Description:
We are seeking a highly motivated Senior DevOps Engineer with 7+ years of experience in cloud-native infrastructure, CI/CD automation, and security integration. The ideal candidate will have hands-on expertise in building secure software delivery pipelines, implementing Infrastructure as Code (IaC), managing Kubernetes environments, and integrating security controls throughout the SDLC.
This role requires a strong technical background in modern DevOps practices, cloud platforms, automation, and application security, with the ability to collaborate effectively across development, platform, and security teams.
Compensation & Working Arrangement
- Dollar-pegged compensation — pay is benchmarked and pegged to USD.
- Hybrid working model — a mix of remote and onsite work.
- Schedule — working hours aligned to the US Central Time (CT) zone to ensure strong overlap and collaboration with the team.
Key Responsibilities
- Design, develop, and maintain CI/CD pipelines to support automated build, testing, security scanning, and deployment processes
- Implement Infrastructure as Code (IaC) using Terraform or OpenTofu
- Deploy, manage, and troubleshoot containerized applications on Kubernetes platforms
- Integrate security tools and controls into CI/CD pipelines following DevSecOps best practices
- Implement and enforce policy-as-code controls for deployment governance and compliance
- Manage artifact repositories and software dependency lifecycle processes
- Automate infrastructure provisioning, application deployment, and operational tasks
- Support vulnerability remediation and security compliance initiatives
- Collaborate with development, cloud, platform, and security teams to improve delivery efficiency and security posture
- Monitor and optimize platform performance, reliability, and scalability
- Participate in incident troubleshooting, root cause analysis, and production support activities
- Maintain technical documentation and operational runbooks
Technical Depth: You Should Be Strong Here
- CI/CD platform design: Deep expertise with at least one modern platform (GitHub Actions, GitLab CI, Tekton, ArgoCD, or Jenkins). You can design a multi-stage, multi-environment pipeline from scratch and explain the trade-offs.
- Cloud-native infrastructure: Hands-on Kubernetes and Terraform (or OpenTofu) experience, managed Helm releases, and written non-trivial IaC. AWS, Azure, or GCP depth — at least one.
- Security tooling integration: Hands-on experience integrating SAST (Semgrep, Checkmarx, or Snyk Code), SCA (Snyk OSS, Mend, or Dependabot at scale), container scanning (Trivy, Grype, or Prisma Cloud), and secrets detection (Gitleaks, TruffleHog, or HashiCorp Vault) into real pipelines.
- Policy-as-code: Working experience with OPA/Rego or Kyverno for admission control and pipeline policy enforcement.
- Artifact and dependency management: Artifactory, Nexus, or GitHub Packages at scale. You understand artifact promotion patterns, retention policies, and vulnerability triage workflows.
Nice to Have
- Hands-on experience with agentic pipeline tooling or LLM-integrated developer workflows (LangChain, LangGraph, AutoGen, or MCP-based tooling)
- Backstage plugin development or contributions to CNCF / OpenSSF projects
- Experience in a regulated industry: financial services, fintech, healthcare, or government/FedRAMP environments
- Familiarity with eBPF-based runtime security tools (Falco, Tetragon) or zero-trust network architecture in a Kubernetes context
- Previous experience as a developer advocate, platform product manager, or in a DevRel-adjacent role; you understand what makes platforms feel good to use, not just technically sound