Staff DevOps Engineer

This is a fully remote position, open to applicants in Arizona.

📋 Description

• Take ownership of and enhance AWS infrastructure, which encompasses ECS, VPC networking, Route 53, secrets management, and cloud security posture.

• Enhance cluster reliability, load balancing, auto-scaling, health checks, and disaster recovery processes.

• Sustain and grow Infrastructure-as-Code utilizing Pulumi or similar technologies.

• Design and standardize GitHub Actions CI/CD pipelines across codebases in Ruby, C#, Python, JavaScript, and TypeScript.

• Implement blue/green and canary deployments, automated rollback procedures, and secure pipeline gates.

• Establish observability through centralized logging, distributed tracing, metrics, dashboards, alerting, and SLOs/SLIs.

• Fortify cloud security by applying least-privilege IAM, encryption, network security, secrets management, vulnerability scanning, and cloud security posture management.

• Collaborate with Security and Compliance teams on SOC 2 evidence, audit trails, security controls, and remediation measures.

• Transition remaining Azure workloads to AWS, including containerization, traffic cutovers, and database migrations.

• Generate architecture decision records, runbooks, technical documentation, and operational standards.

• Mentor engineers in cloud-native architecture, Infrastructure-as-Code, secure-by-default design, and operational excellence.

• Work alongside Release and engineering teams on deployment quality gates, incident response, and post-incident reviews.

⛳️ Requirements

• Over 8 years of experience in DevOps, SRE, Platform Engineering, or related fields.

• Extensive hands-on experience with AWS, including ECS Fargate, RDS, DynamoDB, SQS/SNS, Lambda, API Gateway, EventBridge, CloudWatch, IAM, VPC networking, and S3.

• Demonstrated ability to enhance observability, uptime, reliability, and operational maturity within production cloud environments.

• Strong Infrastructure-as-Code proficiency managing multi-environment infrastructure, utilizing Pulumi or similar tools, and policy-as-code/IaC scanning.

• Experience in securing production cloud environments via least-privilege IAM, encryption, network security, secrets management, and addressing security findings.

• Robust CI/CD experience with GitHub Actions across various programming languages and repositories, inclusive of automated security scanning.

• Practical experience with Docker, including multi-stage builds, base image management, runtime configuration, health checks, and image lifecycle management.

• Solid understanding of networking fundamentals, such as VPC design, security groups, DNS, load balancing, and CDN configuration.

• Experience managing relational databases through RDS/Aurora, including performance tuning and backup strategies.

• Capability to work independently as the primary infrastructure owner while establishing standards and automation for future team expansion.

• Availability to work core business hours from 8:00 AM to 5:00 PM Arizona time, Monday through Friday.

• Must be eligible to work in the United States.

• Visa sponsorship is not available.

• Bonus: Experience in migrating workloads from Azure or another cloud platform to AWS.

• Bonus: Familiarity with Azure App Service, Azure SQL, Cosmos DB, Service Bus, Event Grid, Key Vault, or Application Insights.

• Bonus: Experience with event-driven architectures like EventBridge, SQS/SNS, or Kinesis.

• Bonus: Knowledge of Dagster, AWS Glue, or Step Functions.

• Bonus: FinOps experience, focusing on cloud cost optimization, reserved capacity, and right-sizing.

• Bonus: Experience with DevSecOps tooling such as Trivy, Dependabot, Snyk, Checkov, Prowler, Security Hub, or GuardDuty.

• Bonus: Experience supporting SOC 2 or other compliance programs.

• Bonus: Relevant certifications such as AWS Security Specialty, CISSP, or similar security credentials.

• Bonus: Experience with EdTech platforms or integration standards like Canvas LMS, PowerSchool, Clever, LTI, or OneRoster.

• Bonus: Experience in building and leading a DevOps or Platform Engineering team.

🏝️ Benefits

• A comprehensive total compensation package that includes medical, dental, vision, and optional benefits.

• Access to an on-site gym.

• Participation in virtual wellness programs.

• Availability of wellness coaching services.

• Flexible work options for select positions.

• Unlimited PTO for exempt roles.

• Additional “life happens” days off.

• Fully paid holiday week off during Christmas.

• Recognition and rewards for birthdays, significant milestones, outstanding work, and community service hours.

• Quarterly Town Hall meetings.

• Annual social events and traditions, including Halloween celebrations and Wellness Fairs.