Senior Staff DevOps Engineer — Data Discovery & AI Governance

OneTrust•Atlanta, GA

6d•$165,000 - $247,500•Hybrid

About The Position

OneTrust is hiring a Senior Staff DevOps Engineer to join their Detect & Discover (D&D) team. This team is responsible for three product lines: Data Discovery, Privacy Automation, and AI Governance, serving thousands of enterprise customers across multi-cloud and on-premises environments. The role involves leading the infrastructure strategy for Kubernetes-based on-premises and cloud platforms, architecting automated worker node deployments, driving container-hardening initiatives, and ensuring the reliability, scalability, and security of the distributed scanning and classification platform. The engineer will also act as a technical leader, mentoring other engineers and collaborating with various teams.

Requirements

Bachelor's degree in Computer Science, Engineering, or a related technical field.
8+ years in DevOps, SRE, or Platform Engineering roles.
Expert knowledge of Kubernetes, Helm, Linux, Docker, and networking.
Strong working knowledge of Azure, AWS, and GCP, with specific depth in at least one.
Proficiency in Go and/or Python, plus Bash/Shell scripting for infrastructure automation and integrations.
Deep understanding of CI/CD pipelines (GitLab or similar), GitOps workflows, and infrastructure-as-code methodologies.
Experience with PostgreSQL, Elasticsearch, and distributed messaging systems (Apache Kafka, NATS).
Experience with security scanning, container image hardening, and vulnerability remediation in enterprise environments.
Experience supporting enterprise production environments and handling customer escalations.
Prior experience working in Agile/Scrum enterprise software development.
Excellent verbal and written communication and technical leadership skills.

Nice To Haves

Experience building and publishing B2B enterprise software on Azure Marketplace, AWS Marketplace, or GCP Marketplace.
Proven experience with Chainguard or other minimal, hardened container distributions for software supply chain security.
Experience with on-premises enterprise software deployments (K3s, microk8s, airgapped environments).
Familiarity with Temporal workflow orchestration or similar durable execution frameworks.
Prior exposure to MLOps methodologies, including model versioning, pipeline auditability, and AI asset discovery.
Experience with service meshes, Kubernetes operators, and AI-assisted operations.

Responsibilities

Architect and maintain production-grade Kubernetes platforms across cloud (AKS, EKS, GKE) and on-premises (K3s, microk8s) environments, owning the full lifecycle including cluster provisioning, upgrades, node pool management, and disaster recovery.
Develop and maintain automation using Helm, ARM templates, BICEP, Terraform, and CloudFormation to streamline worker node provisioning on Azure Marketplace, AWS Marketplace, and GCP, reducing customer setup complexity.
Lead the container-hardening program by adopting secure base images for distributed components and systematically reducing CVEs flagged by Vulnerability Scanners.
Maintain and improve CI/CD pipelines ensuring zero-downtime deployments, automated rollbacks, and full auditability, while driving GitOps practices and improving DevEx and infrastructure-as-code.
Design monitoring, alerting, diagnostics, and self-healing capabilities using Datadog, Loki, and Promtail, ensuring the platform is optimized for performance, cost, and high-throughput scaling.
Lead incident investigations, root cause analysis, and long-term remediation for production service interruptions, participating in on-call rotation and driving systemic fixes.
Mentor engineers, drive DevOps best practices across teams, and raise the technical bar for infrastructure engineering quality.