Senior DevSecOps Engineer

Description

At Zywave, we believe in an "everything as code" culture-treating infrastructure, configurations, and processes with the same discipline as software development. The Hosting Engineer will join our Platform Engineering team to design, build, and maintain the foundation of Zywave's cloud and on-premise hosting environments. This role is deeply technical and hands-on, spanning Kubernetes operations, cloud infrastructure management, observability, and secure hosting of enterprise applications.

What you will do:

Cloud Infrastructure Management

• Design, deploy, and maintain scalable environments in AWS and Azure.
• Own and evolve Zywave's hub-and-spoke networking model.
• Build and improve repeatable patterns for secure infrastructure provisioning.
• Drive cost monitoring and optimization of cloud spend.

Kubernetes Operations

• Manage Kubernetes clusters across EKS, AKS, and on-prem Rancher.
• Implement secure multitenancy and isolation strategies (name spaces, pods, nodes).
• Oversee provisioning, scaling, monitoring, upgrades, and troubleshooting.

CI/CD & Automation

• Maintain and optimize Git Lab/Git Hub pipelines for reliable production deployments.
• Implement Git Ops workflows with Argo CD for consistent, automated deployments.
• Leverage Argo Workflows for complex automation and orchestration needs.
• Improve release automation, including Helm-based deployment flows.

Observability & Reliability

• Implement and maintain monitoring, logging, and tracing systems (Prometheus, Grafana, OTEL, Observe Inc).
• Ensure uptime and performance through proactive reliability practices.
• Participate in incident response, including on-call rotation and leading postmortems.

Security & Compliance

• Integrate secrets management solutions.
• Ensure environments meet compliance and security best practices.
• Support SSO and SCIM configuration with Azure Entra  other SaaS integrations.

Hosting & Systems Management

• Manage and troubleshoot Windows and Linux hosting systems, including IIS.
• Apply expertise in enterprise storage and networking, including object/file storage.
• Support containerization strategies and patterns.

Soft Skills & Collaboration

• Strong collaboration skills across engineering, security, and operations teams.
• Clear and concise communication, both written and verbal.
• Comfort participating in and leading technical discussions and incident reviews.
• Proactive mindset-able to identify issues and drive solutions independently or as part of a team.

What you should bring:

• Ability to quickly absorb new technologies and concepts, with the flexibility to learn whatever is necessary to solve problems effectively.
• Strong experience with cloud computing (AWS, Azure).
• Hands-on expertise with Kubernetes (EKS, AKS, Rancher) and Helm.
• Practical background in CI/CD pipelines and deployment automation.
• Familiarity with Git Ops tooling (Argo CD) and workflow orchestration (Argo Workflows).
• Proficiency in infrastructure as code (Terraform).
• Working knowledge of Windows/Linux hosting, IIS, and containerized workloads.
• Strong understanding of observability stacks (Prometheus, Grafana, OTEL).
• Experience with version control systems (Git Lab, Git Hub).
• Strong understanding of security, identity (Azure Entra ), and secrets management.
• Programming ability in at least one of: .NET, Python, Type Script/JavaScript.

Preferred:

• Exposure to Snowflake and enterprise data platforms.
• Experience with enterprise networking and storage architectures.
• Incident management and on-call participation history.
• Cost optimization in large-scale cloud environments.

Company Overview:

Zywave empowers insurers and brokers to drive profitable growth and thrive in today's escalating risk landscape. Only Zywave delivers a powerful Performance Multiplier, bringing together transformative, ecosystem-wide capabilities to amplify impact across data, processes, people, and customer experiences. More than 15,000 insurers, MGAs, agencies, and brokerages trust Zywave to sharpen risk assessment, strengthen client relationships, and enhance operations. Additional information can be found at

#LI-LK1