Role Overview
This is a dedicated platform ownership role. You will take full end-to-end responsibility for the
DevOps and infrastructure layer across all products. You will be the single point of accountability
for pipelines, environments, credentials, deployment reliability, financial cost governance, and
compliance posture. Beyond keeping the lights on, you will proactively leverage AI-driven tooling to
improve DevOps workflows and continuously raise the bar on what reliable infrastructure means.
About the role
You will own the complete infrastructure and DevOps layer for a growing SaaS company
running across multi-cloud infrastructure across major cloud providers — partnering directly
with the Lead Engineer and a distributed offshore engineering team. This is not a support role.
You are the primary point of accountability for pipeline reliability, credential hygiene,
observability, cloud cost governance, and compliance posture. You also serve as the company’s
infrastructure voice in financial and compliance conversations, owning the data that informs
leadership decisions on cloud investment and risk.
What you'll do
CI/CD & Deployment
Own all CI/CD pipelines across every application — consistent, documented, and not
dependent on tribal knowledge
Manage multi-cloud resource provisioning with Terraform or equivalent IaC tooling — version-
controlled and fully reproducible
Own secrets, credentials, and access management across all environments using enterprise
secrets management platforms
Set up repo creation, branching standards, and tooling for the distributed engineering team
Own cross-platform mobile application build pipelines (iOS and Android) for both app stores
Support the work, deployment, and maintenance of our active-active multi-cloud platform
Observability & Uptime (SLA: 99.99%)
Own SLA commitments for all production systems — 99.99% uptime target with documented
contracts and breach escalation paths
Define and maintain on-call rotation, and incident severity matrix
Maintain and evolve runbooks for all critical failure scenarios — executable by anyone on the
team, not just the author
Implement and operate the full observability stack: enterprise observability tooling, centralized
log aggregation, real-time alerting, and synthetic monitoring for all customer-critical paths
Own customer-facing and internal system health dashboards — surfacing uptime, error rates,
latency, and throughput in real time
Financial Operations & Cost Governance
Build and maintain FinOps dashboards surfacing cloud spend, resource utilization, and cost-per-
environment breakdowns
Implement financial controls: budget alerts, tagging enforcement, reserved instance planning,
and rightsizing across major cloud providers
Own the monthly cloud cost review process — flag anomalies, model savings scenarios, and
present findings to leadership
Track and report FinOps KPIs: cloud cost as a percentage of revenue, waste percentage, and
savings realized
Security & Compliance (SOC 2 / ISO 27001)
Own the infrastructure contribution to SOC 2 Type II and ISO 27001 — evidence collection,
control mapping, and audit readiness at all times
Conduct regular access reviews and enforce least-privilege IAM across all cloud environments
Work directly with the compliance team to respond to auditor requests, close findings, and
maintain continuous compliance posture
Implement and monitor infrastructure security controls: network segmentation, encryption at
rest and in transit, vulnerability scanning, and drift detection
AI-Driven Process Improvements
Identify DevOps workflows where AI tooling can drive measurable efficiency gains — pipeline
generation, intelligent incident detection, and automated runbook execution
Evaluate and pilot AI-assisted tools for infrastructure: anomaly detection on metrics streams,
LLM-assisted root cause analysis, and AI-generated IaC scaffolding
Document and share findings with the engineering team — serve as the infrastructure voice in
the company’s AI-first engineering culture
Qualifications
Hands-on experience with major cloud providers across multi-cloud environments —
provisioning, networking, IAM, and cost management
Terraform or equivalent IaC tooling — you write it, maintain it, and own it
CI/CD pipeline design and ownership using modern CI/CD platforms — you design it, maintain
it, and own it
Confident with .NET / C# application deployments
Secrets and credential management at scale using enterprise secrets management platforms
Multi-app, multi-environment deployment pipelines with consistent standards
Mobile build pipeline ownership for cross-platform mobile applications (iOS and Android),
including app store deployment automation
Production observability engineering: APM tooling, log aggregation, alerting pipelines, and
synthetic monitoring
SLA ownership experience — on-call processes, incident management, and runbook authorship
Demonstrated experience with FinOps practices: cloud cost dashboards, tagging, rightsizing,
and budget governance
Familiarity with SOC 2 or ISO 27001 control environments — evidence collection, access
reviews, and audit support
Comfortable working directly with a distributed offshore engineering team
Hands-on experience designing or operating active-active, multi-cloud production
environments — this is a core platform requirement, not a stretch goal
Proficiency in Go for infrastructure tooling, automation, and custom operators/controllers
Strong Linux shell scripting (bash/sh) for automation, system administration, and pipeline
scripting
Nice to have
Exposure to AI-assisted DevOps tooling — anomaly detection, LLM-assisted incident response,
or AI-generated IaC
SaaS product background, ideally in a multi-tenant environment
Experience with FinOps tooling: Azure and AWS Cost management features
AWS Certified DevOps Engineer – Professional, Microsoft Certified: DevOps Engineer Expert,
and Certified Kubernetes Administrator (CKA)