Lead DevOps Engineer

EverOps•San Francisco, CA

2d•Remote

About The Position

EverOps is hiring a Lead DevOps Engineer to embed with a customer engineering team through its U.S.-Based Virtual Operating Center. The role focuses on building and maturing the infrastructure engineering capability that supports customer deployments across new and existing AWS environments. It combines hands-on cloud engineering with technical leadership, team development, and the creation of scalable infrastructure practices. The engineer will design, provision, secure, and operate AWS infrastructure, establishing foundations, security standards, deployment patterns, and operational practices for reliable and repeatable customer deployments. The work spans AWS architecture and networking, application platforms, databases, production operations, infrastructure as code, CI/CD, observability, security, and disaster recovery. The role also supports infrastructure migrations and modernization, including planning and safely executing changes to production workloads. The successful candidate will assess unfamiliar environments and existing engineering practices, identify technical and operational risks, prioritize improvements, and drive deliverables independently. They will partner with application engineers, security and networking teams, customer stakeholders, and EverOps colleagues; mentor engineers; establish standards and processes; and improve security, reliability, operational readiness, and delivery maturity.

Requirements

At least 7 years of professional experience in DevOps, Cloud Engineering, SRE, Infrastructure Engineering, or a related discipline, including significant production AWS experience.
Deep hands-on experience designing, operating, securing, troubleshooting, and improving production AWS workloads and infrastructure.
Strong knowledge of TCP/IP, routing, subnetting, DNS, NAT, firewalls, VPNs, proxies, load balancers, security groups, network ACLs, and AWS networking services.
Production experience with VPC architecture, Transit Gateway, Route 53, ALB/NLB, PrivateLink/VPC endpoints, VPN connectivity, and multi-account or hybrid-network environments.
Experience designing and operating multi-account AWS environments, including AWS Organizations, account provisioning, cross-account access, centralized networking, and security governance.
Experience building and maintaining infrastructure platforms for repeatable application and customer deployments across multiple environments.
Experience providing technical leadership, mentoring engineers, establishing engineering standards, and coordinating infrastructure delivery across concurrent initiatives.
Ability to define reusable infrastructure patterns, automate environment provisioning, and establish secure, scalable AWS deployment practices.
Demonstrated experience improving DevOps maturity, infrastructure standardization, deployment practices, operational readiness, change management, incident response, and production reliability.
Strong understanding of AWS security best practices, IAM, least-privilege access, network security, encryption, secrets management, infrastructure hardening, and secure configuration management.
Experience supporting data-center, hosted-infrastructure, lift-and-shift, re-platforming, or cloud-modernization migrations involving live production workloads.
Advanced proficiency with Terraform and experience managing production infrastructure through version-controlled infrastructure as code.
Strong Linux systems administration, security hardening, and troubleshooting skills, including maintaining and modernizing production environments.
Production experience with Docker and container orchestration platforms such as ECS, EKS, or Kubernetes.
Experience designing, securing, and operating CI/CD pipelines using GitHub Actions, Jenkins, Argo CD, or similar platforms.
Experience implementing and improving monitoring, logging, metrics, alerting, and operational visibility using Datadog, Prometheus, Grafana, CloudWatch, or comparable tools.
Strong scripting ability using Python, Bash, or similar languages to automate infrastructure, security, and operational workflows.
Experience supporting business-critical production environments where uptime, security, change control, incident response, and operational discipline matter.
Ability to independently assess unfamiliar environments, identify priorities, define a path forward, and execute with minimal supervision.
Ability to communicate technical risks, dependencies, tradeoffs, and recommendations clearly to engineers, technical leadership, and cross-functional stakeholders.

Nice To Haves

Experience in payments, financial services, banking, or another highly regulated, high-transaction environment.
Experience implementing security controls and operational practices aligned with PCI DSS, SOC 2, CIS Benchmarks, NIST, or similar frameworks.
Experience with AWS Organizations, Control Tower, Security Hub, GuardDuty, Config, CloudTrail, Inspector, or similar cloud governance and security services.
Experience conducting infrastructure, DevOps, or security maturity assessments and translating findings into prioritized engineering roadmaps.
Experience establishing or scaling infrastructure engineering teams, defining responsibilities and practices, mentoring team members, and improving delivery capacity.
Experience owning end-to-end infrastructure migrations, including discovery, dependency mapping, rehearsal, cutover, rollback, and stabilization.
Hands-on experience designing and implementing AWS disaster recovery environments, replication strategies, recovery runbooks, and RTO/RPO objectives.
Familiarity with infrastructure supporting Aurora/MySQL, PostgreSQL, Cassandra, or other distributed data platforms.
Experience with GitOps and pull-request-driven infrastructure workflows using tools such as Atlantis, Terraform Cloud/Enterprise, Scalr, or Argo CD.
Experience building internal platforms that standardize deployment, observability, secrets management, and infrastructure consumption.
Experience improving cloud cost visibility, resource utilization, infrastructure efficiency, and cost optimization without compromising security or reliability.
Experience using AI-assisted engineering tools to improve infrastructure troubleshooting, automation, operational efficiency, and engineering delivery.
AWS Certified Solutions Architect – Professional, AWS Certified Advanced Networking – Specialty, AWS Certified Security – Specialty, CKA, or similar advanced certifications.

Responsibilities

Help build and develop an infrastructure engineering team by establishing technical expectations, mentoring engineers, and creating repeatable delivery processes.
Design, provision, and maintain secure, scalable AWS account structures, landing zones, networking foundations, access controls, and provisioning workflows.
Partner with application and customer engineering teams to provision, configure, and maintain infrastructure for customer deployments across AWS accounts.
Develop reusable Terraform modules, infrastructure templates, deployment patterns, and engineering standards.
Assess DevOps practices, infrastructure management, operational procedures, and engineering workflows; identify gaps, reduce technical debt, and implement improvements.
Improve cloud security through infrastructure hardening, least-privilege access, IAM practices, network segmentation, secrets management, vulnerability remediation, and secure configurations.
Provide hands-on engineering support for migrating and modernizing production workloads from legacy hosted infrastructure into AWS.
Diagnose and resolve connectivity, routing, DNS, firewall, VPN, load-balancing, security-group, and hybrid-networking issues.
Assess undocumented or partially documented environments, identify dependencies and blockers, and develop practical migration plans and technical workstreams.
Design, build, troubleshoot, secure, and improve production AWS environments using infrastructure as code and architectural standards.
Identify and remediate risks associated with legacy infrastructure and operating systems, supporting migration to modern platforms.
Implement and improve CI/CD, monitoring, observability, secrets management, configuration management, and deployment automation.
Design and implement AWS disaster recovery capabilities, including infrastructure, replication dependencies, recovery procedures, and runbooks.
Establish and maintain standards for monitoring, deployment validation, change management, incident response, production support, and operational reliability.
Support migration rehearsals, rollback planning, production cutovers, validation, and post-migration stabilization.
Define and execute technical deliverables independently, surface risks early, and drive issues to resolution.
Produce architecture documentation, infrastructure standards, migration plans, operational runbooks, dependency maps, and knowledge-transfer materials.
Provide technical guidance, mentoring, and direction to customer engineers and EverOps team members on complex infrastructure decisions.