Site Reliability Engineer
Thales is hiring a Site Reliability Engineer. Level rates it ; you can apply on Thales.
Level's read on this job
- On Level's scale, this role is Little AI ●○○○: aI is not part of the work.
- Tools and skills the posting cites include AWS, Google Cloud and Kubernetes.
- Level classifies it as a senior role.
- Level lists 3,600+ other open roles at Thales.
AI in this role
Design, operate, and secure regulated sovereign cloud environments across AWS and GCP with strong SRE and DevSecOps practices.
We are seeking a skilled DevSecOps / Sovereign Cloud Engineer with 5-10 years of experience to design, operate, and secure regulated cloud environments across AWS and GCP. The role combines cloud operations, security engineering, and SRE practices, including Kubernetes management, Infrastructure as Code (Terraform), CI/CD automation (Git/GitLab), and secrets management (HashiCorp Vault). The ideal candidate will drive security incident response, platform reliability, observability (Datadog), and 24x7 incident management while embedding security-by-design principles, automation-first practices, and continuous improvement into sovereign cloud platforms. Strong expertise in cloud security, networking fundamentals, compliance-driven environments, and cross-functional incident leadership is essential.
A week in the life of an DevSecOps Engineer:
- Deploy, manage and maintain the organization’s Sovereign Cloud strategy, ensuring compliance with regulatory and data residency requirements on AWS/GCP public cloud.
- Managing and operating Kubernetes clusters including upgrades, scaling, and workload optimization.
- Security Incident Response & Risk Mitigation – Investigate, analyze, and remediate cloud security incidents, proactively identifying and mitigating vulnerabilities within AWS environments.
- Secure Cloud Strategy & Continuous Improvement – Support and enhance the organization’s AWS cloud strategy by embedding security best practices and continuously improving the cloud security posture.
- Security Automation & DevSecOps Enablement – Implement and tune security tools, automate policy-driven responses, and advocate DevSecOps practices to ensure secure-by-design cloud operations.
- Implementing and managing Infrastructure as Code (Terraform) to provision, modify, and secure cloud resources.
- Maintaining and optimizing CI/CD pipelines using Git/GitLab, ensuring secure and automated deployments.
- Managing secrets and secure access using HashiCorp Vault, including token lifecycle, access policies, and secrets rotation.
- Troubleshooting complex infrastructure, networking, container, and performance issues across distributed systems.
- Observability & Reliability Engineering – Monitor system health and performance using Datadog, define and manage SLIs/SLOs, and drive continuous reliability improvements aligned with SRE principles.
- Incident Management & Operational Governance – Manage 24x7 alerting and incident response through PagerDuty, perform root cause analysis (RCA), and actively contribute to incident, problem, and change management processes.
- Cloud Security & Performance Optimization – Conduct proactive system hardening, vulnerability remediation, performance tuning, and capacity planning across cloud environments.
- Automation & Continuous Improvement – Develop automation using Python/Bash/Terraform/Ansible to reduce manual effort, improve operational efficiency, and strengthen platform resilience.
Knowledge, Skills and Experience:
To succeed in this role, you must have:
- 4–5 years of hands-on experience in DevSecOps, SRE roles.
- Proven hands-on expertise managing Kubernetes clusters
- Experience with Terraform (IaC) Deployment, Git/Gitlab for CI/CD and version control for best practices
- Experience working with HashiCorp Vault, Terraform, Datadog, Pagerduty, Confluence etc
- Strong understanding of Cloud Security principles (IAM, encryption, network security, container security, vulnerability management).
- Experience in incident management, change management, and root cause analysis processes.
- SRE & Automation Expertise – Strong understanding of SRE principles (SLIs, SLOs, error budgets, reliability metrics) with hands-on scripting experience in Python and/or Bash to drive automation-first practices.
- Networking & Compliance Knowledge – Solid grasp of networking fundamentals (TCP/IP, DNS, load balancing, firewalls, VPNs, private endpoints) with experience or exposure to regulated and compliance-driven environments.
- Leads incident bridges during P1/P2 outages, coordinating cross-functional teams and driving timely resolution with clear RCA.
- Maintains a strong customer and business-focused mindset while prioritizing tasks.
- Cloud certifications in a plus
- Linux, Kubernets, Terraform, Ansible, Google Cloud knowledge is mandatory.
How we rate this
Site Reliability Engineer at Thales rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- Tell me about a project where devsecops was part of your work. What did you do?
- Tell me about a project where cloud security was part of your work. What did you do?
- Tell me about a project where sre was part of your work. What did you do?
- Tell me about a project where infrastructure as code was part of your work. What did you do?
- Walk me through how you've used AWS in your day-to-day work.
Adapt your resume
- List these exact terms on your resume: Devsecops, Cloud Security, Sre, Infrastructure As Code, and AWS. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new software engineering jobs by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Software Engineering roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step