Sr. DevOps Engineer

The Clearing House•Liberty, NY

About The Position

This position focuses on CI/CD tooling for on-premise and AWS infrastructure. The Sr. DevOps Engineer works closely with developers, QC, and infrastructure teams to build in-house and cloud CI/CD pipelines that enable secure application builds and deployments, and maintains TCH’s current DevOps tooling. The successful candidate will contribute technical expertise to the design, testing, and implementation of applications; understand the broader internal and external environment; and communicate effectively with people at all levels of the organization, external clients, and vendors. The role calls for a detail-oriented team player who can work across organizational boundaries and support TCH and Tech & Ops strategic goals. The Clearing House (TCH) is a banking association and payments company owned by the largest commercial banks in the United States. It owns and operates core U.S. payments infrastructure and is working to modernize that infrastructure with a new real-time payment system. TCH is the only private-sector ACH and wire operator in the United States, clearing and settling nearly $2 trillion in U.S. dollar payments daily. Its services have supported the banking industry since 1853 and facilitate services including direct deposit, bill payments, and check image exchange.

Requirements

Advanced proficiency implementing and supporting Infrastructure as Code, including Terraform and Ansible, for complex multi-region cloud environments.
Expert-level management of Kubernetes, including EKS and AKS, cluster hardening, service meshes, and custom controllers.
Ability to design and scale self-healing pipelines using GitHub Actions, GitLab CI, or Jenkins for GitOps workflows.
Deep architectural knowledge of AWS and Azure, including cost optimization, compliance, security, and high availability.
Experience implementing full-stack telemetry with ELK Stack, Grafana, or Datadog.
Experience transitioning legacy monolithic architecture to scalable, secure microservices.
Experience integrating automated security scanning (SAST/DAST) and compliance-as-code into the development lifecycle.
Experience leading DevSecOps initiatives through automated vulnerability scanning, secret management, and IAM policy enforcement.
Experience with CI/CD tools including Jenkins, GitHub, GitHub Actions, Artifactory, SonarQube, Fortify, Black Duck, Xray, and AWS tools.
Proven track record working with application engineering teams, conducting code reviews, and establishing internal best practices.
Excellent written and verbal communication skills.
Experience mentoring and working with team members in an Agile environment.
Experience in a regulated environment with a Secure SDLC, including implementing checkpoints and processes for building and deploying code.
Strong technical expertise across a variety of platforms and ability to contribute to application design, testing, and implementation.
Detail orientation and ability to understand the broader internal and external environment and communicate effectively with organizational stakeholders and external clients.
Ability to work effectively across organizational boundaries and with external clients.
Bachelor’s degree or equivalent professional experience.
At least 5 years in a DevOps or SRE role, with a track record of managing high-traffic production environments.
Expert-level proficiency in AWS and/or Azure.
Deep expertise in Docker and certified Kubernetes skills.
Strong proficiency in Python, Go, or Ruby for creating custom automation tooling and APIs.
Advanced understanding of Linux system administration, kernel tuning, and networking protocols such as TCP/IP, HTTP/S, and DNS.
Understanding of modern security practices, including SOC 2 compliance, OIDC, and encryption at rest and in transit.

Responsibilities

Build and maintain in-house and cloud CI/CD pipelines for secure application builds and deployments.
Maintain TCH’s existing DevOps tooling.
Design and enforce Policy as Code so infrastructure consistently meets standards.
Integrate automated security gates, SAST/DAST, image scanning, and vulnerability management into CI/CD pipelines.
Manage sensitive financial data and credentials using enterprise-grade tools such as HashiCorp Vault and AWS Secrets Manager, and apply role-based access control.
Architect multi-region, disaster-recovery-ready AWS environments to minimize downtime for critical banking transactions.
Contribute to application design, testing, and implementation.
Work with application engineering teams, conduct code reviews, and establish internal best practices.
Mentor and collaborate with team members in an Agile environment.
Complete tasks and projects in a timely manner, demonstrate professionalism and effective teamwork, support strategic goals, and communicate with internal personnel, vendors, and external clients.