Staff / Principal Interview Questions
228 questions across 34 categories
Expert-level and system-design questions — the scope, trade-offs, and organizational reasoning expected at the most senior technical levels.
How do you decide what belongs on a golden path / internal developer platform versus what teams should just be free to do themselves?
AdvancedPlatform Engineering8 min
A Python automation script uses subprocess.run(f'kubectl get pod {pod_name}', shell=True) where pod_name comes from user input. What's actually wrong with this, and how do you fix it?
AdvancedPython7 min
How would you handle a data transformation that genuinely needs to see the whole dataset at once, like a global sort, when streaming isn't an option?
AdvancedPython8 min
You find a piece of a legacy pipeline that seems actively dangerous — overly broad credentials, say — but nobody can explain why it's configured that way. What do you do?
AdvancedSecurity7 min
How would you decide whether to gradually refactor a legacy pipeline versus rewriting it from scratch?
AdvancedCI/CD7 min
You inherit ownership of a system whose fundamental architecture you think was the wrong call — not a small detail, a core design decision. How do you handle this, given the system is already in production?
AdvancedDevops7 min
You have two weeks to ship a solution, and neither option available to you is actually good — one is fast but creates real tech debt, the other is more correct but won't make the deadline. How do you approach this?
AdvancedDevops7 min
How would you design a recurring privileged-access review that catches stale access at scale without becoming a rubber-stamp exercise nobody takes seriously?
AdvancedSecurity7 min
How would you design a 'break-glass' emergency access process that lets an engineer bypass normal approval during a critical incident, without that becoming a permanent backdoor around your access controls?
ExpertSecurity8 min
You're designing the IAM/role structure for a shared platform used by 12 different teams. How do you avoid both 'everyone is admin' and a role-request bottleneck that blocks every team on you?
AdvancedSecurity8 min
A security audit finds 340 service accounts, and nobody can say for certain which ones are still in use. How do you find and safely remove the dead ones without breaking production?
AdvancedSecurity8 min
After a change to your SSO/identity provider configuration, nobody — including admins — can log into any connected system. How do you get back in, and how do you diagnose the actual cause?
AdvancedSecurity8 min
How would you design credential architecture so a hardcoded secret, if it happens again, has a much smaller blast radius?
AdvancedSecurity8 min
A developer just committed a live database password directly into a public GitHub repository. It's been merged and pushed. What do you do, in order?
AdvancedSecurityGitHub10 min
A single catastrophic incident burns an entire quarter's error budget in one day. Does the error budget policy still apply the same way?
AdvancedSRE7 min
How do you handle a service with multiple different user-facing SLIs — latency, availability, correctness — that might have conflicting error budget states at the same time?
AdvancedSRE7 min
Your on-call engineers are getting paged 15+ times a week, and they've started treating every page as probably-not-urgent before even looking. How do you fix this?
AdvancedSRE8 min
How would a self-service CI/CD platform handle a team that's on a fundamentally different tech stack the golden path doesn't cover well?
ExpertCI/CD8 min
How would you measure whether a self-service CI/CD platform is actually succeeding, beyond just "teams are using it"?
AdvancedCI/CD7 min
How would the self-service CI/CD platform design change if the organization had 1,000 teams instead of 100?
ExpertCI/CD8 min
Design an alerting and on-call paging system for a company running services across 3 regions, where the paging system itself must not go down along with the region it's monitoring.
ExpertObservabilitySRE14 min
Design a centralized logging platform for an organization running roughly 500 microservices across multiple Kubernetes clusters, where engineers currently can't find logs during incidents.
ExpertKubernetesObservability14 min
Design a centralized secrets management system for an org currently scattering credentials across env vars, config files, and CI/CD tool stores, with no consistent rotation or audit trail.
ExpertSecurityDevSecOps14 min
Design a deployment orchestration system that lets any of your organization's 200 services safely adopt canary or blue-green deployments, without every team building their own rollout automation from scratch.
ExpertKubernetesPlatform Engineering14 min