Major Incident Manager

Sonar•Austin, TX

4d•Onsite

About The Position

Sonar is seeking a Major Incident Manager to contribute to tooling and services that automate and improve the software development lifecycle. The role focuses on monitoring and observing production infrastructure services across on-premises and cloud environments, and on building automation that improves reliability and reduces repetitive operational work. The position supports teams across Sonar’s offices and hubs. The Major Incident Manager monitors critical security and core infrastructure, uses dashboards tied to Service Level Objectives, triages high-severity alerts, and tracks error budget burn. The role also develops, reviews, and tests infrastructure and policy automation; eliminates operational toil; maintains security tools in CI/CD pipelines and observability systems; and participates in on-call response and post-incident engineering work. Sonar’s in-office culture has three anchor days—Mondays, Tuesdays, and Thursdays. Candidates are expected to be based in the location where the role is posted, and relocation support may be available for the right person. Employment offers are contingent on background checks and reference verification. Applications submitted through agencies or third-party recruiters will not be considered.

Requirements

Professional experience provisioning and managing complex infrastructure with Terraform, CloudFormation, or similar tools such as Ansible or Puppet.
Hands-on experience with a major cloud provider such as AWS, GCP, or Azure, or with large-scale internal/private cloud infrastructure.
Practical experience defining, measuring, and reporting Service Level Indicators and Service Level Objectives for critical services.
Proven experience with modern observability platforms, such as Prometheus/Grafana, ELK/EFK, Datadog, Splunk, or proprietary systems.
Strong understanding of TCP/IP, DNS, load balancing, firewalls, and proxies to troubleshoot service connectivity and latency issues.
Experience implementing security best practices through code, including automated vulnerability scanning, configuration hardening, secret management, and key rotation.
Practical experience managing large-scale IAM systems, including least-privilege policies and single sign-on.
Experience running or significantly contributing to post-incident reviews and prioritizing resulting engineering work.

Responsibilities

Monitor critical security infrastructure and core infrastructure components.
Maintain dashboards tied to Service Level Objectives, triage high-severity alerts, and analyze error budget burn rates to guide prioritization.
Write, review, and test code to automate infrastructure deployment, configuration, and security hardening.
Treat infrastructure and security policies as software to promote consistency and prevent configuration drift.
Identify and implement automation for repetitive operational tasks, including security patching, compliance checks, certificate rotations, and infrastructure maintenance.
Maintain and enhance DevSecOps security tools integrated into CI/CD pipelines, such as static analysis, vulnerability scanning, and security configuration checks.
Maintain reliable logging, metrics, and tracing systems for infrastructure and security tools to support incident diagnosis.
Participate in the on-call rotation.
Turn incident root causes into preventative engineering measures, improve runbooks through automation, and reduce Mean Time To Resolution.
Run or significantly contribute to post-incident reviews and prioritize resulting engineering work.