Build observability as a platform: Design the metrics, logs, and traces pipelines (Datadog, OpenTelemetry) that give every team a clear view of their services. Define SLOs, build the alerting and dashboards behind them, and make reliability measurable.
Write production software: Build the services, controllers, and CLIs (Go, Python, or TypeScript) that automate traffic management, telemetry collection, and compliance evidence, so that platform gaps are closed with code rather than runbooks.
Apply AI to operations: Use AI-assisted development tooling daily, and build AI-driven automation into the platform: anomaly detection on telemetry, automated triage and remediation of common incidents, and agents that generate and validate compliance artifacts.
Run the platform like an SRE: Lead incident response, blameless postmortems, and capacity planning for the networking and observability services. Reduce toil systematically and own the reliability roadmap for your area.
Drive platform migrations: Lead the engineering work that moves internal teams onto centralized, compliant traffic and observability pipelines, from design through cutover.
Engineer for compliance: Translate FedRAMP controls (NIST SP 800-53) for network security, audit logging, and monitoring into automated, testable implementations, and partner with security on continuous monitoring (ConMon) and assessment readiness.
Mentor and multiply: Mentor mid-level engineers on SRE practices, infrastructure as code, and compliance-aware design, and raise the engineering bar across the team.
What we’re looking for
Experience: 8+ years of software, infrastructure, or site reliability engineering experience, including at least 3 years operating within a FedRAMP-authorized or similarly regulated environment (AWS GovCloud experience is a plus).
Software engineering proficiency: Strong programming fundamentals and a track record of shipping production software in Go, Python, or TypeScript to build platform services and automation. You write tests, review code, and care about maintainability.
Networking depth: Production experience with high-throughput ingress/egress, L4/L7 routing, DNS, TLS, and container networking at scale, using tools like Istio, Kong, Cloudflare, and Kubernetes CNIs.
Observability depth: Hands-on experience designing telemetry pipelines and SLO-based alerting with Datadog, OpenTelemetry, Prometheus, or similar, and using that data to run incident response and drive reliability improvements.
Kubernetes expertise: Extensive experience architecting, operating, and hardening Kubernetes clusters, including policy enforcement (e.g., OPA/Gatekeeper, Kyverno) and secrets management.
Infrastructure as code: Working fluency with Terraform (or similar), GitOps workflows, and CI/CD pipelines. You expect every change to the platform to go through code review and automation.
SRE practice: Experience with on-call ownership, incident command, postmortems, and systematic toil reduction.
AI tooling: Comfort using AI-assisted development tools in daily work, and interest in applying AI to operations and automation.
Nice to Have
Experience with IAM architecture (Okta, SAML/OIDC, zero-trust) and FIPS 140-2/140-3 validated cryptography in practice.
Experience with secrets management platforms operating in FIPS mode (e.g., HashiCorp Vault).
Familiarity with FedRAMP Rev 5 requirements, STIG application, or CIS benchmark enforcement at scale.
Experience building AI agents or ML-driven automation for operations (AIOps).
Security or platform certifications such as CKA/CKS, AWS Certified Security - Specialty, or CISSP.
Additional Information
Base Pay Range
168,560.00 - 231,770.00 USD Annual
This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation. Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate’s job-related skills, experience, education or training, and location.
This position requires access to technology, software, and data that is controlled or restricted under U.S. law, regulation, executive order, or government contract.
For Los Angeles County (unincorporated) Candidates
Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.
