Dev Ops Engineer

IONNA LLC • Raleigh-Durham, NC, NC

2d • Onsite

About The Position

IONNA is looking for a DevOps Engineer to own and evolve our cloud infrastructure, deployment pipelines, and platform reliability. The Technology team is a mission driven group committed to making an impact to address the generation problem of Climate Change. You'll be responsible for the full lifecycle of our AWS environments—from provisioning and cost management to security hardening and production operations. This is a high-impact role where your work directly affects the uptime and efficiency of our systems. You will collaborate with a cross-functional team of engineers, product managers, and security professionals to build and maintain the platform that powers IONNA's digital services. The Technology team also ensures that our company is using the most up-to-date systems to run IONNA's business, including SSO, cybersecurity systems, and cloud platform services. You will help provide technical guidance and recommendations to make sure these systems are fully implemented and supported for the company to operate smoothly.

Requirements

• A minimum of 4 years in a DevOps, SRE, or Platform Engineering role.
• Bachelor's degree in computer science or equivalent.
• Deep hands-on experience with AWS—EKS, MSK/Kafka, IAM, VPC networking, Secrets Manager, Lambda, S3.
• Demonstrable Terraform skills—modular design, state management, multi-account/multi-environment patterns.
• Production experience with Kubernetes—Helm, pod scheduling, RBAC, ingress controllers, operators.
• Proven Experience with GitOps tooling (ArgoCD, Flux, or similar).
• Proficiency with CI/CD pipelines (GitHub Actions preferred).
• Experience managing cloud budgets—cost allocation, optimization strategies, and executive-level reporting.
• Strong networking fundamentals—VPCs, security groups, load balancers, DNS, TLS.
• Comfortable scripting in Bash and at least one of Python or TypeScript.
• Strong problem-solving and analytical skills.
• Excellent communication and teamwork abilities.
• Ability to work in a fast-paced environment and meet deadlines.

Nice To Haves

• Experience with Apache Kafka operations—topic management, consumer groups, replication (MirrorMaker), SASL authentication.
• Familiarity with analytical databases (Apache Doris, ClickHouse, or similar columnar stores).
• Experience with Serverless Framework or SST for Lambda deployments.
• Background in cost engineering—FinOps practices, Savings Plans, Reserved Instances, spot instances.
• Exposure to EV charging protocols (OCPP, OCPI) or IoT infrastructure is a plus.
• Experience with Okta SSO integration and Cognito identity management.
• Experience with agile methodologies.

Responsibilities

• Maintain and extend our Terraform codebase across multiple AWS accounts.
• Manage Amazon EKS clusters—node group sizing, upgrade cycles, IAM roles for service accounts, and cost-saving schedules for non-production environments.
• Operate and tune Amazon MSK (Kafka)—broker configuration, authentication, topic management, and cross-cluster replication.
• Manage supporting AWS services including Lambda, S3, Secrets Manager, and VPC networking.
• Own our ArgoCD GitOps pipeline—environment promotion, sync ordering, and drift detection.
• Maintain Helm charts with environment-specific configuration and secret templating.
• Maintain and improve GitHub Actions workflows—image builds, PR validation, security scanning, and automated code quality checks.
• Improve developer tooling and streamline environment provisioning to reduce friction for engineering teams.
• Own the AWS cost posture—set budgets, track spend, and report on trends.
• Implement and maintain cost optimization strategies: right-sizing EKS node groups, scheduling non-production infrastructure scale-down, Reserved Instance/Savings Plan coverage, and S3 lifecycle policies.
• Partner with engineering leadership to forecast infrastructure costs for new services and capacity growth.
• Set up AWS Cost Explorer dashboards, budget alerts, and anomaly detection to catch runaway spend early.
• Manage IAM roles and policies—least-privilege access, cross-account roles, and service-specific permissions.
• Maintain VPC network isolation, security group rules, and bastion access controls.
• Partner with the Head of IT & Cyber Security to coordinate penetration testing, define security standards, and drive remediation across the platform.
• Develop and maintain documentation for infrastructure systems and processes.
• Collaborate with cross-functional teams to gather requirements and translate them into technical specifications.

Benefits

• Competitive salary commensurate with experience
• Comprehensive benefits package including health, dental, and vision insurance
• 401(k) matching program
• Professional development opportunities
• Collaborative and innovative work environment
• bonus programs
• medical, dental, vision, life, 401(K), and paid holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level