Devops Architect

Finastra • Atlanta, GA

3d • Hybrid

About The Position

Finastra is seeking a highly experienced Senior Platform Engineer (Level 4) for its Platform & Infrastructure team. The role is the primary implementation and operational owner of platform capabilities designed by the Platform DevOps Architect, supporting Finastra’s SaaS transformation. The successful candidate will build and maintain self-service infrastructure-as-code provisioning, GitOps deployment, CI/CD, observability, and container-governance capabilities. The role combines infrastructure engineering with SRE operations, including production incident response, post-incident reviews, and reliability improvements. The engineer works autonomously on complex problems, partners with the TP5 architect on design validation, and mentors junior platform engineers.

Finastra is a global financial services software company whose technology supports more than 7,000 customers, including 80% of the world’s top 50 banks, in over 110 countries. Applicants must live in the posted location or its immediate surrounding areas. Applicants residing in New York City or California will not be considered.

The role covers Terraform and Crossplane infrastructure delivery across Azure, AWS, and GCP; GitOps and Kubernetes deployment operations; shared CI/CD framework engineering; observability and SRE practices; Kubernetes and container platform operations; and collaboration, mentorship, and documentation. The posting describes hybrid working arrangements and lists benefits that may vary by location.

Requirements

• At least 8 years of professional experience in DevOps, platform engineering, SRE, or cloud infrastructure roles.
• Expert-level Terraform proficiency, including module design, state management, workspace strategies, remote backends, and testing frameworks such as Terratest.
• Strong hands-on Kubernetes experience, including cluster operations, workload configuration, RBAC, network policies, admission control, HPA, and upgrades.
• Demonstrated experience building and operating GitOps delivery platforms using ArgoCD, Flux CD, or equivalent tools.
• Proficiency in Helm chart authoring, templating patterns, library charts, and release lifecycle management.
• Hands-on experience building reusable CI/CD pipeline frameworks in Azure DevOps, GitHub Actions, GitLab CI, Jenkins, or equivalent.
• Experience integrating security scanning tools such as Trivy, Snyk, Checkov, or OWASP ZAP into pipelines as enforcement gates.
• Familiarity with OCI registries, Helm chart repositories, and artifact signing or provenance standards.
• Experience operating or contributing to an Internal Developer Platform such as Backstage or equivalent.
• Hands-on experience with at least two of Azure, AWS, or GCP, including compute, networking, managed Kubernetes, IAM, and secrets management.
• Understanding of cloud networking, including VNets/VPCs, private endpoints, DNS, ingress controllers, and service mesh fundamentals.
• Familiarity with FinOps practices such as resource tagging, cost attribution, and cloud-spend visibility tooling.
• Hands-on experience with OpenTelemetry, Prometheus, and Grafana for instrumentation, metrics collection, and dashboard authoring.
• Experience defining and implementing SLOs and error-budget alerting in production.
• Participation in on-call rotations and incident response, including triage, mitigation, and post-incident reviews.
• Familiarity with distributed tracing tools such as Jaeger or Tempo and log aggregation platforms such as Loki, ELK, or Splunk.
• Practical experience authoring and enforcing OPA/Gatekeeper admission-control policies in Kubernetes.
• Experience with container image security, including scanning, signing with Sigstore/Cosign, and provenance verification.
• Understanding of Kubernetes RBAC, network policies, and secrets management using HashiCorp Vault or cloud-native secret stores.
• Familiarity with financial-services security compliance standards such as SOC 2, ISO 27001, and DORA.
• Proficiency in at least one scripting or programming language: Python, Go, or Bash.
• Experience with Git workflows, code review, and infrastructure-as-code testing standards.
• Strong written communication skills for runbooks, ADRs, post-mortems, and technical documentation.
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS).
• HashiCorp Certified Terraform Associate or Professional.
• A cloud platform certification such as Azure AZ-104/AZ-305, AWS DevOps Engineer Professional, or GCP Professional DevOps Engineer.

