Site Reliability Engineer III

At Mitratech, we are a team of technocrats focused on building world-class products that simplify operations in the Legal, Risk, Compliance, and HR functions. We are a close-knit, globally dispersed team that thrives in an ecosystem that supports individual excellence and takes pride in its diverse and inclusive work culture centered around great people practices, learning opportunities, and having fun! Our culture is the ideal blend of entrepreneurial spirit and enterprise investment, enabling the chance to move at a rapid pace with some of the most complex, leading-edge technologies available.
For over 35 years, the experts at Mitratech have been focused on solving the complex needs. Today, we serve 20,000 client companies of all sizes globally, representing 30% of the Fortune 500 and over 500,000 users in over 160 countries.
As we continue to grow, we’re always looking for resourceful, enthusiastic, and fresh perspectives. Join our global team and see what makes Mitratech a truly exceptional place to work!
ABOUT THE ROLE
Mitratech is seeking a senior AWS DevOps Engineer III to own and evolve our CI/CD, infrastructure automation, and cloud platform engineering practice. AWS is the primary cloud platform -- you will work daily with a broad AWS service footprint including compute (EC2, Fargate, EKS, Lambda), messaging (SQS), data (RDS, Aurora), AI/ML (Bedrock), analytics (QuickSight), and infrastructure delivery (CDK, Terraform). Azure is a secondary environment you will work in with some regularity; Linux administration underpins everything.
You will be comfortable across all three CI/CD Tools (GitHub Actions, Bitbucket Pipelines, and Jenkins), able to design reusable pipeline patterns, migrate pipelines between tools, and enforce consistent delivery standards regardless of the source control or build platform. Terraform is the primary IaC tool; AWS CDK is used for application-infrastructure co-located patterns and is a key part of this role.
At DevOps III you operate independently on complex problems, make architectural recommendations, mentor junior engineers, and actively raise the bar on delivery reliability and automation coverage. You will also participate in on-call rotation for pipeline and infrastructure events.
A DAY IN THE LIFE
CI/CD Pipeline Engineering — GitHub | Bitbucket | Jenkins
Design, implement, and maintain end-to-end CI/CD pipelines across GitHub Actions (reusable workflows, composite actions, matrix builds, self-hosted runners), Bitbucket Pipelines (pipe steps, custom runners, deployment environments), and Jenkins (declarative pipelines, shared libraries, agent pools, and Blue Ocean).
Build reusable pipeline templates and shared libraries that standardize delivery patterns across all three CI/CD platforms -- engineers should be able to ship reliably without knowing which tool runs underneath.
Drive pipeline governance across all platforms: branch protection policies, PR-required checks, approval gates, environment promotion strategies, and parallel job optimization.
Implement and enforce pipeline quality gates: automated test integration, SAST/SCA security scanning, container image scanning, Terraform plan validation, CDK diff review, and compliance policy checks.
Own artifact management across ECR (container images), S3 (build artifacts), and package feeds: versioning strategies, promotion workflows, and retention policies across dev/staging/prod.
Migrate and consolidate pipelines: when Bitbucket or Jenkins pipelines need to move to GitHub Actions (or vice versa), you design the migration path, execute it, and document the new standard.
AWS Platform Engineering — Core Services (Primary)
Architect and manage AWS compute services: EC2 (AMI management, launch templates, Auto Scaling Groups), ECS Fargate (task definitions, service discovery, capacity providers), EKS, and Lambda (function packaging, layers, event source mappings, concurrency management).
Design and maintain AWS messaging and event-driven architectures: SQS (standard and FIFO queues, DLQs, visibility timeouts, batch processing integration), SNS, and EventBridge for decoupled pipeline triggers and async workload patterns.
Manage AWS data services: RDS and Aurora (multi-AZ, read replicas, parameter groups, automated backups, IAM database authentication, Performance Insights) -- including operational runbooks for failover, patching, and connectivity.
Own AWS networking design: VPC architecture, subnet strategy, security groups, NACLs, Transit Gateway, VPN/Direct Connect, Route 53, ALB/NLB, PrivateLink, and VPC endpoints for secure private connectivity.
Manage multi-account AWS Organizations: SCPs, account vending via Control Tower or Account Factory for Terraform, guardrails, and landing zone governance across production, staging, and sandbox environments.
Implement AWS security posture controls: Security Hub, GuardDuty, Config Rules, CloudTrail, Macie, IAM Access Analyzer, and Secrets Manager -- integrated with CI/CD pipeline policy enforcement.
AWS CDK & Terraform — Infrastructure as Code
Author and maintain AWS CDK applications (TypeScript or Python) for application-infrastructure co-located patterns: Lambda functions with their event sources, SQS queues, RDS instances, ECS task definitions, and supporting IAM roles -- all as versioned, testable code alongside application code.
Own and evolve the Terraform/OpenTofu module library for AWS and Azure: design composable modules, enforce DRY principles, manage remote state (S3 + DynamoDB locking), and implement workspace strategies for multi-environment deployments.
Implement GitOps workflows for all IaC: every resource change goes through PR, plan/diff validation (Terraform plan + CDK diff in pipeline), and pipeline-applied apply/deploy -- zero manual console changes in production.
Integrate CDK and Terraform into the CI/CD pipeline ecosystem: GitHub Actions workflows for CDK deploy, Bitbucket Pipelines for Terraform apply, and Jenkins shared library steps for IaC validation.
Manage CDK construct libraries: author reusable L3 constructs that encode Mitratech's opinionated defaults for Lambda, ECS, RDS, and SQS patterns -- reducing boilerplate for product engineers.