DevOps Engineer

Clara Analytics

8d•$145,000 - $160,000•Remote

About The Position

We’re seeking a DevOps Engineer to cover Eastern Time Zone hours (7am - 3pm ET) and collaborate closely with the Data Engineering and Software Engineering teams under the supervision of the Director of DevOps, Infrastructure, and Security + the company's Chief Agentic & Technology Officer. This role helps to extend and maintain a highly automated, infrastructure-as-code DevOps practice supporting an analytics platform operating in a SOC 2 environment. The DevOps Engineer keeps the AWS and Kubernetes footprint healthy while shipping changes safely through Terraform, Helm, and GitLab pipelines, with a growing emphasis on AI/agentic automation via AWS Bedrock. Success means moving fast without compromising production stability or compliance posture.

Requirements

Bachelor's Degree or equivalent work experience in lieu of Degree.
5+ years of experience in DevOps and IAC (Infrastructure-as-Code)
Deep experience with AWS core services (IAM, VPC/networking, EC2, S3, EKS or ECS).
Strong operating knowledge of Terraform (modules, remote state, reading plans, etc.), Kubernetes + Helm, and GitLab CI or equivalent.
A change-safety mindset and comfort operating under compliance controls for SOC 2.
At least some exposure to LLM/AI tooling; agent workflows or MCP frameworks required, Bedrock is a plus.

Nice To Haves

Hands-on experience building agentic systems is preferred, but not required.

Responsibilities

Build and maintain automated infrastructure workflows in Terraform (IAM, EKS, EMR, Lambda, S3, KMS, RDS, security groups) including modules, remote state, and drift management.
Own and improve GitLab CI/CD pipelines: automated testing, security scanning, and safe/staged promotion with rollback.
Manage Kubernetes on EKS via Helm, including GitLab runners with KEDA.
Support AI/agentic workloads, Bedrock AgentCore runtimes, gateways, memory, and identity; MCP servers; agent deployment and observability.
Provision and manage AWS Bedrock access (least-privilege IAM, model enablement, cost/usage monitoring).
Handle access management and change requests within SOC 2 controls — least privilege, auditability, no console drift.
Operate Elasticsearch/OpenSearch and SFTP data pipelines; contribute to cost optimization and AI-assisted DevOps automation (agent skills, runbooks, self-service tooling).