, group-based access, and MFA troubleshooting.
• Kubernetes operations: support EKS clusters (node groups, upgrades, scaling, cluster health), troubleshoot workloads (pods, deployments, services, ingress, PVCs), and resolve Argo CD sync and deployment errors.
• Backup and recovery: maintain backup strategies for critical systems and data, and regularly test restore procedures.
• Runbooks and documentation: write and maintain the operating procedures the team relies on.
• Cost and automation: track AWS spend, remove waste, and script away repetitive toil.
• Compliance support: gather evidence and maintain controls for customer and audit requirements.
• Team practice: take part in code reviews, planning, and post-incident reviews.
• Travel: less than 5%.

📌 Required Qualifications

• 3+ years in an SRE, DevOps, or Linux/cloud systems administration role.
• Hands-on AWS experience: VPC networking, IAM, EC2, RDS, and Lambda.
• Proficiency in Linux administration and scripting in Python and Bash.
• Infrastructure as Code with Terraform.
• Working experience with Kubernetes (EKS), Argo CD, Helm, GitLab CI/CD, and Datadog (or comparable observability tooling).
• Hands-on Okta administration: SAML/OIDC integrations, provisioning, and MFA.
• Practical security experience: least-privilege IAM, secrets handling, patch management, and network segmentation. Certifications such as CompTIA Security+, CySA+, or AWS Certified Security – Specialty count toward this.
• Solid networking fundamentals: TCP/IP, DNS, TLS, routing, firewalls, and VPNs.
• Clear written communication and a track record of working independently across time zones.
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• Must reside in the United States or Canada & be located within the Pacific or Mountain Time Zone.

⭐ Desirable Experience

• Exposure to SOC 2, CJIS, or FedRAMP compliance work.
• Experience with Active Directory / Azure AD (Entra ID).
• Experience with Ansible, Docker, PostgreSQL, and Redis.
• Experience using AI coding assistants for infrastructure and automation work.
• Background in IT operations or on a security-focused team.

🎁 Benefits

The Compensation range is for the primary location for which the job is posted.

🛂 Visa & Eligibility

Candidates must reside in The United States or Canada and be located within the Pacific or Mountain Time Zone.