Devops Engineer SR

About the role

The Cloud Engineering team builds the foundation that every engineering team at Sagent runs on. We design and deliver internal platforms and products that make shipping to production fast, secure, and repeatable. Our team builds and operates shared infrastructure capabilities including a self-service Internal Developer Portal, a centralized CI/CD platform, reusable infrastructure modules, and policy-as-code enforcement that enables teams to move quickly without sacrificing safety.

Responsibilities

• Operate and improve multi-region GKE clusters hosting hundreds of microservices across multiple environments from development through production
• Manage the Kubernetes platform layer: Istio service mesh, cert-manager, external-dns, RBAC, HPA/KEDA autoscaling, HashiCorp Vault secret injection, and Helm-based deployments
• Develop and maintain Terraform modules across multiple IaC repositories covering GKE, networking (Shared VPC, Cloud NAT, Private Service Connect), Cloud SQL, Cloud Storage, Dataproc, Cloud Composer, Vault, and web hosting
• Support Confluent Kafka infrastructure including Connect workers with JDBC source connectors, consumer group health monitoring, and Kafka-lag-based autoscaling with KEDA
• Manage Redis Enterprise clusters on Kubernetes with operator-managed lifecycle and replication
• Operate the observability stack: Grafana Cloud (Alloy, Loki, Mimir, Tempo, Pyroscope via Private Service Connect), kube-prometheus-stack, Google Managed Prometheus, OpenTelemetry Operator/Collector, Beyla, and Kubecost
• Harden cluster security posture: NetworkPolicies, Pod Security Standards, admission policy enforcement, CrowdStrike Falcon, Lacework, kube-bench, and cert-manager with Let’s Encrypt ACMES
• Manage data infrastructure including Cloud SQL (PostgreSQL), Dataproc (Spark), Cloud Composer (Airflow), Matillion CDC pipelines, Snowflake, and BigQuery
• Manage DNS across multiple providers (Azure DNS, Cloudflare, GCP Cloud DNS) via external-dns, and support Azure APIM and Cloudflare CDN/WAF
• Partner directly with application development teams to troubleshoot deployment failures, tune resource limits and autoscaling, and resolve Kafka consumer lag and connectivity issues
• Contribute to the Internal Developer Portal (Backstage) and internal CLI tooling that enables self-service for product engineers

Requirements

7+ years of cloud or infrastructure engineering experience

Strong production experience with GKE, VPC networking, IAM, Cloud SQL, Cloud Storage, and Artifact Registry

Advanced Terraform experience, including reusable module design, state management, and multi-environment patterns

Production Kubernetes expertise: Helm chart development and management, RBAC, resource tuning, and troubleshooting workloads at scale

Hands-on experience with Istio service mesh: sidecar injection, mTLS, VirtualServices, AuthorizationPolicies, and traffic management

Understanding of CNI fundamentals (Cilium/Dataplane V2), east-west traffic flows, and network segmentation

Experience with CI/CD pipeline development (Azure DevOps YAML pipelines or equivalent) and trunk-based development workflows

Hands-on experience with secrets management, including HashiCorp Vault (Kubernetes auth, agent injection) and GCP Secret Manager

Proficiency in scripting (Bash, Python, or Go) with the ability to write production-quality automation and tooling

Strong security mindset with experience implementing least-privilege IAM, certificate management, and policy-driven controls

Clear and effective communicator able to work across infrastructure and application development teams

Qualifications

Nice to Have:

• Experience with event-driven architectures and Apache Kafka (Confluent Platform, Connect, consumer group management, KEDA-based scaling)
• Experience with Redis Enterprise on Kubernetes (operator-managed clusters, Active-Active replication)
• Familiarity with Grafana Cloud observability stack (Alloy, Loki, Mimir, Tempo, Pyroscope)
• Experience with GCP data services: Dataproc (Spark), Cloud Composer (Airflow), BigQuery, Pub/Sub
• Familiarity with OPA/Rego or Kyverno for policy enforcement
• Familiarity with Azure APIM, Cloudflare, or multi-cloud DNS management
• Experience with Matillion or similar ETL/CDC tooling and Snowflake data warehouse
• Exposure to financial services or mortgage/loan servicing domain and associated compliance requirements
• Experience with Kubecost or similar FinOps tooling for cloud cost optimization
• Experience building or contributing to an Internal Developer Portal (Backstage)

Skills

Cloud Infrastructure Engineering

Kubernetes

Terraform

Istio

CI/CD Pipelines

Secret Management

Observability

Data Infrastructure

Networking

Benefits

As a Sagent Associate, you will be eligible to participate in our benefit programs beginning on Day #1!

• Remote/Hybrid workplace options
• Health Benefits
• Unlimited Flexible Time Off
• Family Planning Services
• Tuition Reimbursement
• Paid Family Leave
• 401(k) Matching
• Pet Insurance
• In-person and Virtual Social Experiences
• Career Pathing
• Focus Time Fridays

Pay

Competitive salary commensurate with experience

Schedule

Full-time

Company Information

Sagent is transforming the mortgage servicing industry by bringing the modern experience customers now expect from loan originations to loan servicing. Our platform lets customers manage their home-owning lives from anywhere while giving servicers lower costs, scale compliance, and higher servicing values through full market cycles. Sagent is a joint venture that combines Fiserv Inc.'s decades of market-leading fintech expertise with Warburg Pincus' skill in growing technology companies. We hire innovators and doers to disrupt the last and most complex frontier of lending and housing. We're growing fast and need you to help shape our future.

EEO Statement

Sagent is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.