Responsibilities
DevOps Engineer (Cloud DevOps Engineer II)
We are seeking a highly motivated Cloud DevOps Engineer with deep expertise in cloud-native platforms, Kubernetes, container security, Infrastructure as Code (IaC), and CI/CD automation. This individual will work across multiple business units to deliver secure, scalable enterprise cloud solutions in a highly regulated environment.
The successful candidate will partner closely with cloud engineering, network, security, risk management, and application development teams to modernize platforms, automate operational processes, and strengthen container security capabilities. This role offers the opportunity to work with leading cloud technologies while developing innovative solutions that drive business outcomes.
Key Responsibilities
- Design, deploy, administer, and optimize containerized environments using Kubernetes, Google Kubernetes Engine (GKE), Azure Kubernetes Service (AKS), or equivalent platforms.
- Develop and maintain secure, scalable cloud-native architectures and automation frameworks.
- Build and enhance CI/CD pipelines using GitHub Actions, Jenkins, and related technologies.
- Develop Infrastructure as Code solutions using Terraform, ARM, Bicep, and similar tools.
- Implement and support microservices architectures, service meshes, ingress controllers, and API integrations.
- Monitor containerized environments and optimize platform performance, stability, and utilization.
- Create and maintain security tools, scripts, and automation workflows that improve operational efficiency and incident response.
- Conduct security assessments, vulnerability reviews, and remediation activities for containerized workloads.
- Implement container image security controls including scanning, signing, provenance validation, attestations, and policy enforcement.
- Manage container image lifecycle processes, including approved base images, registry governance, versioning standards, retention policies, and image deprecation.
- Integrate Software Bill of Materials (SBOM) generation, validation, analysis, and storage into CI/CD workflows using SPDX and CycloneDX standards.
- Develop compliance and governance policies that align with organizational and regulatory requirements.
- Support incident response, root-cause analysis, and post-incident improvement initiatives.
- Create and maintain technical documentation, standards, procedures, and operational runbooks.
- Develop, test, and maintain Disaster Recovery (DR) and Business Continuity Planning (BCP) processes.
- Provide technical guidance to development and operations teams regarding secure containerization practices and cloud-native security controls.
- Stay current with emerging cloud, security, and DevOps technologies and industry best practices.
Required Qualifications
Technical Experience
- 3+ years of experience with Google Cloud Platform (Google Cloud Platform).
- 3+ years of experience with Kubernetes, GKE, AKS, Docker, Podman, or equivalent container technologies.
- Experience developing and supporting CI/CD pipelines using GitHub Actions, Jenkins, or similar tools.
- Experience implementing Infrastructure as Code (IaC) using Terraform, ARM, Bicep, or comparable technologies.
- Strong understanding of DevOps and Platform Engineering principles.
- Experience with Google Cloud services including Cloud Run, GKE Autopilot, Anthos Service Mesh, and related services.
- Strong scripting and programming experience using Python, Go, Bash/Shell, Java, Node.js, or similar languages.
- Experience writing and consuming REST APIs.
- Experience developing and maintaining Helm Charts.
- Strong understanding of Kubernetes resource types, deployments, services, roles, policies, and controllers.
- Experience implementing Kubernetes networking and security technologies including Network Policies, Service Meshes, Certificate Management, and Ingress Controllers.
- Familiarity with cloud SDKs and command-line interfaces.
Container Security & Governance
- Experience generating, consuming, validating, and managing Software Bill of Materials (SBOMs) using SPDX, CycloneDX, or similar standards.
- Strong knowledge of container image lifecycle governance including OCI registries, versioning, immutable digests, promotion workflows, and retention policies.
- Experience implementing image security controls including vulnerability scanning, malware detection, secrets detection, image signing, provenance validation, attestations, and admission policies.
- Experience with container security tooling such as Aqua Security, Wiz, Trivy, Syft, Grype, Cosign, or similar enterprise platforms.
- Experience developing compliance policies and automated governance controls using tools such as Aqua Security, Wiz, Google Organization Policy, or equivalent.
Infrastructure & Operations
- Knowledge of monitoring and observability tools such as Datadog, Grafana, and Prometheus.
- Strong operating system administration knowledge, including Red Hat Enterprise Linux (RHEL) and Ubuntu.
- Understanding of cloud disaster recovery, business continuity, cloud interoperability, cloud provisioning, and administration practices.
- Knowledge of Public Key Infrastructure (PKI), certificates, encryption technologies, identity management, and network security principles.
Professional Skills
- Excellent written and verbal communication skills.
- Strong analytical, troubleshooting, and problem-solving abilities.
- Ability to work independently and collaboratively within cross-functional teams.
- Demonstrated initiative, accountability, and commitment to continuous improvement.
Preferred Certifications
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- HashiCorp Certified Terraform Associate
- CISSP, CISM, or related cybersecurity certifications
