Cloud Infrastructure & DevOps Engineer

OptionMetrics•New York, NY

About The Position

OptionMetrics is seeking a Senior Cloud Infrastructure & DevOps Engineer to own and improve the company’s multi-account AWS environment, client-facing file-delivery platform, deployment pipelines, scheduled workflows, and related security controls. The role supports infrastructure used daily by clients and internal teams, with responsibility for reliability, automation, and thorough documentation. The engineer reports to the Head of IT Operations and works closely with Engineering, Product, Sales, and Customer Support. The role covers client file delivery through CrushFTP, AWS account and network foundations, TLS certificates, edge and application security, release engineering, scheduled workflow automation and monitoring, Infrastructure as Code, and cost and compliance controls. Responsibilities include operating highly available infrastructure across development, test, production, and DMZ environments; planning and executing documented production changes and deployments; supporting development teams with repeatable delivery processes; monitoring and resolving workflow failures; responding to infrastructure and security incidents; and converting manual work into automation. The engineer is expected to apply least-privilege access practices, maintain runbooks and architecture documentation, keep Jira tickets current, handle requests from Sales, Support, and Product, and coach junior engineers through documented, repeatable processes. The team emphasizes evidence-based discussion, respectful communication, visible progress updates, reviewed changes, and ownership of documentation and legacy systems. Success measures include certificate renewal or expiry alerting, published AWS network diagrams and runbooks, timely ticket updates, documented release plans for production deployments, declining scheduled-workflow failures, migration of workloads off the main account, Terraform-managed infrastructure with code review, strong tag compliance, retirement of legacy CrushFTP, and delegation of routine requests to junior engineers.

Requirements

At least 6 years of cloud or infrastructure engineering experience, including at least 4 years running production AWS.
Deep AWS experience with VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config, and CloudTrail.
Strong Linux administration skills.
Hands-on DevOps experience with CI/CD pipelines, release management, and supporting development teams through deployments.
Experience operating a job scheduler or workflow automation platform such as Stonebranch/OpsWise, Control-M, or Airflow, and troubleshooting failed pipelines.
Production experience with Terraform and CI/CD in GitHub Actions, including OIDC.
Knowledge of TLS/PKI, DNS (Route53 and external providers), and file transfer over FTP, FTPS, SFTP, SSH, and HTTP/HTTPS.
Security mindset, including least privilege, WAF and rate limiting, and incident response.
Scripting experience in Python or Bash.
Clear written and verbal communication skills, including the ability to produce actionable change notices, runbooks, and Jira write-ups.
Track record of delivering on commitments in an environment with frequent interruptions.

Nice To Haves

AWS certification such as Solutions Architect, SysOps, or Security.
SRE or platform engineering experience, including SLOs, observability, and on-call practice.
Experience with TeamCity, Site24x7, or Opsgenie.
Experience with containers and orchestration, such as Docker or ECS.
Experience with CrushFTP or other managed file-transfer platforms.
Cloudflare experience, including WAF, Turnstile, or access rules.
Experience building AI tools for operations, such as Claude skills or agents for runbooks and audits.
Experience with CrowdStrike and Active Directory.
Experience leading a multi-account AWS migration from start to finish.
Experience in financial data or fintech.

Responsibilities

Design, build, and operate highly available AWS infrastructure across development, test, production, and DMZ accounts.
Own and operate the CrushFTP client file-delivery platform, including production, test, and DMZ environments, account provisioning, and its eventual retirement.
Manage the multi-account AWS foundation, including Organizations, SSO, IAM, Transit Gateway networking, and migration of workloads off the main account.
Inventory TLS certificates, enable automatic renewal where possible, and implement alerts for expiring or mismatched certificates.
Manage Cloudflare and AWS WAF rules, rate limiting, bot mitigation, and incident response for customer-facing applications.
Plan and execute production changes with published notices covering scope, impact, rollback, and confirmation.
Perform and oversee production and non-production deployments, with a release plan, rollback path, and Jira record for each deployment.
Build, maintain, and troubleshoot CI/CD pipelines, and help development teams ship safely and repeatably.
Monitor and tune scheduled data workflows, troubleshoot failures, and drive failed jobs to root cause through weekly failure reviews.
Build monitoring, alerting, consolidated metrics, and logs that show system and workflow health.
Respond to infrastructure and security incidents by containing the issue, finding the root cause, and documenting it in Jira.
Automate recurring manual work using scripts, GitHub Actions, Infrastructure as Code, and AI tooling.
Apply least-privilege access practices, use expiring SSO roles, and avoid long-lived keys without a documented use case.
Maintain runbooks, architecture and network diagrams, and Confluence standards for owned systems, including legacy systems.
Keep owned Jira tickets updated at least every two weeks with a status, blocker, or next step.
Handle ad-hoc requests from Sales, Support, and Product by clarifying needs, committing to delivery dates, and delivering.
Coach junior engineers and hand off repeatable work with written runbooks.
Post daily written standup updates covering shipped work, next steps, and blockers, and participate in team rituals.
Ensure production changes receive code review, including urgent changes.