Wanna join the adventure?
As a Site Reliability Engineer with strong networking skills in our Cloud Infrastructure (SRE) team, you help the team own the networks that keep Loft running: cloud networking, VPN and site-to-site connectivity, segmentation, and routing across our offices, test equipment, and ground stations. You keep them reliable, observable, and secure as we scale. You coordinate with IT on the network components that interface with the physical infrastructure used by employees. You coordinate with the Test-Infrastructure team to ensure our test equipment is securely accessible.
You’ll work the way an SRE team works: defining reliability in measurable terms (SLOs for connectivity and ground-station availability), instrumenting the systems that prove it, managing the network as code, and automating away toil so on-call load doesn’t grow with the fleet.
Beyond the network, you’ll help the SRE team across its broader scope by participating in all the daily work just like a regular SRE: platform reliability and expansion, incident response, planning and user support.
About this role:
Participate in the design and implement Loft’s network architecture; cloud networking, VPN/site-to-site, segmentation, and routing across offices, ground stations, and test equipment
Tighten the network security posture: segmentation, access, and connectivity hardening
Manage the network as code: IaC provisioning, CI/CD, and GitOps
Define SLOs for connectivity and ground-station availability, and own the observability (metrics, logs, tracing) that measures them; Grafana-centric stacks a plus
Investigate and resolve reliability issues with root-cause analysis and durable fixes; reduce operational toil through automation
Contribute to the SRE team’s broader reliability and incident-response work, fostering the SatDevOps culture that power Loft’s DNA
Must haves:
4–5 years in network engineering, with deep hands-on networking: routing, VPN/site-to-site, segmentation, DNS, firewalling
Hands-on Software-Defined Networking: comfortable managing networks programmatically / as code rather than appliance-by-appliance (everything we run is IaC)
Strong public-cloud networking experience, ideally GCP (VPCs, peering, hybrid connectivity)
Comfortable operating on a Kuburnetes platform (k8s, Docker) and occasionally writing code
Infrastructure-as-Code (Terraform or similar) and a CI/CD-driven, GitOps workflow
An SRE mindset: SLOs, observability, and reducing toil through automation
Ability to debug connectivity issues in a complex, hybrid network environment
Degree in Computer Science or a related field, or equivalent practical experience
Nice to haves:
Network certifications (CCNP or similar)
Hands-on experience with GitOps frameworks (ArgoCD, FluxCD)
Interest or experience in FinOps and cost-optimized architectures
Familiarity with security practices: vulnerability scanning, threat detection, risk mitigation
Understanding of orchestration in resource-constrained environments, like space systems
Some of Our Awesome Benefits:
Equity, we want you to have an active role in our success
Up to 35 days of Paid Time Off (vacations & RTT ) and flexible working hours, we want you to be at your best
Health and life insurance, we care about your health
Lunch Vouchers, because let’s be honest, we love food! (we even have a slack channel about it #loft-gourmand)
Cross-office travel opportunities between San Francisco, Colorado, and Toulouse to learn from our differences
Company and team off-sites and many other events to work & celebrate together
Relocation assistance to Toulouse when applicable
