Senior DevOps Engineer

Position Summary

We are seeking a Senior DevOps Engineer with 10+ years of hands-on experience designing, building, and operating enterprise-grade CI/CD platforms across hybrid environments (AWS and on-premises).

Key Responsibilities

• Design, implement, and operate a standardized CI/CD framework supporting Dev, QA, PartnerLab, Staging, and Production
• Define promotion workflows with enforced quality gates and artifact immutability
• Establish PartnerLab as a dedicated integration and validation environment with no direct path to Production
• Ensure environment parity across AWS and on-prem systems
• Implement feature flags, canary deployments, blue-green deployments, and phased rollouts
• Enable automated rollback based on health checks, error rates, and SLO breaches
• Maintain full release traceability from commit through production
• Integrate unit, integration, regression, security, and performance testing into CI/CD pipelines
• Enforce automated quality gates before environment promotion
• Support manual validation workflows with controlled access, observability, and test artifacts
• Automate database schema versioning, migrations, rollbacks, and validation
• Build lower-environment refresh pipelines sourced from production data
• Enforce data masking and PII anonymization for non-production environments
• Validate data integrity and consistency post-refresh
• Define and enforce observability standards across logs, metrics, and traces
• Implement service health dashboards, alerts, and incident signals
• Support on-call readiness, incident response, and post-incident reviews
• Embed security scanning, secrets management, and access controls into pipelines
• Enforce least-privilege IAM, credential rotation, and artifact integrity checks
• Align CI/CD workflows with enterprise change management and audit requirements

Required Technical Skills

• AWS (mandatory): ECS, EKS, Lambda, RDS, IAM, CloudFormation, CloudWatch
• Terraform for modular, reusable, policy-compliant infrastructure
• CICD orchestration across hybrid AWS and on-prem topologies
• GitHub Enterprise & GitHub Actions (reusable workflows, templates, runners, environments)
• Containers & Orchestration: Docker image design, optimization, and security hardening, Kubernetes (EKS and on-prem) deployment patterns, scaling, and lifecycle management, Helm for deployment standardization
• Testing, Release Safety & Analysis: Automated testing frameworks (unit, integration, regression, performance), static and dynamic analysis tools (code quality, security, dependency scanning), feature flag platforms or equivalent internal capabilities
• Database & Data Management: Oracle and Microsoft SQL Server (mandatory), schema migration tooling with automated rollback, data masking, anonymization, and controlled refresh automation
• Observability & Reliability Engineering: Metrics, logging, and tracing with Prometheus, Grafana, Splunk, New Relic, CloudWatch, OpenTelemetry, ELK, SLO-driven alerting and deployment health evaluation (e.g., Uptrends, PagerDuty), automated failure containment and rollback strategies
• Security & Secrets Management: HashiCorp Vault, AWS Secrets Manager, or equivalent, secure pipeline design with controlled credential access, compliance-ready logging, approvals, and traceability

Soft Skills & Delivery Expectations

• Experience in regulated or financial services environments
• Strong documentation, runbooks, and architectural communication
• Proven collaboration with application, infrastructure, security, and QA teams
• Comfortable operating in enterprise, onshore delivery models

Pay

The national average salary range for this role is $120,000 - $165,000 in base pay, exclusive of any bonuses and benefits.

Benefits

We are proud to be an Equal Opportunity Employer. Other rewards and benefits may include: 401(k) match, Medical, Dental, Vision, Paid-Time-Off, etc. For more information, please visit careers.ascensus.com/#Benefits. Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.com email addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about the validity of a job posting, we strongly encourage you to apply directly through our website.