Forward Deployed Engineer
Posted 1ds ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Forward Deployed Engineer embedding with Smallstep customers to deploy device identity platforms and certificate infrastructure. Debugging cloud, PKI, network, and endpoint integrations while shipping production Golang solutions.
Responsibilities:
- Embed with customers deploying Smallstep's device identity platform and help them reach production
- Diagnose and resolve technical failures blocking deployments
- Act as the technical escalation point for Technical Account Managers and Customer Success Engineers
- Ship production Golang code to resolve root causes found during deployment debugging
- Build proof-of-concept environments using Bash and Terraform
- Create runbooks for new product surfaces ahead of polished UX
- Set day-to-day priorities and assignments for deployment operations engineers
- Participate in a formal on-call rotation with defined SLAs
- Maintain a high level of customer experience and a service mindset during implementation challenges
- Grow the role toward an even split between live deployment resolution, reusable runbooks, and validating new use cases through proofs of concept
- Collaborate across customer endpoint fleets, identity providers, and Smallstep's multi-service certificate authority services
Requirements:
- Experience debugging distributed, multi-service cloud architectures in live customer environments
- Experience troubleshooting TLS/mTLS at the protocol level, including certificate chain validation, trust stores, and handshake failures
- Production experience with certificate-based authentication, VPNs, enterprise Wi-Fi/EAP-TLS, RADIUS, SSH, and OAuth
- Experience developing and shipping production Golang code
- Experience owning technical escalations directly with customers in partnership with account teams
- Familiarity with certificate enrollment protocols such as SCEP and ACME DA
- PKI experience across macOS, Windows, Linux, and ChromeOS
- Experience with hardware-backed security mechanisms such as YubiKeys, TPMs, HSMs, or secure enclaves
- Experience with formal on-call rotations and SLAs
- Prior customer-facing technical experience, such as forward deployed engineering or solutions engineering
- Proficiency with Bash, Terraform, Git, and GitHub Actions
- Knowledge of SCEP, ACME, SCIM, mTLS, EAP-TLS, RADIUS, PKI, X.509, SSH, and TPMs
- Experience with macOS, Windows, Linux, and ChromeOS
- Experience with MDMs including Jamf, Intune, Workspace One, Google Workspace Admin, and Iru
- Knowledge of Wi-Fi/RADIUS and VPNs
- Adherence to company security policies, procedures, and best practices
- Ability to maintain customer experience and a service mindset during implementation challenges
Benefits:
- Equity
- Commission
- Bonus
- Competitive salary
- Industry leading benefits
- Ability to share in the company’s success
- Flexible hours
- Remote-first work environment
- Asynchronous work
- Inclusive and diverse workplace culture
- Psychological safety














