Principal Site Reliability Engineer
Tandem Diabetes Care
Summary
The Principal Site Reliability Engineer (SRE) is responsible for the reliability, availability, and performance of the company's production systems. This role leads day-to-day production support and incident response and progressively replaces reactive firefighting with engineered SRE practice: SLOs, observability, on-call design, runbooks, and automation. It also advances infrastructure automation (Terraform/IaC), CI/CD reliability, disaster recovery, and security and compliance readiness in partnership with cross-functional teams. The role works with a distributed team that includes offshore consulting partners and is expected to raise their capability and independence.
Job description
Production Support & Incident Management
- Leads day-to-day production support: intake, triage, prioritization, escalation, queue health, and change execution.
- Establishes consistent support practices across a distributed team, including shift handoffs, ticket quality standards, and clear ownership of open issues.
- Leads incident management end-to-end: incident command, stakeholder communication, and blameless postmortems with corrective actions tracked to closure.
- Participates in and coordinates response activities for production security incidents, partnering with Security teams to contain threats, restore services, validate controls, and implement corrective actions.
- Owns on-call strategy: rotation design, escalation paths, alert tuning, and tooling (e.g., PagerDuty, New Relic), with explicit goals of reducing alert fatigue and building coverage that works across time zones.
- Participates as a senior escalation tier for high-severity incidents.
- Builds runbooks that standardize response to common failure modes and enable first-line resolution by engineers who did not build the system.
Reliability Engineering & Observability
- Defines and owns SLIs and SLOs for critical services, using them to guide monitoring, alerting, and reliability priorities.
- Drives systemic reduction of MTTD and MTTR through better instrumentation, alerting, diagnostics, and automation.
- Converts recurring support burden into permanent fixes, automation, or documentation rather than absorbing it as ongoing manual work.
- Establishes and maintains technology currency and lifecycle management practices for production platforms, ensuring cloud services, Kubernetes clusters, operating systems, runtimes, and infrastructure components remain supported, secure, and aligned with organizational standards.
- Proactively identifies and mitigates End-of-Life (EOL), End-of-Support (EOS), and technology obsolescence risks.
- Owns business continuity and disaster recovery readiness for production platforms, including backup and recovery strategies, recovery testing, failover capabilities, recovery runbooks, and adherence to defined RTO/RPO objectives.
Infrastructure Automation & CI/CD
- Leads infrastructure automation with Terraform, ensuring infrastructure is version-controlled, modular, reusable, and auditable, working within and improving existing patterns where they are sound.
- Eliminates toil through automation, reducing manual, repetitive operational work across the team.
- Adds reliability guardrails to CI/CD pipelines (automated rollback, change-risk checks, progressive delivery) with the teams that own them.
Operational Governance and Compliance
- Maintains production systems in accordance with applicable regulatory and compliance requirements, ensuring audit readiness and the ongoing effectiveness of access management, change management, logging, vulnerability remediation, patch management, and other operational controls.
- Maintains documentation and evidence supporting business continuity and disaster recovery controls, including recovery testing results, remediation plans, and audit artifacts.
- Partners with Security, Quality, and Compliance teams to maintain regulatory compliance, support internal and external audits, and drive timely resolution of audit findings and remediation activities.
Leadership, Mentorship & Collaboration
- Actively grows the capability of SRE and DevOps engineers, including consulting-partner engineers, through pairing, design and code review, and incident debriefs.
- Creates conditions in which junior and contract engineers raise concerns and disagree openly, recognizing that silent agreement is a production risk.
- Communicates in a documentation-first manner suited to a distributed, multi-time-zone team, so context is durable rather than held by one person.
- Partners with software engineering, QA, and architecture to embed reliability and operability into the development lifecycle rather than only after incidents.
Contributing Responsibilities
- Informs capacity planning and scaling strategy with the Test team and introduces proactive resilience testing such as game days once baseline support and observability are stable.
- Partners with application, architecture, and business stakeholders to align business continuity and disaster recovery capabilities with application requirements and recovery objectives.
- Supports cloud cost optimization: rightsizing, reserved capacity, and observability spend governance.
- Ensures work complies with company policies, including Privacy/HIPAA and other regulatory, legal, and safety requirements.
What You'll Need
- Demonstrated experience leading production support and incident management for production systems, including incident command during high-severity events.
- Strong grounding in SRE principles: SLIs/SLOs, blameless postmortems, toil reduction, and treating reliability as an engineering discipline rather than a purely operational function.
