Principal DevOps Engineer

This is a fully remote position, open to applicants in New York.

📋 Description

• Design a Kubernetes-native platform that represents broadcast infrastructure through custom resources.

• Direct the technical strategy utilizing Crossplane compositions and custom Go functions to automate provisioning across multi-account AWS environments and on-premise control rooms.

• Create, build, and sustain production-grade Kubernetes operators, controllers, and internal platform APIs using Go.

• Actively develop custom Crossplane providers to intricately integrate external enterprise platforms (such as NRCS, Venafi, and Infoblox) into our control plane, overseeing resource lifecycles and approval workflows.

• Spearhead the design of cloud networking, DNS strategies, and cross-account connectivity across hybrid environments, automating VPC topology and dynamic network routing.

• Collaborate closely with broadcast systems engineers, system integrators, and external vendors to bridge the divide between broadcast hardware and automated infrastructure.

• Compose RFCs, guide architectural decisions, mentor engineers, and establish robust CI/CD pipelines, testing strategies, and GitHub Actions automation.

• Manage the platform's authorization model, creating hierarchical RBAC systems, resource identifier schemes, and identity integrations that enforce fine-grained access control.

• Propel GitOps-based continuous delivery (Flux, Kustomize, Helm) and oversee configuration-as-code for compute fleets utilizing Puppet.

• Ensure comprehensive operational visibility by architecting observability and alerting stacks.

• Supervise the integration of remote desktop/VDI connectivity solutions, emphasizing session authentication, credential management, and gateway routing.

⛳️ Requirements

• Over 10 years of experience in designing, building, and managing production infrastructure and cloud-native platforms at an enterprise scale.

• Strong expertise in Go (systems-level programming, API servers).

• Advanced knowledge of the Kubernetes ecosystem, encompassing CRD/XRD generation, operators, informers, admission webhooks, and RBAC.

• Extensive production experience with Crossplane, including composite resources, composition functions, and specifically crafting custom Crossplane providers in Go to integrate external enterprise platforms.

• Significant experience with AWS multi-account architectures, cross-account networking patterns, and identity federation.

• Practical experience with GitOps tools, particularly Flux (HelmRelease, Kustomization) or ArgoCD for continuous delivery in Kubernetes.

• Hands-on experience with Puppet, including module development, PuppetDB, Hiera, and r10k.

• Familiarity with designing REST APIs using middleware patterns and modern authentication methods (OAuth/JWT).

• Strong focus on information security, including cross-account IAM trust chains, least-privilege policies, JWT token lifecycles, and secrets abstraction.

• Solid foundation in designing telemetry platforms using Grafana, Prometheus/Mimir, Loki, OpenTelemetry, and metrics collection agents (Alloy, Prometheus Node Exporter).

• Proficient knowledge of PostgreSQL, SQLite, or similar relational databases, including schema design, migrations, and query optimization.

• Exceptional problem-solving skills with a demonstrated ability to articulate architectural decisions to executives, engage with vendors, and produce clear technical documentation.

🏝️ Benefits

• Health insurance

• Dental insurance

• Vision insurance

• 401(k)

• Paid leave

• Tuition reimbursement

• A variety of discounts and perks