Senior DevOps Engineer

About the role

Ascensus is looking for a Senior DevOps Engineer with over 10 years of practical experience in designing, building, and managing enterprise-level CI/CD platforms in hybrid settings, including AWS and on-premises environments. This position will focus on standardizing platforms, enhancing delivery processes, ensuring reliability, and integrating security measures to facilitate efficient and low-risk software deployment.

Key facts

What you'll do

• Develop and maintain a standardized CI/CD framework for Development, Quality Assurance, PartnerLab, Staging, and Production environments.
• Create promotion workflows with strict quality checks and ensure artifact immutability.
• Set up PartnerLab as a dedicated environment for integration and validation, preventing direct access to Production.
• Ensure consistency between AWS and on-premises environments.
• Implement deployment strategies such as feature flags, canary releases, blue-green deployments, and phased rollouts.
• Enable automated rollback based on health metrics, error rates, and service level objective breaches.
• Maintain comprehensive release traceability from code commit to production deployment.
• Integrate various testing types, including unit, integration, regression, security, and performance testing into CI/CD pipelines.
• Enforce automated quality checks prior to environment promotions.
• Support manual validation processes with controlled access and observability.
• Automate database schema management, including versioning, migrations, rollbacks, and validations.
• Create pipelines for refreshing lower environments using production data while ensuring data masking and PII anonymization.
• Define observability standards across logs, metrics, and traces, and implement health dashboards and alerts.
• Support on-call readiness and incident response, including post-incident reviews.
• Integrate security measures into pipelines, including scanning, secrets management, and access controls.
• Enforce least-privilege IAM practices and credential management.
• Ensure CI/CD processes comply with enterprise change management and audit standards.

Requirements

• Extensive experience with AWS, including ECS, EKS, Lambda, RDS, IAM, CloudFormation, and CloudWatch.
• Familiarity with hybrid infrastructure involving on-premises VMs, bare metal, and internal networks.
• Proficiency in Terraform for creating modular and policy-compliant infrastructure.
• Experience with GitHub Enterprise and GitHub Actions for CI/CD orchestration.
• Knowledge of Docker for image creation and security hardening.
• Experience with Kubernetes (EKS and on-premises) and Helm for deployment management.
• Strong background in automated testing frameworks and static/dynamic analysis tools.
• Experience with Oracle and Microsoft SQL Server, including schema migration and data management.
• Familiarity with observability tools such as Prometheus, Grafana, and New Relic.
• Knowledge of security and secrets management tools like HashiCorp Vault or AWS Secrets Manager.
• Experience in regulated environments, particularly in financial services.
• Excellent documentation and communication skills, with a proven ability to collaborate across teams.

Nice to have

• Experience with feature flag platforms or similar internal capabilities.

Skills & tools

• AWS services and infrastructure management
• CI/CD tools and practices
• Containerization and orchestration technologies
• Automated testing and quality assurance methodologies
• Database management and data integrity practices
• Observability and reliability engineering tools
• Security compliance and secrets management

Practical notes

The expected salary for this position ranges from $120,000 to $165,000 annually, excluding bonuses and benefits. The actual salary may vary based on factors such as location, experience, and performance. Additional benefits may include a 401(k) match, medical, dental, vision insurance, and paid time off. Please visit careers.ascensus.com/#Benefits for more information.

Be cautious of employment scams. All official communications from Ascensus will come from @ascensus.com or @futureplan.com email addresses. We will never request payment or ask you to purchase equipment. If you have any doubts about a job posting's legitimacy, we encourage you to apply directly through our website.