Senior DevOps Engineer

About MasterControl
MasterControl Inc. is a leading provider of cloud-based quality and compliance software for life sciences and other regulated industries. Our mission is the same as that of our customers to bring life-changing products to more people sooner. The MasterControl Platform helps organizations digitize, automate and connect quality and compliance processes across the regulated product development life cycle. Over 1,000 companies worldwide rely on MasterControl solutions to achieve new levels of operational excellence across product development, clinical trials, regulatory affairs, quality management, supply chain, manufacturing and postmarket surveillance. For more information, visit www.mastercontrol.com.
SUMMARY
We are looking for a highly skilled and experienced Senior DevOps Engineer to join our growing engineering team. In this role, you will be a key driver in designing, building, and maintaining our cloud infrastructure, CI/CD pipelines, and Kubernetes-based platforms. You will work closely with development, security, and operations teams to ensure our systems are scalable, reliable, secure, and efficient.
A strong candidate will embrace AI-assisted engineering — leveraging tools like Anthropic Claude and AWS Kiro to accelerate infrastructure development, SRE operations, cost management, and software delivery lifecycle (SDLC) workflows.
RESPONSIBILITIES
AWS Infrastructure
Design, provision, and manage scalable, highly available, and fault-tolerant AWS infrastructure using Infrastructure as Code (IaC) tools such as Terraform and AWS CDK.
Own and optimize AWS services including EC2, VPC, IAM, RDS, S3, Route 53, CloudWatch, ALB/NLB, and more.
Design and manage robust AWS network infrastructure including VPCs, subnets, routing tables, and network ACLs for high-availability and security.
Configure and optimize Route 53 for DNS management, failover strategies, and multi-region routing policies.
Deploy and manage API Gateways for REST and HTTP APIs, including authentication, rate limiting, request/response transformation, and integration with backend services.
Implement and manage AWS Load Balancers (Application Load Balancer, Network Load Balancer, and Classic Load Balancer) for traffic distribution, session management, and high availability.
Define and enforce AWS security policies including security groups, NACLs, WAF rules, and compliance requirements across network infrastructure.
Enforce AWS security best practices including least-privilege IAM policies, security group management, and network segmentation.
Monitor infrastructure health, costs, and performance; continuously identify and implement optimizations.
Lead cloud architecture reviews and contribute to Well-Architected Framework assessments.
Azure Infrastructure & Multi-Cloud
Design and provision Azure infrastructure and services, including virtual networks, Azure Virtual Machines, Azure Kubernetes Service (AKS), and managed databases.
Manage Azure IAM, resource groups, and implement security best practices across Azure environments.
Implement Infrastructure as Code for Azure using Terraform and Azure Resource Manager templates.
Integrate Azure services with AWS environments for hybrid and multi-cloud deployments where applicable.
System Administration (Linux & Windows)
Administer Linux-based systems (AWS Linux and Ubuntu) including kernel management, package management, user/group administration, permissions, and access control.
Configure and maintain Linux services, systemd, and daemon processes for reliability and performance.
Administer Windows Server environments including Active Directory integration, Group Policy, patching, and security hardening.
Manage both Linux and Windows across on-premises, cloud, and hybrid environments.
Implement configuration management and automation for consistent system provisioning and lifecycle management.
Amazon EKS (Elastic Kubernetes Service)
Design, deploy, and manage production-grade EKS clusters with a focus on security, scalability, and high availability.
Manage Kubernetes resources including Deployments, StatefulSets, DaemonSets, ConfigMaps, Secrets, RBAC, and Network Policies.
Implement and maintain cluster autoscaling (Cluster Autoscaler, Karpenter), node group management, and pod disruption budgets.
Integrate EKS with AWS services such as IAM Roles for Service Accounts (IRSA), AWS Load Balancer Controller, EBS/EFS CSI drivers, and AWS Secrets Manager.
Deploy, configure, and manage Istio service mesh on EKS, including traffic management, mutual TLS (mTLS), observability, and security policy enforcement.
