• Own our cloud infrastructure including Kubernetes clusters, databases and networks, using Terraform to manage resources as code • Keep the components of our infrastructure up-to-date by continuously applying upgrades and leveraging new capabilities as they become available • Equip our engineering team with tools to detect problems and understand their causes quickly and effectively • Deploy tools to collect and visualize metrics, traces and logs providing deep insight into the behavior of our system • Monitor operational and security alerts, and lead response and remediation efforts • Maintain and enhance the tools we use to test and deploy our applications, including CI/CD pipelines, Helm charts, and Kubernetes operators • Eliminate toil with automation to improve developer velocity and satisfaction • Apply the Principle of Least Privilege to ensure our users and systems have access to the information they need and nothing more • Conduct regular security assessments, vulnerability testing, and infrastructure audits • Continuously evaluate and improve our security posture • Work across teams to understand the infrastructure needs of our internal and external stakeholders • Educate the engineering team on principles for building reliable software and security best practices

• Build and maintain AWS infrastructure using Terraform (VPC, EKS, networking, IAM, Secrets Manager, Route53, ALBs/NLBs). • Operate and optimize production-grade EKS clusters: node groups, autoscaling, RBAC, OIDC integration. • Implement TLS, certificates, ingress controllers, and network policies. • Ensure secure, consistent multi-environment deployments across staging and production. • Deploy and manage workloads for integrations, adapters, backend services, ledger components, and payment orchestration. • Configure Helm charts/manifests, resource limits, autoscaling (HPA/VPA), and pod governance. • Support distributed ledger components (via Catalyst Blockchain Manager), including Canton participants and sequencer nodes. • Maintain operational reliability for critical workloads: event ingestion, trading integrations, settlement flows, payment orchestration, and automations. • Build and maintain CI/CD pipelines (GitLab → ArgoCD) for automated deployments and infrastructure provisioning. • Implement GitOps patterns and progressive delivery strategies (blue/green, canary). • Automate secrets management, configuration flows, and cluster operations. • Expand platform observability using Datadog, Prometheus/Grafana, and log aggregation pipelines. • Build dashboards and alerts for Kubernetes, ledger nodes, integrations, payment workflows, and API workloads. • Establish SLIs/SLOs and ensure system reliability targets are consistently met. • Investigate incidents, identify root causes, and implement long-term reliability improvements. • Improve resiliency through redundancy, autoscaling, and failure recovery strategies. • Maintain deployment safety, rollback strategies, and operational runbooks. • Implement IAM least-privilege policies, encryption, secrets management, and secure network segmentation. • Maintain secure ingress patterns for third-party services (payments, KYC, trading). • Ensure operational readiness and compliance alignment with platform standards. • Work closely with backend and full-stack teams to ensure smooth deployments and runtime reliability. • Support teams during platform migration efforts and environment transitions. • Participate in incident response, observability improvements, and overall DevOps best practices.

• Lead a team of deployment specialists, providing guidance, support, and mentoring to ensure successful execution of deployment activities • Oversee the deployment process, including configuration, testing, and rollout of technology solutions across various environments (e.g., development, staging, production) • Coordinate with infrastructure teams to write instruction to provision, upgrade and configure servers, networks, and other resources required for deployment • Implement automation tools and scripts to streamline deployment processes, minimize manual intervention, and ensure consistency across products • Identify potential risks and dependencies associated with deployment activities and develop mitigation plans to address them proactively • Define and maintain release engineering processes and methodologies, ensuring continuous improvement and best practices • Monitor and measure the success of releases, gathering feedback and data to drive process improvements • Stay up-to-date with industry trends and advancements to recommend and implement innovative release management practices

• Support and evolve the bank’s DevOps and platform capabilities • Strong hands-on expertise required • Ownership mindset • Work within a mission-critical banking environment