Nice To Haves

• Experience with service mesh technologies such as Istio or Linkerd for east-west traffic security and observability.
• Hands-on experience with chaos engineering tools such as LitmusChaos or Chaos Monkey and resilience validation programs.
• Experience in financial services or regulated SaaS environments, including familiarity with compliance-as-code approaches.
• Contributions to open-source platform or infrastructure tooling projects.

Responsibilities

• Build, test, and maintain reusable Terraform modules and Crossplane compositions for compute, networking, storage, identity, and secrets management across Azure, AWS, and GCP.
• Implement and improve self-service environment provisioning, validating infrastructure-as-code modules against OPA and Sentinel policy guardrails and security requirements.
• Automate environment lifecycles, including cost-tagged resource creation, scheduled teardown, drift detection, and reconciliation.
• Write infrastructure tests using Terratest or equivalent frameworks and manage Terraform state backends, workspaces, and remote execution in production.
• Build and maintain ArgoCD application sets, app-of-apps patterns, and multi-cluster synchronization configurations.
• Author and version Helm charts, enforcing Kubernetes deployment standards such as resource requests and limits, security contexts, health probes, and pod disruption budgets.
• Implement deployment promotion workflows across development, staging, and production, including automated rollback triggers and canary analysis integrations.
• Operate and evolve the internal developer portal, including integrations with CI/CD systems, secret stores, and environment registries.
• Debug GitOps deployment failures and provide first-line deployment support to development squads.
• Design, build, and maintain shared CI/CD pipeline templates for build, test, scanning, and publishing workflows.
• Integrate container scanning, SAST/DAST, dependency vulnerability detection, and infrastructure-as-code analysis into pipelines as enforcement gates.
• Implement artifact management and promotion workflows, including OCI image tagging, Helm chart versioning, and artifact signing with Sigstore/Cosign.
• Monitor pipeline health, failure rates, and build performance, and improve reliability and developer feedback latency.
• Onboard development squads to shared pipeline templates, resolve integration issues, and refine templates based on feedback.
• Instrument platform components and shared services with OpenTelemetry tracing, structured logging, and Prometheus metrics.
• Build and maintain operational dashboards covering platform health, deployment frequency, error rates, and infrastructure utilization.
• Define and implement SLO alerting with error-budget burn-rate policies, tune alert thresholds, and participate in on-call rotations.
• Lead platform-layer incident response, including triage, mitigation, stakeholder communication, and post-incident review facilitation.
• Run chaos experiments to validate platform resilience and identify reliability gaps.
• Manage Kubernetes cluster operations, including node-pool scaling, upgrades, namespace provisioning, RBAC, and network-policy enforcement.
• Operate and update Kubernetes admission-control policies using OPA/Gatekeeper.
• Monitor container registry health, replication, image vulnerability reports, and access-control audits.
• Tune Kubernetes performance through resource quotas, limit ranges, horizontal pod autoscaling, and cluster autoscaler configuration.
• Operate Falco or equivalent runtime threat detection, review alerts, and escalate security events according to incident runbooks.
• Partner with the Platform DevOps Architect to validate implementation and provide operational feedback on architectural decisions.
• Mentor Level 3 Platform Engineers in cloud-native engineering, Kubernetes operations, infrastructure-as-code quality, and SRE practices.
• Participate in architecture design sessions and provide implementation-grounded input on feasibility, complexity, and operational risk.
• Contribute runbooks, operational guides, architecture decision records, and onboarding materials for development squads.

Benefits

• Unlimited vacation, subject to local regulations and business priorities.
• Hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave.
• Confidential one-to-one support through an Employee Assistance Program.
• Wellbeing Champions, Gather Groups, and monthly wellbeing events and initiatives.
• Medical, life, and disability insurance.
• Retirement plans and lifestyle benefits.
• Paid time off for volunteering and donation-matching opportunities.
• Inclusion communities open to employees who want to participate and contribute.
• Online learning and accredited courses through the Skills & Career Navigator tool.
• Global recognition program and regular employee surveys.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed