OptionMetrics - Cloud Infrastructure & DevOps Engineer
Requirements
• 6+ years in cloud or infrastructure engineering, including 4+ years running production AWS. • Deep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail. • Hands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments. • Experience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines. • Production experience with Terraform and CI/CD in GitHub Actions, including OIDC. • Solid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS. • A security mindset: least privilege, WAF and rate limiting, and incident response. • Scripting in Python or Bash. • Clear written and verbal communication: change notices, runbooks and Jira write-ups others can act on. • A track record of delivering on commitments in an environment with frequent interruptions. • What Will Make You Stand Out: • AWS Certification (Solutions Architect, SysOps or Security). • SRE or platform engineering experience, including SLOs, observability and on-call practice. • Experience with TeamCity, Site24x7 or Opsgenie. • Containers and orchestration (Docker, ECS). • Experience with CrushFTP or other managed file-transfer platforms. • Cloudflare experience (WAF, Turnstile, access rules). • Building AI tooling for operations, such as Claude skills or agents for runbooks and audits. • Experience with CrowdStrike and Active Directory. • Leading a multi-account AWS migration from start to finish. • Experience in financial data or fintech. • What Success Looks Like: • First 90 days: Every certificate is on auto-renewal or alerting. The AWS network diagram for all accounts is published. Runbooks exist for account provisioning and read-only access requests. No ticket you own goes more than 14 days without an update. • First year: Every production deployment follows a documented release plan, and scheduled workflow failures are trending down month over month. Workloads are off the main account. All new infrastructure is in Terraform with code review. Tag compliance is above 95%. Legacy CrushFTP is retired. Junior engineers handle routine requests from your runbooks.
Responsibilities
• Design, build and operate highly available AWS infrastructure across dev, test, prod and DMZ accounts. • Plan and run production changes with a published change notice covering scope, impact, rollback and confirmation. • Perform and oversee deployments to production and non-production environments, with a release plan, a rollback path and a Jira record for each. • Build, maintain and troubleshoot CI/CD pipelines, and help development teams ship safely and repeatably. • Monitor and tune business-critical scheduled workflows, troubleshoot failures, and drive failed jobs to root cause through the weekly failure review. • Build monitoring, alerting, consolidated metrics and logs that give stakeholders a clear view of system and workflow health. • Respond to infrastructure and security incidents: contain first, then find the root cause and document it in Jira. • Turn repeated manual work into automation using scripts, GitHub Actions, Infrastructure as Code and AI tooling. • Write and maintain runbooks, architecture and network diagrams, and Confluence standards for everything you own, including legacy systems. • Keep Jira current: every ticket you own shows a status, a blocker or a next step, updated at least every two weeks. • Take ad-hoc requests from Sales, Support and Product. Clarify the need, commit to a date, and deliver. • Coach junior engineers and hand off repeatable work to them with written runbooks. • Disagree, then commit. Push back with evidence. Once a decision is made, deliver it as agreed, or agree an alternative in writing. • Respect for colleagues. Criticize the problem, not the people or teams involved, in every channel. • Stay calm when escalated. Answer with status and next steps. • Make your work visible. Post a daily written standup update (Shipped / Next / Blockers) and take part in team rituals. • Review every change. Production changes go through code review, including urgent ones. • Own the whole job. Documentation, legacy systems and request handling are part of the role, not a distraction from it.
Benefits
• A collaborative environment where everyone's input makes a difference. • Paid time off: Vacation, Personal, Sick days, and Holidays. • Pre-tax commuter benefits (NJT, MTA, etc.) and 401k plan offered. • Full medical and dental insurance coverage. • $100,000 - $150,000 a year
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT