DevOps Engineer

Position Summary
We are looking for a hands-on DevOps Engineer who will own our infrastructure, cloud environments, CI/CD pipelines, and security posture, while also taking on release management, change management, and a supporting quality assurance role for our engineering organization. This role sits at the intersection of infrastructure engineering, security, and release governance, ensuring that our systems are reliable, secure, and compliant, and that everything we ship is properly built, reviewed, and tested.
Key Responsibilities
1. Infrastructure & DevOps
• Design, build, and maintain our cloud infrastructure (AWS/Azure/GCP), using Infrastructure as Code (Terraform, CloudFormation, or similar).
• Own and evolve CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI, or similar), ensuring fast, reliable, and secure build and deployment workflows.
• Set up and maintain monitoring, logging, and observability to ensure system health, performance, and rapid incident detection.
• Administer and harden GitHub repositories: branch policies, access control, repo hygiene, and secrets management.
• Manage environment provisioning (dev, staging, production), configuration management, and infrastructure cost optimization.
• Support developers with check-in/check-out processes, merge/PR workflows, and branching strategy.
• Own incident response and disaster recovery planning for infrastructure, including backups and failover.
2. Security
• Own and continuously improve our security posture across infrastructure, applications, and the software supply chain.
• Implement and manage identity and access management (IAM), least-privilege access, and secrets/credentials management (e.g., Vault, AWS Secrets Manager).
• Run vulnerability scanning, dependency/SCA scanning, and container image scanning; track remediation to closure.
• Partner with engineering to embed security into the SDLC (DevSecOps): code scanning (SAST/DAST), secure coding practices, and security gates in CI/CD.
• Lead or support incident response for security events and maintain security runbooks and playbooks.
3. Release & Change Management
• Support the end-to-end release process: planning, scheduling, coordination, and execution of releases.
• Partner with developers to define release scope, readiness criteria, and rollback plans.
• Support the change management process for code and infrastructure changes; review and approve change requests with proper documentation, risk assessment, and sign-off.
• Maintain a clear audit trail of changes for governance and traceability, including emergency/hotfix change procedures.
4. Quality Assurance
• Support functional and regression testing efforts in collaboration with developers ahead of releases.
• Help design and maintain test cases for critical workflows, and support automated test suites (e.g., Selenium) where infrastructure or pipeline integration is needed.
• Use Python (including libraries such as Pandas) for data validation and test-data tooling as needed.
• Track quality and release-health metrics (defect escape rate, test coverage, deployment failure rate) and feed them into release go/no-go decisions.
Required Skills & Experience
• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• Proven experience in a DevOps, Infrastructure, or Site Reliability Engineering role, ideally with added exposure to release/change management.
• Experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI, etc.).
• Solid understanding of security fundamentals: IAM, network security, secrets management, vulnerability management, and DevSecOps practices.
• Strong GitHub administration experience --- branching, merging, pull requests, repo administration, access control.
• Familiarity with release management and change management processes (ITIL knowledge a plus).
• Working knowledge of Python; familiarity with Selenium and/or Pandas is a plus.
• Strong communication skills --- able to work closely and effectively with developers.
• Ability to manage multiple workstreams and handle a demanding workload independently.
Nice to Have
• Relevant certifications (e.g., AWS/Azure/GCP certifications, CKA, Security+, CISSP).
• Familiarity with test management tools (TestRail, Zephyr, Jira, etc.).
• Some prior exposure to Release/Quality Assurance management alongside development teams.
What Success Looks Like
• Infrastructure is stable, scalable, and cost-efficient, with strong monitoring and fast incident response.
• Security vulnerabilities are identified and remediated quickly; the environment stays audit-ready at all times.
• Releases go out on schedule, with minimal post-release defects.
• Production changes are traceable from requirement/ticket → PR → Review → Test → Deployment.
• Developers view this person as a trusted partner in shipping secure, reliable software, not a bottleneck.

Work arrangement
Yes