Senior DevOps Engineer

Job Description We are seeking a highly skilled Senior DevOps Engineer with deep, hands-on expertise in building and operating enterprise-grade CI/CD platforms, cloud infrastructure, and developer tooling at global scale. In this role, you will own the design, automation, and reliability of the software delivery pipeline — enabling engineering squads to ship faster, safer, and with greater confidence. You will bring a strong platform engineering mindset, infrastructure-as-code discipline, and a proven track record of reducing toil, improving system resilience, and embedding security into every stage of the software lifecycle in a regulated financial services environment. Roles & Responsibilities Own the CI/CD Platform Design, build, and continuously improve enterprise CI/CD pipelines. Ensure pipelines are fast, reliable, secure, and scalable across dozens of engineering squads and technology stacks. Architect & Manage Cloud Infrastructure Provision, manage, and optimize cloud infrastructure across AWS, Azure, and GCP using infrastructure-as-code. Enforce cost controls, security guardrails, and operational best practices at scale. Drive Platform Reliability & SRE Practices Define and own SLOs, SLIs, and error budgets for platform services. Lead incident response, conduct blameless post-mortems, and implement systemic fixes to eliminate recurring failures. Embed Security into the Delivery Pipeline Implement DevSecOps practices — integrating SAST, DAST, SCA, container scanning, and secrets detection into every pipeline stage. Ensure compliance with enterprise security standards and regulatory requirements. Standardize Container & Kubernetes Operations Own the Kubernetes and OpenShift platform strategy — cluster lifecycle management, namespace governance, RBAC, networking policies, and workload autoscaling. Enable Developer Productivity Build internal developer platforms (IDP), self-service tooling, golden path templates, and reusable infrastructure components that reduce friction and accelerate engineering teams. Lead Observability & Capacity Planning Design and maintain a unified observability stack covering metrics, logging, and distributed tracing. Drive proactive capacity planning and performance optimization across all environments. Champion Infrastructure as Code & GitOps Establish IaC standards across the organization. Drive GitOps adoption for all infrastructure and application configuration changes, ensuring auditability and repeatability. Mentor & Lead Technical Direction Define DevOps standards, conduct platform design reviews, mentor junior engineers, and collaborate with architects, security teams, and engineering leads to align platform strategy with business goals. Technical Skills Required CI/CD & Build Systems Jenkins GitHub Actions GitLab CI ArgoCD Tekton CircleCI Maven / Gradle / npm build integration Pipeline-as-Code Artifact Management Release Automation & Versioning Strategies Container & Kubernetes Platforms Docker Kubernetes OpenShift Helm Kustomize Operators & Custom Resource Definitions (CRDs) Kubernetes RBAC & Network Policies Pod Security Standards Cluster Lifecycle Management Service Mesh (Istio, Linkerd) Cloud Platforms & Infrastructure AWS (EC2, ECS, EKS, Lambda, RDS, S3, VPC, IAM, SQS, SNS, Route53) GCP (GKE, Cloud Run, IAM, VPC) Multi-cloud & Hybrid Cloud Architecture Cloud Networking (VPC, peering, transit gateway, private endpoints) Cloud Cost Optimization & FinOps Infrastructure as Code & GitOps Terraform Ansible Pulumi CloudFormation ArgoCD / Flux (GitOps) Crossplane Packer Terragrunt Observability & Monitoring Prometheus Grafana OpenTelemetry ELK Stack Loki / Fluentd / Fluentbit Jaeger / Zipkin (Distributed Tracing) Datadog / Dynatrace / New Relic PagerDuty / Alertmanager SLO / SLI / Error Budget Management Google Cloud Observability Storage S3 NAS EFS EBS DevSecOps & Security SAST Tools (Checkmarx, SonarQube) DAST Tools (OWASP ZAP, Burp Suite) SCA / Dependency Scanning Container Image Scanning (Trivy, Aqua Security, Twistlock) Secrets Scanning HashiCorp Vault AWS Secrets Manager / Azure Key Vault mTLS & Certificate Management RBAC & Identity-Aware Proxy CIS Benchmarks & STIG Compliance Networking & Service Delivery DNS & Load Balancing (Nginx, HAProxy, AWS ALB/NLB) API Gateway (Kong, AWS API Gateway, Apigee) CDN (Cloudflare, AWS CloudFront) Ingress Controllers (Nginx Ingress, Traefik) VPN & Private Connectivity (AWS Direct Connect, Azure ExpressRoute) Zero Trust Networking Scripting & Automation Bash / Shell Scripting Python (automation, tooling, Lambda functions) Go (CLI tooling, Kubernetes controllers) PowerShell Makefile / Task runners Reliability & SRE Practices Site Reliability Engineering (SRE) Principles Chaos Engineering (Chaos Monkey, LitmusChaos, Gremlin) Disaster Recovery & Business Continuity Planning Runbook Automation Incident Management (PagerDuty, OpsGenie) Capacity Planning & Performance Tuning Blue-Green & Canary Deployment Strategies Feature Flag Management Developer Platform & Productivity Internal Developer Platforms (Backstage, Port) Golden Path Templates & Scaffolding Self-Service Infrastructure Provisioning Developer Experience (DX) tooling Pre-commit hooks & code quality gates Salary Range: $125,000 to $140,000 per year Qualifications: BACHELOR OF COMPUTER SCIENCE