Forward Deployed Engineer

Smallstep is an internationally distributed, remote-first company. We work reasonable, flexible hours and utilize technology to accomplish goals asynchronously. We look for folks who are thoughtful, can break down problems, and often work independently. You are trusted to work on your own and to ask for help when blocked. At Smallstep you get the benefit of working with a tight-knit team across many areas and contribute directly to the success of the organization.Security is a core responsibility for all employees at Smallstep. All roles are expected to strictly adhere to our security policies, procedures, and best practices to protect company assets, customer data, and systems. All employees must remain vigilant, report potential security concerns, and participate in ongoing security training to ensure compliance with industry standards.We're looking for a Forward Deployed Engineer to embed with customers deploying Smallstep's device identity platform and get them to production. The most common use cases are securing Wi-Fi, browser mTLS, SSH, VPN and other network based communication using credentials issued by Smallstep’s agent or an MDM. This role sits at the intersection of hardware, software, and the customer relationship: you'll move between a customer's endpoint fleet, their IdP, and Smallstep's own multi-service certificate authority services to get deployments unstuck.ResponsibilitiesDiagnosing and resolving technical failures blocking deploymentsActing as the technical escalation point for Technical Account Managers and Customer Success Engineers when a deployment needs deeper engineering involvementShipping production Golang code to resolve root causes uncovered during deployment debuggingBuilding proof-of-concept environments, using Bash and Terraform, and runbooks for new product surfaces ahead of polished UXSetting day-to-day priorities and assignments for Smallstep's deployment ops engineersCarrying a formal on-call rotation with defined SLAsCapable of maintaining a high level of customer experience and a service mindset even in the face of implementation challenges. Building software at the edge isn't for the weak. Growing the role over time into an even split between resolving live deployments, building reusable runbooks, and validating new use cases through proofs of conceptExperience With …Debugging distributed, multi-service cloud architectures in live customer environmentsTroubleshooting TLS/mTLS at the protocol level, including certificate chain validation, trust stores, and handshake failuresProduction experience with certificate-based authentication, VPNs, enterprise Wi-Fi/EAP-TLS, RADIUS, SSH, OAuthDeveloping and shipping production Golang codeOwning technical escalations directly with customers, in partnership with account teamsNice to HaveFamiliarity with certificate enrollment protocols such as SCEP and ACME DAPKI experience across macOS, Windows, Linux, and ChromeOSExperience with hardware-backed security mechanisms such as Yubikeys, TPMs, HSMs, or secure enclavesExperience carrying a formal on-call rotation with SLAsPrior experience in a customer-facing technical role, such as a forward deployed engineer or solutions engineerTechnologiesGolang, Bash, Terraform, Git, GitHub ActionsSCEP, ACME, SCIM, mTLS, EAP-TLS, RADIUS, PKI, X.509, SSH, TPMsmacOS, Windows, Linux, ChromeOSMDMs (Jamf, Intune, Workspace One, Google Workspace Admin, Iru), Wi-Fi/RADIUS, VPNsWe believe in action-based empathy. We actively work to create an environment where everyone feels welcome and valued as teammates and contributors. We know a diverse team is essential to create a vibrant and inclusive culture that fosters a true sense of belonging. By embracing the unique talents and perspectives of our entire team, we approach challenges in ways that a monocultural team simply cannot.We’re committed to building a self-aware group that is collaborative and results- driven, representing a variety of skills, backgrounds, and lived experiences. We believe everyone deserves a competitive salary, industry leading benefits, the ability to share in the company’s success, and the psychological safety to be their truest selves at work.Smallstep is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We encourage all those interested to apply.Compensation Range: $185K - $230K