Senior Site Reliability Engineer - Edge

In short

In the dynamic landscape of On, our technology thrives much like a spirited runner: always moving, always improving. We are building the foundation that allows our engineering organization to scale, innovate, and deliver "Wow" to athletes worldwide. To power this mission, we are seeking a Senior Site Reliability Engineer (SRE) - Edge who understands that reliability, security, and performance start at the transport layer. You won't just manage a CDN; you will own the architecture and performance of our global entry points, including our Apollo GraphQL API Gateway. You will leverage expert-level knowledge of HTTP/S, TCP, and DNS to optimize for global throughput. This is a hands-on senior role where you will troubleshoot advanced network bottlenecks, design our future content delivery strategy, and act as the technical authority for our Web Application Firewall (WAF), bot mitigation, and standardized service authentication.

Your Mission

• Edge Architecture & API Gateway: Ensure high availability (99.95%+ uptime) for On’s digital platforms and our central Apollo GraphQL Gateway. You will design the "front door" of our infrastructure to be elastic, handling the unique scaling demands of both static web assets and complex federated API traffic.
• Traffic Engineering & Segmentation: Lead the strategic roadmap for our CDN (Cloudflare) and networking stack. You will distinguish between the needs of customer-facing web applications and internal service-to-service communication, implementing optimized routing for each.
• Environment Isolation & Security: Implement and maintain robust guardrails to protect our internal ecosystem. You will be responsible for restricting pre-production environments (e.g., Staging, QA) from the public internet using Zero Trust models, IP-based access controls, or OIDC-integrated tunnels.
• Standardized Auth & Access: Drive the standardization of authentication and authorization at the edge. You will ensure that every request entering our network is consistently validated, providing a secure and seamless identity layer for all microservices.
• Advanced Troubleshooting: Serve as the organization's "Level 3" expert for complex network traffic analysis. You are the one who dives into packet captures, TLS handshakes, and Apollo query latencies to find the root cause of global performance regressions.
• Shielding the Origin: Take full ownership of our WAF and Bot Management strategy. You will design and implement measures to protect our services from DDoS attacks and malicious actors without impacting the legitimate athlete experience.
• Infrastructure as Code (IaC): Treat the network and the gateway as code. You will manage edge configurations and gateway routing using Terraform, ensuring our security rules and routing logic are versioned, tested, and automated.

Your story

• Networking & Gateway Authority: You have a deep understanding of the OSI model and experience managing API Gateways (specifically Apollo GraphQL). You understand how to optimize the "supergraph" for performance at the edge.
• Edge & Security Specialist: Proven experience managing high-traffic CDN architectures (Cloudflare preferred) and a strong grasp of modern security protocols like OIDC, OAuth2, and JWT for standardizing service access.
• Infrastructure Security: You have experience implementing "Zero Trust" architectures and managing private network connectivity to isolate internal environments from public exposure.
• Cloud Native: You are comfortable in modern cloud environments (GCP/AWS) and have experience with Kubernetes (GKE), service mesh networking, and ingress controllers.
• Automation First: You believe that manual changes are technical debt. You are proficient in Terraform and familiar with CI/CD workflows (GitHub Actions) for deploying networking changes safely.
• Collaborative Leader: You enjoy working across teams (Security, DevEx, and Product) to solve horizontal problems. You can translate complex networking and auth concepts into actionable insights for non-experts.

What to expect

We want to set everyone up for success, so here’s the lowdown on how we hire. Our process is a two-way street – bringing you into our culture, while helping us learn how you think.

Our full process can last about eight weeks from application to offer, because we care about getting it right. These steps explain how we usually do things.

Before you get started, feel free to consider if you want to work with us. Strange question? Well, we give people a lot of space to navigate their day-to-day and that style isn't for everyone. We want you to be passionate about what you do and be sure this is the right fit. Because when skills and passion combine – it creates that 'Wow' moment.

• Step One

  It starts with you...

  You'll start by submitting your application to a specific role. We try to keep this step as simple as possible. We do get a lot of applications, but we review them all. If you're a good fit to the role, a recruiter will follow up with you directly. If you didn't receive a reply, or were unsuccessful this time around, we encourage you to look for other possible matches at On.

• Step Two

  Interview with a recruiter

  What ignites your spirit? This is where we’ll start getting to know all about you and what makes you tick – and it’s your first chance to get a feel for our culture. Chatting with a member of our talent team, you’ll learn more about On and how we work. We’ll learn about what motivates you and what you could bring to the team.

• Step Three

  Interview with a hiring manager

  Ready to dig into the details? This second interview will be held with your future manager and will focus on the specifics of the job. Together you’ll delve into your unique skills and experiences and how they could be relevant at On. It's also a time to assess how you might feel working side-by-side. Bring any questions you have about the job, the team or anything else you might like to know – this is an open forum.

• Step Four

  The Case Study

  What's your style? This task will help us understand how you think, face a challenge and give insight into your novel ideas. Designed to give everyone their best shot, your case study is based on something you might typically experience on the job. This is your chance to show us what you’ve got. So express yourself. Be you.

• Step Five

  The Experience Day

  Your first taste of the Oniverse. This is a time to meet some of the people you'll be working closest with. In person or virtually, you'll get a feel for the day-to-day at On and the people who make it happen. You'll chat with a few potential teammates - the conversations will be as equally driven by the role and your experience as by our values. We believe how you do things is just as important as what you do.

• Step Six

  The Result

  Are we a good fit? We’ll get together internally to share our feedback and decide if we’re a match. We know that job searching is a big time investment, so it’s not a decision we take lightly. It’s also time for you to reflect on the experience – are we the right place for you? No matter the outcome, we’ll give you meaningful feedback.

Step One:

It starts with you...

You'll start by submitting your application to a specific role.

We try to keep this step as simple as possible. We do get a lot of applications, but we review them all. If you're a good fit to the role, a recruiter will follow up with you directly. If you didn't receive a reply, or were unsuccessful this time around, we encourage you to look for other possible matches at On.