Senior DevOps Engineer

Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.

We are seeking a Senior Dev Ops Engineer with 10+ years of hands‑on experience designing, building, and operating enterprise‑grade CI/CD platforms across hybrid environments (AWS and on‑premises). This role will lead platform standardization, progressive delivery, reliability engineering, and security‑by‑design to enable high‑quality, low‑risk software delivery at scale.

• CI/CD Platform & Environment Strategy:
  Design, implement, and operate a standardized CI/CD framework supporting Dev, QA, Partner Lab, Staging, and Production, and define promotion workflows with enforced quality gates and artifact immutability.
• Establish Partner Lab as a dedicated integration and validation environment with no direct path to Production and ensure environment parity across AWS and on‑prem systems.
• Progressive Delivery & Release Engineering:
  Implement feature flags, canary deployments, blue‑green deployments, and phased rollouts; enable automated rollback based on health checks, error rates, and SLO breaches; maintain full release traceability from commit through production.
• Test Automation & Quality Engineering:
  Integrate unit, integration, regression, security, and performance testing into CI/CD pipelines; enforce automated quality gates and support manual validation workflows with controlled access and test artifacts.
• Database & Data Automation:
  Automate database schema versioning, migrations, rollbacks, and validation; build lower‑environment refresh pipelines sourced from production data; enforce data masking, PII anonymization, and validate data integrity and consistency post‑refresh.
• Observability, Reliability & Operations:
  Define and enforce observability standards; implement service health dashboards, alerts, and incident signals; integrate deployment health into automated release decisions; support on‑call readiness, incident response, and post‑incident reviews.
• Security, Governance & Compliance:
  Embed security scanning, secrets management, and access controls into pipelines; enforce least‑privilege IAM, credential rotation, and artifact integrity checks; align CI/CD workflows with enterprise change management and audit requirements.

• Cloud & Infrastructure: AWS (mandatory) – ECS, EKS, Lambda, RDS, IAM, Cloud Formation, Cloud Watch; hybrid infrastructure experience across on‑prem VMs, bare metal, and internal networks;
  Terraform for modular, reusable, policy‑compliant infrastructure.
• CI/CD & Platform Engineering:
  Git Hub Enterprise & Git Hub Actions (reusable workflows, templates, runners, environments); CI/CD orchestration across hybrid AWS and on‑prem topologies; artifact versioning, promotion, and immutability strategies.
• Containers & Orchestration:
  Docker image design, optimization, and security hardening;
  Kubernetes (EKS and on‑prem) deployment patterns, scaling, and lifecycle management;
  Helm for deployment standardization.
• Testing, Release Safety & Analysis:
  Automated testing frameworks (unit, integration, regression, performance); static and dynamic analysis tools (code quality, security, dependency scanning); feature flag platforms or equivalent internal capabilities.
• Database & Data Management:
  Oracle and Microsoft SQL Server (mandatory); schema migration tooling with automated rollback; data masking, anonymization, and controlled refresh automation.
• Observability & Reliability Engineering:
  Metrics, logging, and tracing with Prometheus, Grafana, Splunk, New Relic, Cloud Watch, Open Telemetry, ELK; SLO‑driven alerting and deployment health evaluation; automated failure containment and rollback strategies.
• Security & Secrets Management:
  Hashi Corp Vault, AWS Secrets Manager, or equivalent; secure pipeline design with controlled credential access.
• Compliance‑ready logging, approvals, and traceability.

• Experience in regulated or financial services environments.
• Strong documentation, runbooks, and…