DevOps Engineer

📋 Description

• • Own the full observability lifecycle for a rapidly scaling talent-tech platform that serves Fortune-500 PE-backed companies and hyper-growth startups alike. You will select, instrument, and tune tools such as AWS CloudWatch, Datadog, Sentry, and OpenTelemetry to surface not only CPU and memory metrics but also high-value APM traces, custom business KPIs, and real-user monitoring (RUM) that directly influence executive search outcomes.
• • Act as the security sentinel for our cloud estate. Build automated anomaly-detection rules that spot suspicious access patterns, privilege escalations, and potential data-exfiltration events within minutes, not hours. Ensure every alert is actionable by enriching it with context and runbooks, cutting mean-time-to-resolution (MTTR) for P1 incidents to <15 minutes.
• • Drive a culture of FinOps across engineering squads. Create a living cost-attribution model that maps every AWS line item back to product features and client engagements. Implement aggressive resource-tagging, rightsizing recommendations, Reserved-Instance arbitrage, and Spot-instance orchestration to reduce cloud spend by double-digit percentages without impacting SLAs.
• • Re-architect CI/CD pipelines that currently serve 40+ micro-services so that builds complete in <5 minutes and deployments reach production 10+ times per day with zero downtime. Integrate SAST/DAST, container scanning, and compliance gates directly into GitHub Actions/GitLab CI so that security is a first-class citizen, not a final hurdle.
• • Champion modern release strategies—blue/green, canary, and feature-flag rollouts—so that new functionality can be shipped to subsets of executive-search clients for early feedback while maintaining 99.9 % availability. Build self-service tooling that allows any developer to promote code with confidence.
• • Evolve our Infrastructure-as-Code foundation (Terraform/OpenTofu) to support multi-region, multi-account AWS topologies. Standardize modules for EKS, ECS Fargate, Lambda, RDS, and DynamoDB so that spinning up an environment for a new client engagement is a one-command exercise that takes <30 minutes.
• • Collaborate daily with product engineers, data scientists, and client-delivery teams to translate business requirements into resilient, observable, and cost-efficient infrastructure. Host weekly "lunch-and-learn" sessions to upskill peers on new tooling and best practices.
• • Establish auditable logging and retention policies that satisfy GDPR, CCPA, and SOC 2 Type II controls. Ensure PII is automatically redacted or encrypted at rest, and that evidence packages can be produced for auditors within 24 hours.
• • Participate in a lightweight on-call rotation (one week in six) where you’ll use the same dashboards and runbooks you built to keep the platform healthy. Post-incident reviews are blameless and focused on systemic fixes, not finger-pointing.
• • Contribute to the open-source community by upstreaming Terraform modules, Datadog integrations, or blog posts about cost-optimization patterns. Trueplatform sponsors conference attendance and open-source contributions as part of our commitment to engineering excellence.