Senior DevOps / Release Engineer

Trend Micro•Austin, TX

1d•Hybrid

About The Position

TrendAI, the enterprise business unit of Trend Micro, is seeking a Senior DevOps / Release Engineer to own the CI/CD, build, release, and infrastructure backbone for an on-premises network security appliance shipped as physical hardware and virtual editions. The appliance is a large Java monolith built with Ant, primarily gated through GitHub Actions, with remaining legacy Jenkins jobs to be migrated. Production systems already include a blocking agentic pull-request reviewer and an AI-based PR responder; the role will mature and extend these systems. This senior individual-contributor role has broad autonomy over tooling and infrastructure decisions. Its primary focus is the appliance's physical and virtual lab release cycles, including preventative branch gates, signed releases, and the health and modernization of self-hosted runners and lab infrastructure. The engineer will also extend CI/CD and infrastructure practices to companion Go and Node microservices deployed to AWS using Terraform/Terragrunt and the Serverless Framework. The role emphasizes operational stability, security, release integrity, reducing manual work, and applying AI-assisted automation with appropriate human review. The team owns CI/CD, build, and release infrastructure for the network security appliance family and companion cloud microservices platform, working across engineering, QA, and release management. The position is on-site/hybrid in Austin, Texas. The role does not offer employment-based visa sponsorship; candidates must be authorized to work in the U.S. without the need for current or future sponsorship.

Requirements

At least 5 years of professional experience in DevOps, release engineering, build engineering, or Linux systems administration supporting a production software product; on-premises hardware or virtual appliance experience is ideal.
Strong Bash and Python scripting skills for automation, tooling, and operational tasks.
Hands-on experience authoring and maintaining GitHub Actions workflows, including workflow-dispatch and cross-repository orchestration, self-hosted runners, matrix strategies, and secrets management.
Working knowledge of JVM or other compiled-language build lifecycles, such as Ant or Gradle, and experience troubleshooting or decommissioning a legacy CI scheduler such as Jenkins in favor of GitHub Actions.
Solid Linux systems administration fundamentals, including package and service management, disk and capacity planning, scheduled jobs, user and credential management, and troubleshooting production build/lab hosts.
GitHub administration experience with repository, branch-protection, team, and access management at organization scale.
Experience triaging CI/CD failures under time pressure, distinguishing product regressions from infrastructure or environmental flakiness, and communicating status clearly across engineering.
Familiarity with automated release tooling such as semantic-release or conventional commits, and release mechanics including build signing, versioning, and release-candidate validation gates.
Demonstrated use of AI-assisted or agentic tools in operational or automation work, with judgment about autonomy and human review for shared infrastructure changes.
Experience with security/quality scanning tools, such as SAST or SCA, including triaging findings into actionable work.
Strong written communication, including incident/status updates, runbook documentation, and cross-team coordination during releases.
Working knowledge of Docker and container packaging for microservices.
BS in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.

Nice To Haves

Experience owning a build farm or lab environment for an on-premises hardware/software appliance, including physical and virtual device provisioning.
Familiarity with network security appliance or embedded-systems release processes where release validation is especially important.
Experience with vulnerability/patch-management workflows, including turning network scanner, SAST, or SCA output into tracked remediation work.
Experience administering static analysis platforms such as Coverity or Black Duck at the license, version, and user-management level.
Experience designing end-to-end agentic or LLM-assisted operational workflows, including guardrails for regulated or compliance-sensitive environments.
Experience designing merge-queue or speculative-merge systems and automated flaky-test detection/quarantine.
Cloud infrastructure experience with AWS, Azure, or GCP and infrastructure as code such as Terraform/Terragrunt or CloudFormation.
Container orchestration experience with Kubernetes or a comparable platform.
Experience owning or migrating artifact/container registries such as Harbor or JFrog Artifactory at organization scale.
Experience with the Serverless Framework or comparable AWS Lambda/API Gateway deployment automation.
Experience leading or contributing to a CI/CD platform migration, including sequencing cutover while protecting release branches.

Responsibilities

Own and operate scheduled CI/CD pipelines for the on-prem appliance, including regression/BVT, integration, UI/functional, nightly, and on-demand workflows across main and release branches; triage failures and distinguish regressions from lab or environmental issues.
Author, refactor, and maintain GitHub Actions workflows and reusable actions, migrate remaining legacy Jenkins jobs, and manage cross-repository orchestration, matrix builds, self-hosted runner targeting, and secrets and permissions.
Design and operate preventative branch gates, such as GitHub Merge Queue or equivalent, speculative/batch merging, and automated flaky-test quarantine.
Administer GitHub organization structure, including repositories, branch protections, teams, user access, and cleanup of builds and artifacts when branches are deleted.
Modernize and maintain bare-metal and virtual build/lab infrastructure, advancing ephemeral runners, automated patching, and infrastructure as code on direct-managed and shared hosts.
Manage code signing and release packaging for the appliance; sign builds for continuous regression use, track detection or definition-file updates through PRs, and maintain consistent versioned build metadata across consuming systems.
Automate release-note and changelog generation from conventional commits and PR metadata, and coordinate fresh installation of physical and virtual validation/scan targets against the latest signed build.
Run, maintain, and administer third-party security and quality scanning pipelines, including SAST/SCA and vulnerability scanners; upgrade platforms, administer licenses and users, and automate actionable findings into tracked engineering work.
Extend OIDC-based short-lived credentials to appliance build and lab systems, replacing long-lived static secrets and passwords with short-lived, least-privilege identity mechanisms.
Extend production AI-assisted automation to operational work such as triage, log/report summarization, release-note drafting, remediation scripting, and routine playbooks, with human review gates before actions affect protected branches or production systems.
Coordinate with engineering and platform teams to track upstream infrastructure changes and plan build/release adaptations.
Partner with development, QA, and release management to scope pipeline needs, establish workflow conventions, and document runbooks.
Extend CI/CD and infrastructure support to Go and Node microservices, including container build/publish pipelines, Terraform/Terragrunt environment provisioning, Serverless Framework deployment automation, and cloud infrastructure upkeep.