Oversee Kubernetes upgrades, patching, and lifecycle management across environments.
ArgoCD & GitOps
Implement and maintain GitOps workflows using ArgoCD for continuous delivery to Kubernetes environments.
Design and manage ArgoCD Application and ApplicationSet configurations for multi-cluster and multi-environment deployments.
Establish GitOps best practices including environment promotion strategies (dev → staging → production), rollback procedures, and drift detection.
Manage ArgoCD RBAC, SSO integration, and security hardening.
Collaborate with development teams to onboard services into the GitOps delivery model.
CI/CD Pipelines (GitHub Actions & Jenkins)
Build, maintain, and optimize CI/CD pipelines using GitHub Actions and Jenkins for build, test, security scanning, and deployment workflows.
Configure and manage Jenkins infrastructure, including master/agent architecture, plugin management, and security hardening.
Design Jenkins declarative and scripted pipelines for complex multi-stage deployments across environments.
Integrate Jenkins with container registries, artifact repositories, testing frameworks, and deployment tools.
Develop reusable GitHub Actions workflows and composite actions to standardize pipelines across teams.
Create reusable Jenkins shared libraries and pipeline templates for consistency and maintainability.
Integrate pipelines with container registries (Amazon ECR), security scanning tools (Trivy, Snyk, etc.), and deployment tooling.
Implement pipeline best practices including secrets management, environment protection rules, and workflow approvals.
Monitor pipeline performance and drive improvements in build reliability and deployment velocity.
Container Development & Registry Management
Build, optimize, and maintain Docker containers with strong emphasis on Dockerfile best practices including multi-stage builds, minimal base images, layer optimization, and security hardening.
Design efficient container images that minimize size, reduce startup time, and optimize resource consumption.
Manage container image repositories using Amazon ECR, including image lifecycle policies, tagging strategies, image retention policies, vulnerability scanning, and access control.
Integrate container building and registry management into CI/CD pipelines, automating image builds, security scanning, tagging, and registry pushes.
Implement container security scanning and vulnerability detection to ensure image compliance and remediate security issues.
Mentor teams on container best practices, image optimization techniques, and secure containerization patterns.
AI-Assisted DevOps (Claude & AWS Kiro)
Leverage Anthropic Claude as an AI engineering assistant to rapidly generate, review, and refactor Terraform modules and AWS CDK stacks, reducing toil and accelerating infrastructure delivery.
Utilize AWS Kiro to automate and streamline infrastructure provisioning, SRE workflows, and cloud operations tasks through AI-driven assistance.
Apply AI tooling across the SDLC — from requirements and design through implementation, testing, deployment, and incident resolution — to improve team velocity and code quality.
Use Claude and Kiro to assist with SRE work including runbook generation, automated root cause analysis drafting, postmortem write-ups, alert tuning, and on-call automation.
Employ AI-assisted tooling to monitor and optimize AWS costs — analyzing Cost Explorer data, identifying waste, rightsizing recommendations, and generating cost reports and savings proposals.
Establish team best practices and guardrails for responsible, secure, and effective use of AI coding and operations tools.
Continuously evaluate emerging AI-powered DevOps tooling and champion adoption of high-value capabilities across the engineering organization.
General DevOps & Collaboration
Mentor junior and mid-level engineers on DevOps practices, tooling, cloud infrastructure, and AI-assisted workflows.
Define and enforce standards for observability including logging, metrics, and distributed tracing (e.g., Prometheus, Grafana, OpenTelemetry, Datadog).
Participate in on-call rotations and lead incident response, root cause analysis (RCA), and postmortem processes.
Champion a culture of automation, reliability, and continuous improvement across the organization.
Collaborate with security teams to implement DevSecOps practices throughout the SDLC.
REQUIRED SKILLS
5+ years of experience in a DevOps, Site Reliability Engineering (SRE), or Cloud Infrastruc

Work arrangement
Hybrid