- Demonstrated experience owning on-call strategy, including rotation design, alert tuning, and escalation.
- Expertise with Terraform or comparable IaC at scale: module design, state management, and policy-as-code guardrails.
- Hands-on experience building CI/CD pipelines with reliability guardrails using tools such as GitHub Actions, Octopus Deploy, or Azure DevOps.
- Deep experience with at least one major cloud platform (AWS, Azure, or GCP) and with containerization and orchestration (Docker/Kubernetes).
- Working knowledge of observability tooling (e.g., Prometheus, Grafana, Datadog, CloudWatch, ELK/OpenSearch) and using it to drive SLO-based alerting.
- Experience designing and testing disaster recovery, including backup/restore, failover, and RTO/RPO validation.
- Working knowledge of cloud security and compliance practices (IAM, network segmentation, encryption, vulnerability and patch management) and cloud cost optimization.
- Proficiency in at least one scripting or programming language (e.g., Python, Go, Bash) for automation and tooling.
- Experience in FDA and ISO regulated industries and with agile methodologies preferred.
Extra Awesome
- B.S. in Computer Science or an equivalent combination of education and applicable job experience, including technical school training and certifications in networks, servers, and cloud infrastructure; demonstrated production experience weighs more heavily than degree.
- Relevant cloud certifications (e.g., AWS/Azure/GCP Professional or Architect level) preferred.
- 10+ years in Site Reliability Engineering, DevOps, or infrastructure engineering, including leading production support, incident management, and postmortem practice; managing production cloud infrastructure as code at scale; operating and improving CI/CD pipelines in a production environment; designing, executing, and testing disaster recovery plans; partnering with security teams on production security and compliance posture.
- 2+ years mentoring or technically leading other engineers, including engineers who are remote, offshore, or contracted through a partner organization.
Requirements
- Demonstrated experience leading production support and incident management for production systems, including incident command during high-severity events
- Strong grounding in SRE principles: SLIs/SLOs, blameless postmortems, toil reduction
- Demonstrated experience owning on-call strategy, including rotation design, alert tuning, and escalation
- Expertise with Terraform or comparable IaC at scale: module design, state management, and policy-as-code guardrails
- Hands-on experience building CI/CD pipelines with reliability guardrails using tools such as GitHub Actions, Octopus Deploy, or Azure DevOps
- Deep experience with at least one major cloud platform (AWS, Azure, or GCP)
- Experience with containerization and orchestration (Docker/Kubernetes)
- Working knowledge of observability tooling (e.g., Prometheus, Grafana, Datadog, CloudWatch, ELK/OpenSearch) and using it to drive SLO-based alerting
- Experience designing and testing disaster recovery, including backup/restore, failover, and RTO/RPO validation
- Working knowledge of cloud security and compliance practices (IAM, network segmentation, encryption, vulnerability and patch management) and cloud cost optimization
- Proficiency in at least one scripting or programming language (e.g., Python, Go, Bash) for automation and tooling
- Experience in FDA and ISO regulated industries and with agile methodologies preferred
- B.S. in Computer Science or an equivalent combination of education and applicable job experience
- Relevant cloud certifications (e.g., AWS/Azure/GCP Professional or Architect level) preferred
- 10+ years in Site Reliability Engineering, DevOps, or infrastructure engineering
- 2+ years mentoring or technically leading other engineers, including engineers who are remote, offshore, or contracted through a partner organization
Benefits
- Medical, Dental & Vision
- Health Savings Account
- Flexible Spending Account
- 11 Paid Holidays
- 20 Days PTO
- 401(k) Matching
- Employee Stock Purchase Plan
- Bonus
Company overview
Tandem Diabetes Care is a global medical device company specializing in advanced insulin delivery systems and diabetes management technologies. Founded in 2006 and headquartered in San Diego, California, the company has established itself as a leader in automated insulin delivery systems. Tandem's innovative product portfolio includes the Tandem Mobi system and t:slim X2 insulin pump, both featuring Control-IQ advanced hybrid closed-loop technology that significantly reduces the burden of diabetes management. The company's approach combines medical device expertise with consumer electronics design principles, creating user-friendly devices that have made Tandem the #1 recommended insulin pump brand among people living with diabetes for four consecutive years. With a workforce of 1,001-5,000 employees, Tandem operates globally, developing integrated solutions that connect insulin pumps with mobile applications and cloud-based platforms to provide comprehensive diabetes care. The company's mission focuses on creating new possibilities for patients, their loved ones, and healthcare providers through continuous innovation in diabetes technology.