Senior DevOps / Release Engineer

Trend Micro•Austin, TX

3d•Hybrid

About The Position

TrendAI, the enterprise business unit of Trend Micro, is seeking a Senior DevOps / Release Engineer to own the CI/CD, build, release, and infrastructure backbone for an on-premises network security appliance delivered as physical hardware and virtual editions. The appliance is a large Java monolith built through Ant, primarily gated by GitHub Actions, with legacy Jenkins jobs to be retired. The role will mature existing production AI-assisted pull-request tooling while modernizing build and lab infrastructure and supporting reliable physical and virtual release cycles. It is a senior individual-contributor position with broad autonomy over tooling and infrastructure decisions. As a secondary responsibility, the engineer will extend CI/CD and infrastructure practices to companion Go and Node microservices deployed to AWS using Terraform/Terragrunt and the Serverless Framework. The role works across engineering, QA, and release management, with an emphasis on eliminating manual toil, strengthening release gates and security, documenting operational practices, and applying AI-assisted automation with appropriate human review. The position is listed as on-site / hybrid in Austin, Texas. Trend Micro offers benefit options for employees and their families. Work authorization must not require current or future employment-based visa sponsorship.

Requirements

At least 5 years of professional experience in DevOps, release engineering, build engineering, or Linux systems administration supporting a production software product; on-premises hardware or virtual appliance experience is described as ideal.
Strong Bash and Python scripting skills for automation, tooling, and operational glue code.
Hands-on experience authoring and maintaining GitHub Actions workflows, including workflow-dispatch/cross-repository orchestration, self-hosted runners, matrix strategies, and secrets management.
Working knowledge of JVM or other compiled-language build lifecycles, such as Ant or Gradle, and experience troubleshooting or decommissioning a legacy CI scheduler such as Jenkins in favor of GitHub Actions.
Linux systems administration fundamentals, including package and service management, disk and capacity planning, scheduled jobs, user and credential management, and troubleshooting production build/lab hosts.
GitHub administration experience managing repositories, branch protections, teams, and access at organization scale.
Experience triaging CI/CD failures under time pressure, distinguishing product regressions from environmental or infrastructure flakiness, and clearly communicating status to a broader engineering organization.
Familiarity with automated release tooling such as semantic-release or conventional commits, and release mechanics including build signing, versioning, and coordinating a release candidate through validation gates.
Demonstrated use of AI-assisted or agentic tools in operational or automation work, with judgment about autonomy and when human review is required before changes affect shared infrastructure.
Experience with security or quality scanning tooling, such as SAST or SCA, including triaging findings into actionable work.
Strong written communication, including incident/status updates, runbook documentation, and cross-team coordination during releases.
Working knowledge of Docker and container packaging for microservices.
BS in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.
Must be authorized to work in the U.S. without current or future employment-based visa sponsorship.

Nice To Haves

Prior ownership of a build farm or lab environment for an on-premises hardware/software appliance, including physical and virtual device provisioning.
Familiarity with network security appliance or embedded-systems release processes where release validation carries particular weight.
Experience with vulnerability/patch management workflows, including converting scanner output into tracked remediation work.
Experience administering static analysis platforms such as Coverity or Black Duck at the license, version, or user-management level.
Experience designing agentic or LLM-assisted operational workflows end to end, including automation and safety guardrails for regulated or compliance-sensitive environments.
Experience designing merge-queue or speculative-merge systems and automated flaky-test detection/quarantine.
Cloud infrastructure experience with AWS, Azure, or GCP, including infrastructure-as-code such as Terraform/Terragrunt or CloudFormation.
Container orchestration experience such as Kubernetes for deploying and operating microservices.
Experience owning or migrating artifact/container registries such as Harbor or JFrog Artifactory at organization scale.
Experience with the Serverless Framework or comparable AWS Lambda/API Gateway deployment automation.
Experience leading or contributing to a CI/CD platform migration, including sequencing a cutover while keeping release branches protected.

Responsibilities

Own and operate scheduled CI/CD pipelines for the on-premises appliance across main and release branches, including regression/BVT, integration, UI/functional, nightly, and on-demand workflows; investigate failures and distinguish product regressions from lab or environmental issues.
Author, refactor, and maintain GitHub Actions workflows and reusable actions, including cross-repository workflow dispatch, matrix builds, self-hosted runner targeting, and secrets and permissions practices.
Migrate remaining legacy Jenkins jobs to GitHub Actions ahead of the existing build toolchain’s end-of-life/end-of-support window.
Design and operate preventative branch gates, such as GitHub Merge Queue or equivalent, speculative/batch merging, and flaky-test quarantine, to keep main and release branches stable.
Administer GitHub organization structure, repositories, branch protections, teams, user access, and branch lifecycle cleanup, including associated builds and artifacts.
Modernize and maintain bare-metal and virtual build/lab infrastructure, including transition toward ephemeral runners, automated patching, and declarative infrastructure-as-code.
Manage appliance code signing and release packaging; sign builds for continuous regression use, track detection or definition-file updates through their PR lifecycle, and maintain consistent versioned build metadata across consuming systems.
Automate release-note and changelog generation from conventional commits and PR metadata, and coordinate fresh-install validation and scanning of physical and virtual targets against the latest signed build.
Operate and administer security and quality scanning pipelines, including SAST/SCA and vulnerability scanners; upgrade and administer the platforms and automate conversion of actionable findings into tracked engineering work.
Extend OIDC-based short-lived credential practices to appliance build and lab systems, replacing static secrets and passwords with short-lived, least-privilege identity mechanisms.
Expand production AI-assisted automation into operational tasks such as triage, log and report summaries, release-note drafting, remediation scripting, and routine playbooks, with human review gates before changes affect protected branches or production systems.
Track upstream infrastructure changes with adjacent engineering and platform teams and plan build/release adaptations proactively.
Partner with development, QA, and release management to scope pipeline needs, establish workflow conventions, and document runbooks for on-call and other engineers.
Secondarily support CI/CD and infrastructure for Go and Node microservices, including container build/publish pipelines, Terraform/Terragrunt environment provisioning, Serverless Framework deployment automation, and cloud infrastructure maintenance.