Site Reliability Engineer | DevSecOps Team

At Garmin we create products that are designed indoors for outdoor activities. We do this to enable our customers to make the most of their time spent pursuing their passions.

We recognize the value of flexibility in supporting employee well-being, work-life balance, and effective collaboration. Associates may work from home up to four days per month, or one day per week, while remaining connected to the teams and culture that help us do our best work.

Our roles are primarily office-based because we believe the best ideas, innovation, and strongest professional relationships are built through in-person collaboration, making regular team interaction an important part of our culture and future success.

The DevSecOps team is responsible for securing and enabling some of Garmin’s most widely used services, including Garmin Connect, the Connect IQ App Store, Garmin Golf, and many others.

• → Partner on process improvements across the full software lifecycle and release process, embedding security and compliance controls by design.
• → Participate in design/definition of moderate-complexity systems, features, and processes with explicit reliability, security, and risk requirements.
• →Champion a shift-left culture for reliability, delivery performance, and security within software development teams.
• →Monitor and support moderate-complexity software releases, including secure release gates, rollback readiness, and runtime risk validation.
• →Implement improvements to the SDLC and production pipeline through automation aligned with SRE, DevSecOps, and industry best practices (e.g., policy-as-code, IaC scanning, secrets controls).
• → Implement observability improvements across applications and infrastructure, including security telemetry and detection signals.
• →Coordinate and improve monitoring practices across applications and infrastructure, integrating reliability and security alerting with actionable runbooks.
• → Build and/or maintain tools and dashboards to generate operational, reliability, and security posture reports.
• →Maintain accurate data for reporting on key SLOs/SLIs, security KPIs, and compliance metrics across multiple products/systems.
• →Improve incident response by developing and maintaining incident playbooks for both reliability and security events.
• →Facilitate a healthy post-incident culture organization-wide, including blameless retrospectives for outages and security incidents.
• → Use post-incident insights to proactively implement reliability improvements, security hardening, and automated mitigations to prevent recurrence.
• →Participate in the DevSecOps/SRE community to drive standards, best practices, and training across product owners, engineers, and SREs.
• →Participate in capacity planning to ensure systems scale at peak demand while maintaining performance, resilience, and security controls.

• Experience applying Lean principles to individual, team, and organizational process
• Experience with DevOps-style tools such as Jenkins, GitHub,
• Experience with scripting languages such as Python, Groovy.
• Experience with Infrastructure as Code such as Ansible, Terraform, Salt, Chef, Puppet.
• Good understanding of Linux system administration.
• Configuration of complex multi-tiered server applications.
• Effective judgment, discretion, and decision-making abilities.
• Demonstrate strong and effective verbal, written, and interpersonal communication skills.
• Team-oriented, possessing a positive attitude and working well with others.
• Minimum 3 years of relevant work experience.
  

• Experience with CDN Providers such as Akamai/Cloudflare
• Experience with APM monitoring tools such as Zabbix, AppDynamics, New Relic, Dynatrace
• Proficiency in application languages/frameworks such as Java, SpringBoot, C#, JavaScript, React, Angular
• Experience with observability tools such as Uptrends, Splunk, Kibana
• Experience with data technologies such as RDBMS, No-SQL