Major Incident Manager

Sonar•Austin, TX

6d•Onsite

About The Position

As a Major Incident Manager at Sonar, you will contribute to tooling and services that automate and improve the software development lifecycle. You will monitor and observe production infrastructure services across on-premises and cloud environments, using and creating automation tools to improve reliability and reduce repetitive work. The role focuses on critical security and core infrastructure, infrastructure and policy as code, operational toil reduction, security pipelines, observability, and incident response. You will work with a team delivering solutions across Sonar’s offices and participate in an on-call rotation. The position follows Sonar’s in-office culture, with Mondays, Tuesdays, and Thursdays as anchor days. Candidates must be based in the location where the role is posted; relocation may be supported for the right person.

Requirements

Professional experience provisioning and managing complex infrastructure with Terraform, AWS CloudFormation, Ansible, Puppet, or similar tools.
Hands-on experience with AWS, GCP, Azure, or large-scale internal or private cloud infrastructure.
Practical experience defining, measuring, and reporting service level indicators (SLIs) and service level objectives (SLOs) for critical services.
Proven experience with observability platforms such as Prometheus/Grafana, ELK/EFK, Datadog, Splunk, or comparable systems.
Strong understanding of TCP/IP, DNS, load balancing, firewalls, and proxies sufficient to troubleshoot complex connectivity and latency issues.
Experience implementing security best practices through code, including vulnerability scanning, configuration hardening, secret management, and key rotation.
Practical experience managing large-scale identity and access management systems, including least-privilege policies and single sign-on.
Experience conducting or significantly contributing to post-incident reviews and prioritizing resulting engineering work, including error budget management.

Responsibilities

Monitor critical security infrastructure and core infrastructure components, maintain SLO-linked dashboards, triage high-severity alerts, and analyze error budget burn rates.
Write, review, and test code to automate infrastructure deployment, configuration, and security hardening using infrastructure as code and policy as code.
Identify and implement automation to eliminate repetitive operational tasks related to security patching, compliance checks, certificate rotations, and infrastructure maintenance.
Maintain and enhance DevSecOps security tools integrated into CI/CD pipelines, including static analysis, vulnerability scanning, and security configuration checks.
Maintain reliable, accurate logging, metrics, and tracing systems for infrastructure and security tools to support incident diagnosis.
Participate in the on-call rotation and implement preventative engineering actions based on incident post-mortems.
Improve runbooks through automation and reduce mean time to resolution for future incidents.