As a Site Reliability Engineer with strong networking skills in our Cloud Infrastructure (SRE) team, you help the team own the networks that keep Loft running: cloud networking, VPN and site-to-site connectivity, segmentation, and routing across our offices, test equipment, and ground stations. You keep them reliable, observable, and secure as we scale. You coordinate with IT on the network components that interface with the physical infrastructure used by employees. You coordinate with the Test-Infrastructure team to ensure our test equipment is securely accessible.
You’ll work the way an SRE team works: defining reliability in measurable terms (SLOs for connectivity and ground-station availability), instrumenting the systems that prove it, managing the network as code, and automating away toil so on-call load doesn’t grow with the fleet.
Beyond the network, you’ll help the SRE team across its broader scope by participating in all the daily work just like a regular SRE: platform reliability and expansion, incident response, planning and user support.
About this role:
- Participate in the design and implement Loft’s network architecture; cloud networking, VPN/site-to-site, segmentation, and routing across offices, ground stations, and test equipment
- Tighten the network security posture: segmentation, access, and connectivity hardening
- Manage the network as code: IaC provisioning, CI/CD, and GitOps
- Define SLOs for connectivity and ground-station availability, and own the observability (metrics, logs, tracing) that measures them; Grafana-centric stacks a plus
- Investigate and resolve reliability issues with root-cause analysis and durable fixes; reduce operational toil through automation
- Contribute to the SRE team’s broader reliability and incident-response work, fostering the SatDevOps culture that power Loft’s DNA
Must haves:
- 4–5 years in network engineering, with deep hands-on networking: routing, VPN/site-to-site, segmentation, DNS, firewalling
- Hands-on Software-Defined Networking: comfortable managing networks programmatically / as code rather than appliance-by-appliance (everything we run is IaC)
- Strong public-cloud networking experience, ideally GCP (VPCs, peering, hybrid connectivity)
- Comfortable operating on a Kuburnetes platform (k8s, Docker) and occasionally writing code
- Infrastructure-as-Code (Terraform or similar) and a CI/CD-driven, GitOps workflow
- An SRE mindset: SLOs, observability, and reducing toil through automation
- Ability to debug connectivity issues in a complex, hybrid network environment
- Degree in Computer Science or a related field, or equivalent practical experience
Nice to haves:
- Network certifications (CCNP or similar)
- Hands-on experience with GitOps frameworks (ArgoCD, FluxCD)
- Interest or experience in FinOps and cost-optimized architectures
- Familiarity with security practices: vulnerability scanning, threat detection, risk mitigation
- Understanding of orchestration in resource-constrained environments, like space systems
Some of Our Awesome Benefits:
- Equity, we want you to have an active role in our success
- Up to 35 days of Paid Time Off (vacations & RTT ) and flexible working hours, we want you to be at your best
- Health and life insurance, we care about your health
- Lunch Vouchers, because let’s be honest, we love food! (we even have a slack channel about it #loft-gourmand)
- Cross-office travel opportunities between San Francisco, Colorado, and Toulouse to learn from our differences
- Company and team off-sites and many other events to work & celebrate together
- Relocation assistance to Toulouse when applicable