Smallstep is an internationally distributed, remote-first company. We work reasonable, adaptable hours and utilize technology to accomplish goals asynchronously. We look for folks who are thoughtful, can break down problems, and often work independently. You are trusted to work on your own and to ask for help when blocked. At Smallstep you get the benefit of working with a tight-knit team across many areas and contribute directly to the success of the organization.
Security is a core responsibility for all employees at Smallstep. All roles are expected to strictly adhere to our security policies, procedures, and best practices to protect company assets, customer data, and systems. All employees must remain vigilant, report potential security concerns, and participate in ongoing security training to ensure compliance with industry standards.
We're looking for a Forward Deployed Engineer to embed with customers deploying Smallstep's device identity platform and get them to production. The most common use cases are securing Wi-Fi, browser mTLS, SSH,
VPN and other network based communication using credentials issued by Smallstep’s agent or an MDM. This role sits at the intersection of hardware, software, and the customer relationship: you'll move between a customer's endpoint fleet, their IdP, and Smallstep's own multi-service certificate authority services to get deployments unstuck.
Responsibilities
Diagnosing and resolving technical failures blocking deployments
Acting as the technical escalation point for Technical Account Managers and Customer Success Engineers when a deployment needs deeper engineering involvement
Shipping production Golang code to resolve root causes uncovered during deployment debugging
Building proof-of-concept environments, using Bash and Terraform, and runbooks for new product surfaces ahead of polished UX
Setting day-to-day priorities and assignments for Smallstep's deployment ops engineers
Carrying a formal on-call rotation with defined SLAs