• Own end-to-end GitLab CI/CD pipelines for key services, ensuring they build, test, and deploy reliably using K8s runners • Standardize pipeline patterns (templates/components) for multiple tech stacks (.NET, Go, Node, etc.) and environments, emphasizing build reproducibility and security • Implement and maintain multi-stage deployment workflows (dev → lower → upper → stage → prod) with automated checks, approvals, and rollbacks, aligned to our change management practices in Jira • Collaborate with engineering teams to simplify release processes • Operate and evolve AWS EKS clusters in multiple accounts/regions (including GovCloud) using Terraform and shared infra modules (VPC, subnets, security groups, EKS, Route53, ALBs/NLBs, Network Firewall, etc.) • Manage cluster add-ons and platform workloads (e.g., monitoring stack, ingress/proxy, build runners, shared services) via Helm / Helm-based tooling and Git-based workflows • Implement and support infrastructure-as-code for new environments and services (VPCs, EKS clusters, DNS zones, IAM roles, IRSA, Route53 resolver rules, VPC endpoints, etc.) • Deploy and tune observability tooling (e.g., Grafana Alloy, Prometheus-compatible metrics, CloudWatch logs, Loki/Victoria Metrics) to ensure platforms and pipelines are well-instrumented • Define and monitor SLOs/SLAs for critical services and CI/CD components; build alerts using CloudWatch, Grafana, and related tools • Participate in operational reviews, incident response, and post-incident retrospectives, driving reduction of toil via automation, playbooks, and pipeline improvements • Apply our container hardening and FIPS 140-2 guidelines across images and pipelines, including use of Chainguard base images and vault-init-fips entry points where required • Partner with Cloud Platform and Security teams to maintain Network Firewall rules, VPC endpoint policies, and WAF rules that restrict egress/ingress to approved domains and ports • Ensure CI/CD, infra, and release processes support FedRAMP Moderate and related controls (e.g., SA-4(9) functions/ports/services documentation, image provenance in ECR)

• Design and implement resilient, secure, and scalable cloud environments to support client platforms in production. • Drive production readiness and operations: monitoring and alerting, incident support, runbooks, capacity planning, reliability improvements, and release readiness. • Build and maintain CI/CD workflows and reconfigure/enhance an existing proprietary pipeline using Argo. • Automate infrastructure provisioning and configuration using Infrastructure as Code (Terraform, CloudFormation, CDK). • Support containerized deployments and orchestration using Docker and ECS. • Develop automation scripts and utilities in Python and/or Bash for deployment, configuration, and operational tasks. • Implement and maintain service configuration and deployment automation across environments (dev/test/stage/prod). • Configure and manage cloud networking and access controls, including Security Groups. • Implement and maintain monitoring/observability capabilities (metrics, logs, traces, dashboards) and establish actionable SLOs/SLIs. • Plan and execute performance testing and scalability validation; partner with engineering to remediate bottlenecks and improve system performance. • Collaborate with engineering, architecture, security, and client stakeholders to triage issues, estimate work, and continuously improve delivery and reliability.

• Gérer et faire évoluer notre environnement AWS (EC2, ECS Fargate, Lambda, S3) • Optimiser les coûts, la performance et la résilience • Construire et maintenir des pipelines de déploiement fiables • Mettre en place ou améliorer le monitoring, logging et alerting • Renforcer la sécurité de l'infrastructure et des données • Participer à l'optimisation de nos bases de données (MySQL, PostgreSQL, Redis, Elasticsearch) • Travailler main dans la main avec les développeurs et partager les bonnes pratiques

• Design, code, test and deliver software to automate manual operational work • Troubleshoot priority incidents, facilitate blameless post-mortems and ensure permanent closure of incidents • Engage with development team throughout the life cycle to help develop software for reliability and scale, ensuring minimal refactoring or changes • Identify application patterns and analytics in support of better service level objectives • Design self-healing and resiliency patterns • Design automated software and product upgrades, change management, and release management solutions • Participate in the 24×7 support coverage as needed • Mentor and guide junior developers