IT / DevOps Engineer

Enthought•Austin, TX

10d•Onsite

About The Position

We are hiring an IT & DevOps Engineer to be the person our Austin team and our globally distributed colleagues rely on for IT and infrastructure, and to build the automation that keeps the same work from coming back around. Most of your time goes to running Enthought's internal systems and the identity and access operations behind our customer project work. You are the primary US-hours point of contact when self-service and first-line support cannot resolve something. The rest of your time goes to internal DevOps at your manager's direction, building the shared infrastructure and tooling that consulting project teams use to provision and run their own project environments, with customer-facing deployment work as assignments require. Our IT and DevOps functions are deliberately blended: the same tooling, automation, and access models serve both, and you will work across the two. The work is hands-on, and the function is still taking shape, so the scope grows with what you make possible.

Requirements

Deep knowledge of Linux
Cloud infrastructure expertise
Identity and access design knowledge
Experience with GitHub, JumpCloud, Keycloak, Quay, AWS, and Google Workspace
Experience operating and maintaining infrastructure across AWS, containers, and virtualization
Experience with monitoring, patching, backup, and recovery
Experience building and maintaining infrastructure-as-code modules, project scaffolding, and CI/CD patterns
Experience diagnosing and resolving failures in automation and integrations
Experience with credential and service-account hygiene
Experience working with AI tools for operational work
Experience documenting built systems
Experience managing endpoint and hardware lifecycle, asset tracking, and software licensing
Experience improving self-service systems
Experience implementing and operating security standards and access architecture
Experience with secrets management, least-privilege configuration, container and runtime hardening, and infrastructure-as-code review
Experience evaluating software, libraries, and tooling against license, privacy, and vulnerability criteria
Experience conducting periodic access reviews and audits
Experience responding to incidents through investigation, containment, and remediation
Experience monitoring and optimizing cloud spend

Responsibilities

Own the day-to-day operation of Enthought's internal infrastructure and IT systems, applying deep knowledge of Linux, cloud infrastructure, and identity and access design to translate what our engineers and consultants need into systems that stay available, stay secure, and stay easy to work in.
Serve as the primary US-hours point of contact for IT and infrastructure requests that self-service and first-line support cannot resolve, so colleagues get unblocked quickly.
Run identity and access operations, including entitlement provisioning, onboarding, and offboarding across GitHub, JumpCloud, Keycloak, Quay, AWS, and Google Workspace, and verify that every departure closes out cleanly in all of them.
Operate and maintain infrastructure across AWS, containers, and virtualization, covering monitoring, patching, backup, and recovery.
Build and maintain the shared infrastructure-as-code modules, project scaffolding, and CI/CD patterns that consulting project teams use to provision and operate their own project environments. Review their infrastructure code, unblock them, and improve the shared tooling when it does not meet their needs.
Diagnose and resolve failures in the company's automation and integrations, and take ownership of integration reliability, including credential and service-account hygiene so that no automation depends on an individual's personal account.
Work agent-first, using AI tools as your default way to take on recurring operational work, and document what you build so that others can run and maintain it.
Manage endpoint and hardware lifecycle, asset tracking, and software licensing for the Austin office, and keep improving self-service so that routine requests resolve without engineering time.
Implement and operate the security standards and access architecture set by our InfoSec lead: secrets management, least-privilege configuration, container and runtime hardening, and infrastructure-as-code review. Our security work is practical and hands-on rather than compliance-led.
Evaluate software, libraries, and tooling against license, privacy, and vulnerability criteria, and give the approver a clear recommendation.
Conduct periodic access reviews and audits, remediate what they turn up, and respond hands-on to incidents through investigation, containment, and remediation. Security decisions that amount to accepting risk get escalated rather than made alone.
Take on customer-facing deployment, infrastructure, and support work as assigned, coordinating with our InfoSec lead on Japan-based engagements.
Monitor and help optimize cloud spend across the infrastructure in your care.