Responsibilities
- Build Kubernetes-based systems supporting scientific services, ML pipelines, and platform workloads; including production hardening, RBAC, network policies, and Pod Security Standards
- CI/CD pipelines with GitHub Actions/GitLab CI implementing best practices: build attestations, SBOM generation, dependency scanning, and container image hardening
- Infrastructure-as-code with Terraform and Helm; policy-as-code guardrails (OPA/Kyverno/Checkov) with drift detection
- AWS cloud infrastructure: EKS clusters, IAM least privilege, VPC/PrivateLink networking, KMS/Secrets Manager, ECR, S3, and centralized logging/monitoring
- Platform tooling to streamline deployment, observability, and developer workflows, enabling self-service with secure defaults
- Reliability engineering: SLOs/SLIs, incident response, capacity planning, and performance optimization throughout the stack
- Software supply chain practices: artifact signing, registry governance and vulnerability management
- QA and testing infrastructure: static analysis and code quality gate enforcement in CI pipelines, automated end-to-end and browser-based regression test suites, ephemeral test environments for PR-based validation, and pre-merge quality checks
- Automation and tooling in Python or Go to improve infrastructure operations and integrate telemetry with observability platforms
Requirements
- Expertise in DevOps, SRE, Systems Engineering, or Platform Engineering in large scale cloud environments
- Expertise in deploying to cloud environments (AWS, GCP, etc) using infrastructure-as-code (Terraform, Helm) and containerization
- Deep experience with CI/CD systems (GitHub Actions, GitLab CI, or Jenkins) and GitOps practices
- Strong proficiency in Python/scripting languages for automation and tooling
- Strong understanding of Kubernetes operations: deployments, networking, storage, observability, and troubleshooting
Nice to Have
- SRE practices: observability platforms, chaos engineering, incident management
- Securing ML/AI pipelines (model registries, training clusters, inference gateways)
- Experience in regulated/audit-heavy environments (SOC 2, ISO 27001)
- Supply chain security maturity: SBOMs, image signing, SLSA concepts
- Administering static analysis platforms (custom quality profiles, security hotspot triage) and scaling browser-based test suites across parallel CI environments
- Prior startup/high-growth experience balancing velocity with reliability
