Senior DevOps Engineer

About MasterControl
MasterControl Inc. is a leading provider of cloud-based quality and compliance software for life sciences and other regulated industries. Our mission is the same as that of our customers to bring life-changing products to more people sooner. The MasterControl Platform helps organizations digitize, automate and connect quality and compliance processes across the regulated product development life cycle. Over 1,000 companies worldwide rely on MasterControl solutions to achieve new levels of operational excellence across product development, clinical trials, regulatory affairs, quality management, supply chain, manufacturing and postmarket surveillance. For more information, visit www.mastercontrol.com.
SUMMARY
We are looking for a highly skilled and experienced Senior DevOps Engineer to join our growing engineering team. In this role, you will be a key driver in designing, building, and maintaining our cloud infrastructure, CI/CD pipelines, and Kubernetes-based platforms. You will work closely with development, security, and operations teams to ensure our systems are scalable, reliable, secure, and efficient.
A strong candidate will embrace AI-assisted engineering — leveraging tools like Anthropic Claude and AWS Kiro to accelerate infrastructure development, SRE operations, cost management, and software delivery lifecycle (SDLC) workflows.
RESPONSIBILITIES
AWS Infrastructure
• Design, provision, and manage scalable, highly available, and fault-tolerant AWS infrastructure using Infrastructure as Code (IaC) tools such as Terraform and AWS CDK.
• Own and optimize AWS services including EC2, VPC, IAM, RDS, S3, Route 53, CloudWatch, ALB/NLB, and more.
• Design and manage robust AWS network infrastructure including VPCs, subnets, routing tables, and network ACLs for high-availability and security.
• Configure and optimize Route 53 for DNS management, failover strategies, and multi-region routing policies.
• Deploy and manage API Gateways for REST and HTTP APIs, including authentication, rate limiting, request/response transformation, and integration with backend services.
• Implement and manage AWS Load Balancers (Application Load Balancer, Network Load Balancer, and Classic Load Balancer) for traffic distribution, session management, and high availability.
• Define and enforce AWS security policies including security groups, NACLs, WAF rules, and compliance requirements across network infrastructure.
• Enforce AWS security best practices including least-privilege IAM policies, security group management, and network segmentation.
• Monitor infrastructure health, costs, and performance; continuously identify and implement optimizations.
• Lead cloud architecture reviews and contribute to Well-Architected Framework assessments.
Azure Infrastructure & Multi-Cloud
• Design and provision Azure infrastructure and services, including virtual networks, Azure Virtual Machines, Azure Kubernetes Service (AKS), and managed databases.
• Manage Azure IAM, resource groups, and implement security best practices across Azure environments.
• Implement Infrastructure as Code for Azure using Terraform and Azure Resource Manager templates.
• Integrate Azure services with AWS environments for hybrid and multi-cloud deployments where applicable.
System Administration (Linux & Windows)
• Administer Linux-based systems (AWS Linux and Ubuntu) including kernel management, package management, user/group administration, permissions, and access control.
• Configure and maintain Linux services, systemd, and daemon processes for reliability and performance.
• Administer Windows Server environments including Active Directory integration, Group Policy, patching, and security hardening.
• Manage both Linux and Windows across on-premises, cloud, and hybrid environments.
• Implement configuration management and automation for consistent system provisioning and lifecycle management.
Amazon EKS (Elastic Kubernetes Service)
• Design, deploy, and manage production-grade EKS clusters with a focus on security, scalability, and high availability.
• Manage Kubernetes resources including Deployments, StatefulSets, DaemonSets, ConfigMaps, Secrets, RBAC, and Network Policies.
• Implement and maintain cluster autoscaling (Cluster Autoscaler, Karpenter), node group management, and pod disruption budgets.
• Integrate EKS with AWS services such as IAM Roles for Service Accounts (IRSA), AWS Load Balancer Controller, EBS/EFS CSI drivers, and AWS Secrets Manager.
• Deploy, configure, and manage Istio service mesh on EKS, including traffic management, mutual TLS (mTLS), observability, and security policy enforcement.
• Oversee Kubernetes upgrades, patching, and lifecycle management across environments.
ArgoCD & GitOps
• Implement and maintain GitOps workflows using ArgoCD for continuous delivery to Kubernetes environments.
• Design and manage ArgoCD Application and ApplicationSet configurations for multi-cluster and multi-environment deployments.
• Establish GitOps best practices including environment promotion strategies (dev → staging → production), rollback procedures, and drift detection.
• Manage ArgoCD RBAC, SSO integration