About Pathlock

Pathlock is a leader in application security, access governance, and compliance automation. Our cloud solutions help organizations secure critical applications, mitigate risk, and enforce policies across diverse IT environments.

Our platform uses modern cloud-native architecture across Azure, AWS, Kubernetes, enterprise database services, automation, security, and observability. The Database Reliability Engineer combines strong database engineering with a broader DevOps and production-operations mindset.

Role Mission

Own the reliability, performance, scalability, security, and operational health of Pathlock’s database platforms. Apply SRE and DevOps principles to databases by combining deep SQL Server and cloud database expertise with observability, automation, Infrastructure as Code, incident management, capacity planning, and cost optimization.

This role is part of the DevOps team. The engineer will contribute to database reliability and to the broader cloud platform rather than operate as a standalone traditional DBA.

How This Role Operates

This is not a traditional DBA position. Routine database operations must be engineered as reusable, version-controlled, peer-reviewed, observable, and auditable capabilities. Production work should run through pipelines, APIs, automation, and Infrastructure as Code rather than depend on manual commands in SQL Server Management Studio (SSMS).

SSMS and interactive SQL remain valid tools for investigation, execution-plan analysis, troubleshooting, and exceptional situations. They are not the normal execution mechanism for recurring production work. A one-off script may resolve an immediate need, but the expected outcome is a reusable workflow that reduces future execution from days to minutes or hours.

What You Will Own

- Own database availability, performance, capacity, scalability, backup, recovery, security, and operational health across production and non-production environments.
- Define and maintain meaningful database SLIs, SLOs, alerts, dashboards, and operational thresholds.
- Monitor CPU, memory, I/O, storage, transaction-log growth, connection pools, query latency, blocking, deadlocks, waits, database growth, and workload trends.
- Use Query Store, execution plans, wait statistics, Extended Events, and workload data to identify high-CPU, high-I/O, long-running, and frequently executed queries.
- Diagnose and remediate indexing problems, stale statistics, parameter sniffing, cardinality-estimation issues, locking, blocking, deadlocks, inefficient joins, scans, and poor application data-access patterns.
- Partner with engineering teams to improve SQL, schemas, migrations, connection management,



transaction behavior, and application-to-database performance.
- Automate database provisioning, configuration, patching, maintenance, deployments, backup validation, restore testing, access management, compliance evidence, and operational checks.
- Implement database changes through version-controlled code, peer review, CI/CD pipelines, controlled promotion, automated validation, and tested rollback strategies.
- Plan and validate high availability, disaster recovery, failover, backup integrity, restore procedures, retention, RPO, RTO, and business-continuity capabilities.
- Participate in the DevOps on-call rotation, lead database-related incident response, produce evidence-based RCAs, and implement corrective and preventive actions.
- Optimize Azure and AWS database services for performance, resilience, security, licensing, and cost.
- Contribute to broader DevOps work involving Kubernetes, cloud infrastructure, observability, CI/CD, Infrastructure as Code, secrets management, and production readiness.
- Maintain clear runbooks, architecture documentation, operational standards, and automated validation procedures.

Minimum Qualifications Candidates must meet every item below to move forward.

- Experience: 3 to 5 years in database engineering, database reliability, SRE, DevOps, or production platform operations.
- SQL Server (3+ years in production): Has personally diagnosed and resolved production performance issues using Query Store, execution plans, indexing, statistics, and wait analysis; resolved locking, blocking, and deadlocks; and performed backup, restore, and recovery.
- Managed cloud databases (2+ years): Has operated at least one production workload on Azure SQL Database, Azure SQL Managed Instance, Azure SQL Elastic Pools, or Amazon RDS for SQL Server.
- Automation (2+ years): Has automated recurring operational work using PowerShell, Python, or Bash, together with SQL tooling, APIs, or orchestration frameworks. Can describe at least one automation they built that replaced a manual production procedure. Routine work is delivered as reusable engineering, not manual changes through SSMS.
- CI/CD and Infrastructure as Code (1+ year each): Has delivered changes through Git and GitHub Actions, Azure DevOps, or Jenkins, including approvals,



validation, environment promotion, and rollback. Has written and maintained Terraform and ARM or Bicep, including reusable modules, remote state, policy enforcement, and peer-reviewed changes.
- Observability: Has built or maintained database dashboards and alerts using Grafana, Prometheus, Azure Monitor, Application Insights, Elastic, or native cloud database telemetry.
- Resilience and platform: Has executed at least one failover, disaster-recovery test, or full restore test, and can explain RPO/RTO, backup integrity, capacity planning, and database security. Has working knowledge of Kubernetes, Docker, cloud networking, secrets management, least privilege, audit trails, and compliance controls.
- Communication and availability: Excellent written and spoken English. Based in Mexico and available to collaborate during US business hours.

Preferred Qualifications Not required, but each item met strengthens a candidate who already meets every minimum qualification.

- SaaS scale: Has operated large, multi-tenant SaaS database environments with strict availability, security, and compliance requirements.
- Multi-cloud: Has run production database workloads on both Azure and AWS, including Azure SQL Elastic Pools, Azure SQL Managed Instance, and Amazon RDS.
- Database deployment tooling: Has used Flyway, Liquibase, DbUp, SQLPackage, or DACPAC in a CI/CD pipeline.
- Automation at scale: Has automated access, maintenance, backup validation, restore testing, patching, or compliance evidence across many databases or tenants, not just a single server.
- Additional platforms: Production experience with PostgreSQL, MySQL, ClickHouse, or another database platform in addition to Microsoft SQL Server.
- Certifications: A current Microsoft Azure, AWS, Kubernetes, DevOps, or database-related certification.
- Cross-platform troubleshooting: Has troubleshot application-to-database performance across Windows-based, Linux-based, and containerized workloads.

What Success Looks Like

- Database risks are identified through telemetry and capacity trends before they become customer-facing incidents.
- Recurring manual procedures are replaced by reliable, documented, version-controlled automation.
- Performance investigations quantify the queries, waits, resources, and application behaviors driving the problem.
- Backup, restore, failover, and disaster-recovery capabilities are regularly tested rather than assumed.
- Database changes are repeatable, reviewable, auditable, and safely promoted across environments.
- The engineer is effective across both database reliability and the broader DevOps platform.

📌 Database Reliability Engineer (México)
🏢 Pathlock
📍 México