• Lead the architecture, design, and implementation of highly available, scalable, and secure infrastructure and application deployment systems. • Define and enforce best practices for DevOps, infrastructure-as-code, monitoring, alerting, and configuration management. • Mentor and guide development and operations teams on DevOps principles and tools. • Design, build, and manage end-to-end CI/CD pipelines using tools like GitLab CI/CD. • Manage and maintain complex environments in Azure, ensuring optimal performance and cost-efficiency. • Perform system administration and maintenance for both Windows and Linux servers (installation, configuration, patching, troubleshooting). • Utilize various command line utilities for system diagnostics, configuration, and automation. • Develop, maintain, and enhance extensive automation scripts using Python, PowerShell, and Bash to manage system configuration, deployments, and operational tasks. • Drive the transition from manual operations to fully automated, codified infrastructure.

• Maintain and optimise Maven configurations to ensure consistent, reproducible builds across all environments • Execute and verify runtime, framework, and library upgrades, including Java, Spring, and Tomcat • Proactively monitor CVEs and apply security patches to remediate vulnerabilities in alignment with guidelines • Manage stable automated pipelines, artifact repositories, Docker images, and deployment tooling • Improve integration test suites and ensure reliable execution within the CI/CD lifecycle • Investigate build failures and collaborate with developers to resolve root causes and deployment incidents • Coordinate with Architecture, Dev., and QA teams to plan upcoming technical changes and refinements • Maintain technical documentation to support system transparency and team collaboration

• Deploy and configure enterprise-grade software delivery platforms (CI/CD), automated infrastructure tools, and centralized development environments across diverse hosting models (on-prem, private cloud, or air-gapped). • Implement hardened installations, including SSO/IAM integration, RBAC, and strict segregation of duties. • Manage secrets and encryption using enterprise tools (e.g., HashiCorp Vault, HSM, or KMS) within highly regulated network boundaries. • Utilize low-code or automated platforms to design and generate production-ready Infrastructure as Code (Terraform or OpenTofu). • Build and maintain standardized pipeline foundations, including "Golden Templates" and policy guardrails that automate security approvals and ensure mission compliance. • Orchestrate secure, scalable developer workspaces (CDEs) to ensure environment consistency for both human developers and AI coding agents. • Translate technical configurations into NIST 800-53/FedRAMP evidence (system diagrams, control mappings, and configuration baselines) to accelerate security assessments. • Provide post-implementation support, including platform patching, upgrade execution, and audit log/telemetry health checks. • Troubleshoot complex toolchain integration issues across the SDLC, from code scanning to deployment verification.

• Work closely with engineers in supporting new features and services. • Build tools to monitor site stability and performance. • Help ensure the reliability and scalability of our infrastructure, while maintaining platform SLOs. • Troubleshoot site issues using industry-leading tools like Splunk, Prometheus and OpenTelemetry. • Automate everything with Python, Puppet, Git, Jenkins, and Terraform and leveraging an extensive suite of AI tooling. • Develop custom tools when off-the-shelf solutions don’t work at our scale and contribute upstream to open source projects. • Participate in light on-call rotations - we have geographically distributed SRE teams for follow-the-sun support, which means nobody needs to be on-call 24h a day!