Devops Architect

Finastra Technology•Atlanta, GA

About The Position

Finastra is seeking a highly experienced Senior Platform Engineer (Level 4) for its Platform & Infrastructure team. The role is the primary implementation and operational owner of platform capabilities designed by the Platform DevOps Architect, supporting Finastra’s SaaS transformation. The engineer builds and maintains self-service infrastructure provisioning, GitOps deployments, CI/CD pipelines, observability, and container governance capabilities. The position combines infrastructure engineering with SRE operational practices, including production incident response, post-incident reviews, and reliability improvements. It involves autonomous work on complex engineering problems, close partnership with the Platform DevOps Architect to validate designs, and mentorship of junior platform engineers. The role covers platform implementation and infrastructure as code across Azure, AWS, and GCP; GitOps and Kubernetes deployment operations; shared CI/CD frameworks and security integrations; observability and SRE practices; Kubernetes and container platform operations; and collaboration, mentorship, and documentation. Applicants must reside in the posted location or its immediate surrounding areas. Applicants residing in New York City or California will not be considered. The posting notes that specific benefits may vary by location.

Requirements

At least 8 years of professional experience in DevOps, platform engineering, SRE, or cloud infrastructure roles.
Expert proficiency in Terraform, including module design, state management, workspace strategies, remote backends, and testing frameworks.
Strong hands-on Kubernetes experience covering cluster operations, workloads, RBAC, network policies, admission control, HPA, and upgrades.
Experience building and operating GitOps delivery platforms using ArgoCD, Flux CD, or equivalent.
Proficiency authoring and managing Helm charts, templates, library charts, and releases.
Hands-on experience building reusable CI/CD frameworks using Azure DevOps, GitHub Actions, GitLab CI, Jenkins, or equivalent.
Experience integrating security scanning tools into CI/CD pipelines as automated enforcement gates.
Familiarity with artifact management, including OCI registries, Helm chart repositories, and artifact signing or provenance standards.
Experience operating or contributing to an Internal Developer Platform such as Backstage or equivalent.
Hands-on experience with at least two major cloud providers among Azure, AWS, and GCP, including compute, networking, managed Kubernetes, IAM, and secrets management.
Understanding of cloud networking, including VNets/VPCs, private endpoints, DNS, ingress controllers, and service mesh fundamentals.
Familiarity with FinOps practices, including resource tagging, cost attribution, and cloud spend visibility.
Hands-on experience with OpenTelemetry, Prometheus, and Grafana for instrumentation, metrics, and dashboards.
Experience defining and implementing production SLOs and error-budget alerting.
Participation in on-call rotations and incident response, including triage, mitigation, and post-incident reviews.
Familiarity with distributed tracing tools and log aggregation platforms.
Practical experience authoring and enforcing OPA/Gatekeeper admission-control policies in Kubernetes.
Experience with container image security, including scanning, signing, and provenance verification.
Understanding of Kubernetes RBAC, network policies, and secrets management.
Familiarity with financial-services security compliance standards such as SOC 2, ISO 27001, or DORA.
Proficiency in at least one scripting or programming language: Python, Go, or Bash.
Experience with Git workflows, code reviews, and infrastructure-as-code testing practices.
Strong written communication skills for runbooks, architecture decision records, post-mortems, and technical documentation.

Nice To Haves

Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS).
HashiCorp Certified Terraform Associate or Professional.
Cloud platform certification such as AZ-104/AZ-305, AWS DevOps Engineer Professional, or GCP Professional DevOps Engineer.
Experience with Istio, Linkerd, or other service mesh technologies.
Hands-on experience with chaos engineering tools such as LitmusChaos or Chaos Monkey and resilience validation programs.
Experience in financial services or regulated SaaS environments, including compliance-as-code approaches.
Contributions to open-source platform or infrastructure tooling projects.

Responsibilities

Build, test, and maintain reusable Terraform modules and Crossplane compositions for compute, networking, storage, identity, and secrets management across Azure, AWS, and GCP.
Implement and iterate on the self-service environment provisioning platform, validating infrastructure-as-code modules against policy-as-code guardrails and security requirements.
Automate environment lifecycle processes, including cost-tagged resource creation, scheduled teardown, drift detection, and reconciliation.
Write infrastructure tests using Terratest or equivalent frameworks and maintain high-quality test coverage for infrastructure-as-code modules.
Manage Terraform state backends, workspace strategies, and remote execution configuration in production.
Build and maintain ArgoCD application sets, app-of-apps patterns, and multi-cluster synchronization configurations.
Author and version Helm charts for platform services and development workloads, enforcing Kubernetes deployment standards.
Implement deployment promotion workflows across development, staging, and production, including automated rollback triggers and canary analysis integrations.
Operate and evolve the internal developer portal, including integrations with CI/CD systems, secret stores, and environment registries.
Debug GitOps deployment failures and provide first-line deployment support to development squads.
Design, build, and maintain shared CI/CD pipeline templates that standardize build, test, scan, and publish workflows.
Integrate security tools into pipelines, including container image scanning, SAST/DAST, dependency vulnerability detection, and infrastructure-as-code analysis.
Implement artifact management and promotion workflows, including OCI image tagging, Helm chart versioning, and artifact signing.
Monitor pipeline health, failure rates, and performance metrics, and improve pipeline reliability and developer feedback latency.
Onboard development squads to shared pipeline templates, resolve integration issues, and refine templates based on feedback.
Instrument platform components and shared services with distributed tracing, structured logging, and metrics.
Build and maintain operational dashboards for platform health, deployment frequency, error rates, and infrastructure utilization.
Define and implement SLO alerting using error-budget burn-rate policies; tune alert thresholds and participate in on-call rotations.
Lead platform-layer incident response, including triage, mitigation, stakeholder communication, and post-incident reviews.
Run chaos experiments to validate platform resilience and identify reliability gaps.
Operate Kubernetes clusters, including node pool scaling, upgrades, namespace provisioning, RBAC, and network policy enforcement.
Operate and maintain Kubernetes admission-control policies as platform standards evolve.
Monitor container registry health, image vulnerability reports, replication, and access controls.
Tune Kubernetes performance through resource quotas, limit ranges, autoscaling, and cluster autoscaler configuration.
Operate runtime threat detection and review alerts, escalating security events according to incident runbooks.
Partner with the Platform DevOps Architect to validate implementation and provide operational feedback on architectural decisions.
Mentor Level 3 Platform Engineers in cloud-native engineering, Kubernetes operations, infrastructure-as-code quality, and SRE practices.
Participate in architecture design sessions and provide implementation-grounded feedback on feasibility, complexity, and operational risk.
Contribute runbooks, operational guides, architecture decision records, and onboarding materials for development squads.

Benefits

Unlimited vacation, subject to local regulations and business priorities.
Hybrid working arrangements.
Paid time off for voting, bereavement, and sick leave.
Employee Assistance Program and access to Wellbeing Champions and Gather Groups.
Medical, life, and disability insurance.
Retirement plans and lifestyle benefits.
Paid time off for volunteering.
Donation-matching opportunities.
Access to online learning and accredited courses through the Skills & Career Navigator tool.
Participation in the Finastra Celebrates global recognition program.
Employee surveys and inclusion communities open to employees.