SI
Senior DevOps Engineer
SGA Inc.
- 🇺🇸 United States
- Hybrid
- Senior
- 6 hours ago
- $94.21 – $113.05 / hour
- Devops
- CI/CD
- Helm
- Maven
- Gradle
- npm
- Python
- Jenkins
- Kubernetes
- OpenShift
- ECS
- EKS
- IaC
- Ansible
- Airflow
- Terraform
- Snowflake
- Artifactory
- Node.js
- Renovate
- Prometheus
- Grafana
- Incident Response
- CyberArk
- Vault
- SonarQube
- AI
- Machine Learning
- RAG
- Docker
- Java
- FastAPI
- GitHub Actions
- GitLab CI
- Configuration Management
- Bash
- Nexus
- SAST
- Dynatrace
- OAuth2
- JWT
- TLS
- Trino
- Change Management
- pgvector
- Chroma
- MCP
- FinOps
- Angular
- CKA
- AWS
- GCP
- Azure
6 hours ago
Responsibilities :
- You will support the engineering platform that ~20 product teams across build and ship on — CI/CD pipeline standards, container and Helm baselines, environment and release management, observability, and the secure-by-default guardrails that keep the estate audit-ready.
- This is a hands-on lead role — you will write the automation, not just design it — combined with the technical authority to set standards that other teams adopt and trust.
- CI/CD Standardization
- Own and evolve shared pipeline templates (pipeline.yaml tasks for Maven, Gradle, npm/Nx, Python, container image build, and Helm chart publish)
- Consolidate legacy Jenkins/Harness pipelines onto the strategic declarative platform
- Drive build times, flakiness rates, and pipeline success rates as tracked operational metrics
- Kubernetes & Release Engineering
- Maintain Helm chart and values conventions across dev/SIT/UAT/prod and multiple data centres
- Standardize probes, resource sizing, autoscaling, config/secret injection, and rollback procedures
- Own promotion paths and zero-downtime release patterns on OpenShift/ECS and EKS
- Infrastructure as Code
- Ansible for the Airflow/VM estate; Terraform-style declarative provisioning where applicable
- Deliver reproducible developer environments and eliminate snowflake configurations and manual runbook dependencies
- Build & Dependency Governance
- Manage Artifactory repository policy, JDK 17/21 and Node 22/24 toolchain currency, and the shared Gradle dependency BOM
- Drive Renovate rollout and remediation of vulnerable or EOL dependencies across all 70+ repositories
- Observability & Reliability
- Own AppDynamics, Prometheus/Grafana, and log aggregation standards across the platform
- Define SLOs, alerting rules, capacity and cost visibility frameworks
- Lead production incident response, RCA, and permanent-fix follow-through for platform-level failures
- Security & Controls Automation
- Externalize secrets from code into CyberArk/Vault; enforce SonarQube quality gates and secure-coding checks in pipeline
- Own image hardening, scanning, and audit evidence generation for regulatory review and compliance
- Data & AI Platform Enablement
- Own deployment, scaling, and operational support for Spark batch, Iceberg/Starburst, Airflow, and JupyterHub
- Support GenAI/RAG service operations — including GPU/model gateway access patterns, vector store operations, agent-service scaling, and token cost/latency management
- Developer Experience
- Build and maintain golden-path templates for new services across all supported stacks
- Ensure local build parity with CI; maintain platform documentation so teams self-serve rather than raise tickets
- Technical Leadership
- Mentor engineers across the ERM programme; conduct design reviews and set engineering manifesto standards
- Champion branch hygiene, PR etiquette, green builds, and SonarQube compliance across the estate
- Represent the platform engineering function in architecture forums, risk governance, and regulatory audit engagements
- 12+ years in software/infrastructure engineering, with at least 5 years in a senior DevOps, SRE, or platform engineering role owning production CI/CD for a multi-team estate
- Deep, hands-on Kubernetes and Helm — authoring charts, debugging workloads in production, managing multi-environment and multi-region deployments (OpenShift experience strongly preferred)
- Expert container tooling — Docker, multi-stage builds, image hardening, private registry management
- Cross-stack build expertise — Maven and Gradle (Java 17/21), npm/Nx (Node 22+), Python packaging (uv/pip, FastAPI services); able to diagnose a broken build in any stack
- Pipeline-as-code — Tekton-style declarative pipelines, Harness, Jenkins, GitHub Actions or GitLab CI, including reusable template design
- Infrastructure as code and configuration management — Ansible and/or Terraform at production scale
- Strong scripting and automation in Python and Bash; comfortable writing production-grade operational tooling
- Artifact management and dependency governance — Artifactory/Nexus, SonarQube, SAST/SCA, image scanning
- Observability in production — AppDynamics/Dynatrace, Prometheus/Grafana, centralized logging; on-call and incident command experience
- Secrets and identity — CyberArk/Vault, OAuth2/JWT service-to-service authentication, certificate and TLS lifecycle management
- Data platform operational exposure — Kafka, Spark, Airflow, and at least one distributed query/lakehouse technology (Starburst/Trino, Iceberg, or equivalent)
- Proven legacy pipeline migration — track record of modernizing delivery pipelines without disrupting release cadence
- Excellent written communication — able to set standards that other teams willingly adopt and sustain
- Financial services or regulated-industry experience — familiarity with change management, segregation of duties, audit evidence, and regulatory reporting platforms
- GenAI/LLM production operations — RAG pipelines, vector stores (pgvector, Chroma), agent frameworks, MCP servers, model gateway integration, token cost and latency management
- FinOps / cloud and on-premises cost optimization
- Frontend delivery familiarity — Angular/Nx monorepos, Module Federation, design-system distribution
- Chaos engineering, DR and resiliency testing; performance and load engineering
- Certifications: CKA/CKAD, AWS/GCP/Azure professional-level, RHCE
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at https://sgainc.com/ .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy
Senior DevOps Engineer · SGA Inc.