- Terraform and infrastructure as code: Experience managing AWS infrastructure for EKS, MSK, and shared services using reusable modules with typed inputs and validation, for_each, and provider aliases for cross-account deployments. Strong understanding of dependency graphs, plan-time unknowns, lifecycle controls, and replacement behavior. Proficiency in secure remote state and locking, dependency version management, declarative imports, moved blocks, state migrations, drift remediation, and module testing with terraform test or an equivalent framework.
- AWS architecture and security: Strong knowledge of multi-account architecture, VPCs, subnets, routing, DNS, security groups, private endpoints, and cross-account connectivity. Experience implementing least-privilege IAM, role trust policies, KMS encryption, secrets management, network isolation, security scanning, policy enforcement, and audit logging.
- Containers, Kubernetes, and Amazon EKS: Hands-on experience building Docker images and operating production EKS clusters, including cluster and node upgrades, add-on compatibility, pod networking, persistent storage, autoscaling, scheduling, and disruption management. Working knowledge of Kubernetes RBAC, pod security, EKS access entries, Pod Identity, and IAM roles for service accounts (IRSA).
- GitHub Actions and self-hosted runners: Experience developing reusable GitHub Actions CI/CD workflows with automated testing, security scanning, artifact management, environment protection, and OIDC-based AWS authentication. Experience operating self-hosted Kubernetes runners with Actions Runner Controller (ARC), including scale sets, ephemeral runners, autoscaling, image maintenance, resource and network configuration, and job isolation.
- Argo CD and application delivery: Experience managing declarative GitOps delivery with Argo CD and Helm or Kustomize, including application definitions, sync policies and waves, health checks, drift reconciliation, and environment promotion. Strong understanding of rolling, blue-green, and canary deployments, including verification and rollback procedures.
- Programming and automation: Proficiency in writing and maintaining scripts and automation using Bash, PowerShell, or a general-purpose programming language.
- Messaging and database operations: Experience operating Amazon MSK and Apache Kafka, including broker configuration, upgrades, partitions, replication, retention, capacity planning, secure connectivity, and producer and consumer behavior. Ability to maintain self-hosted RabbitMQ and MongoDB in non-production environments, including configuration, upgrades, persistent storage, access controls, resource management, and monitoring.
- Datadog and observability: Hands-on experience configuring Datadog infrastructure and Kubernetes monitoring, log collection, application performance monitoring (APM), and distributed tracing. Ability to manage dashboards and monitors through Terraform, define service-level indicators and objectives, and create actionable alerts for application health, Kafka consumer lag, RabbitMQ queues, and MongoDB performance and availability.
- Reliability and operations: Strong troubleshooting and performance analysis skills across infrastructure, networking, identity, Kubernetes, messaging systems, databases, and applications. Experience with incident response, operational runbooks, capacity and cost management, and tested backup and restore procedures.
- Bachelor’s degree in computer science, software engineering, or related fields (or equivalent work experience)
Additional experience (optional)
All experience listed below is optional. We welcome applications from candidates with strong core technical skills and a willingness to learn, including those with no prior experience in these areas.
- Working knowledge of the build, configuration, deployment, and runtime requirements of C#/.NET and Node.js applications.
- Experience with disaster recovery (DR) planning, including cross-region data replication, recovery time objectives (RTOs), recovery point objectives (RPOs), and failover and failback strategies.
- Familiarity with Pulumi, Amazon SQS, Amazon RDS, MySQL, or policy-as-code frameworks such as OPA or Sentinel.
The salary range for this role is $150,000 to $180,000 annually. In addition to salary, new hires may be eligible to receive stock options. The salary range shared is intended as a guide; the final salary offered may vary based on factors including the experience and skillset of the candidate. Our company is committed to providing a fair, equitable, and competitive salary that reflects the value an individual brings to the organization.