About the position
Salt Security protects APIs for large enterprises. Many of them will not send their traffic to anyone else's cloud, so they run our platform themselves - inside their own data centres and their own cloud accounts. The Edge team builds and ships what those customers run: the container images, the Helm charts, and the multi-region delivery that puts it all in their hands.
To learn more about Salt Security’s R&D, tap here!
What will you do?
Build and maintain the Helm charts and container images that enterprises install, and keep them correct across the versions customers are actually running.
Own the container supply chain: multi-architecture builds, base-image and dependency currency, vulnerability remediation, and proving a fix genuinely reached the shipped artifact rather than just the source.
Build and maintain the CI/CD that produces all of it.
Collaborate with internal teams and field engineers to ensure seamless integration and deployment of applications.
Use tools like Helm charts, Terraform, and GitOps to automate and manage deployments in cloud environments.
Develop edge applications for cloud environments, primarily using Go.
Who are you?
3-5 years in Platform, DevOps, or Infrastructure engineering.
Hands-on experience operating Kubernetes in production environments - running real workloads and debugging live cluster failures, not only using managed services.
Experience authoring or substantially reworking Helm charts, beyond consuming existing ones.
Hands-on experience designing and building CI/CD pipelines from scratch, not only maintaining existing ones.
Hands-on experience with Cloud providers, with the security and operational complexity that implies.
Excellent communication skills, with the ability to collaborate across teams and customer environments.
Strong problem-solving and troubleshooting skills, particularly with distributed systems and cloud infrastructure.
Counts for a lot: having shipped anything a customer installs and runs themselves - on-prem software, an appliance, an agent, an air-gapped install, a released library you then had to support.
