Devops Engineer

Job Description

We are seeking a highly skilled Senior Dev Ops Engineer with deep, hands‑on expertise in building and operating enterprise‑grade CI/CD platforms, cloud infrastructure, and developer tooling at global scale. In this role, you will own the design, automation, and reliability of the software delivery pipeline — enabling engineering squads to ship faster, safer, and with greater confidence. You will bring a strong platform engineering mindset, infrastructure-as-code discipline, and a proven track record of reducing toil, improving system resilience, and embedding security into every stage of the software lifecycle in a regulated financial services environment.

• Own the CI/CD Platform Design, build, and continuously improve enterprise CI/CD pipelines. Ensure pipelines are fast, reliable, secure, and scalable across dozens of engineering squads and technology stacks.
• Architect & Manage Cloud Infrastructure Provision, manage, and optimize cloud infrastructure across AWS, Azure, and GCP using infrastructure-as-code. Enforce cost controls, security guardrails, and operational best practices at scale.
• Drive Platform Reliability & SRE Practices Define and own SLOs, SLIs, and error budgets for platform services. Lead incident response, conduct blameless post‑mortems, and implement systemic fixes to eliminate recurring failures.
• Embed Security into the Delivery Pipeline Implement Dev Sec Ops  practices — integrating SAST, DAST, SCA, container scanning, and secrets detection into every pipeline stage. Ensure compliance with enterprise security standards and regulatory requirements.
• Standardize Container & Kubernetes Operations Own the Kubernetes and Open Shift platform strategy — cluster lifecycle management, namespace governance, RBAC, networking policies, and workload autoscaling.
• Enable Developer Productivity Build internal developer platforms (IDP), self‑service tooling, golden path templates, and reusable infrastructure components that reduce friction and accelerate engineering teams.
• Lead Observability & Capacity Planning Design and maintain a unified observability stack covering metrics, logging, and distributed tracing. Drive proactive capacity planning and performance optimization across all environments.
• Champion Infrastructure as Code & Git Ops Establish IaC standards across the organization. Drive Git Ops adoption for all infrastructure and application configuration changes, ensuring auditability and repeatability.
• Mentor & Lead Technical Direction Define Dev Ops standards, conduct platform design reviews, mentor junior engineers, and collaborate with architects, security teams, and engineering leads to align platform strategy with business goals.

• Jenkins
• Git Hub Actions
• Git Lab CI
• ArgoCD
• Tekton
• CircleCI
• Maven / Gradle / npm build integration
• Pipeline-as-Code
• Artifact Management
• Release Automation & Versioning Strategies

• Docker
• Kubernetes
• Open Shift
• Helm
• Kustomize
• Operators & Custom Resource Definitions (CRDs)
• Kubernetes RBAC & Network Policies
• Pod Security Standards
• Cluster Lifecycle Management
• Service Mesh (Istio, Linkerd)

• AWS (EC2, ECS, EKS, Lambda, RDS, S3, VPC, IAM, SQS, SNS, Route
  53)
• GCP (GKE, Cloud Run, IAM, VPC)
• Multi‑cloud & Hybrid Cloud Architecture
• Cloud Networking (VPC, peering, transit gateway, private endpoints)
• Cloud Cost Optimization & Fin Ops

• Terraform
• Ansible
• Pulumi
• Cloud Formation
• ArgoCD / Flux (Git Ops)
• Crossplane
• Packer
• Terragrunt

• Prometheus
• Grafana
• Open Telemetry
• ELK Stack
• Loki / Fluentd / Fluentbit
• Jaeger / Zipkin (Distributed Tracing)
• Datadog / Dynatrace / New Relic
• Pager Duty / Alert manager
• SLO / SLI / Error Budget Management
• Google Cloud Observability

• S3
• NAS
• EFS
• EBS

• SAST Tools (Checkmarx, Sonar Qube)
• DAST Tools (OWASP ZAP, Burp Suite)
• SCA / Dependency Scanning
• Container Image Scanning (Trivy, Aqua Security, Twistlock)
• Secrets Scanning
• Hashi Corp Vault
• AWS Secrets Manager / Azure Key Vault
• mTLS & Certificate Management
• RBAC & Identity‑Aware Proxy
• CIS Benchmarks & STIG Compliance

• DNS & Load…