• Design and implement a CMMC-aligned GitLab architecture supporting 250–500+ users • Deploy and operate self-managed GitLab on Kubernetes using Crossplane • Architect secure GitLab runner strategies (pooling, isolation, autoscaling) for mixed workloads • Evaluate and document architectural approaches (single vs. segregated GitLab instances) with clear tradeoff analysis • Translate NIST 800-171 and CMMC requirements into enforceable GitLab configurations and access controls • Implement configuration-as-code using Terraform (e.g., GitLab provider) to ensure versioned, auditable, and repeatable platform management • Design and implement RBAC, least-privilege models, and segregation of duties • Establish drift detection and audit mechanisms to monitor and remediate unauthorized changes • Integrate GitLab into the broader Kubernetes platform ecosystem, including GitOps workflows (e.g., ArgoCD) • Produce architecture documentation, runbooks, and reference patterns to enable internal ownership and long-term sustainability • Collaborate with cybersecurity, architecture review boards, and platform teams to validate compliance and design decisions

• Design, implement, and test the build, deployment, and configuration management solutions in a Microsoft based implementation • Build and test the automation tools for infrastructure provisioning • Manage CI and CD processes, tools, and configurations with the team • Contribute to new ideas and ways to improve development delivery • Provide technical guidance and educate team members and coworkers on DevOps methodologies, and help establish and follow industry standard best practices • Develop and implement improvements to our IaC codebase (Terraform) • Develop and maintain CaC standards (Packer, Chef) • Monitor metrics (Datadog) and propose ways to improve application observability and visibility • Create and maintain documentation for build and deployment processes • Participate in sprint planning, implementation, standups and demos • Create PoC and prototype solutions for varied technical initiatives

• Design and implement comprehensive monitoring strategies rather than owning observability platforms outright. • Collaborate with DevOps and Engineering on shared observability platforms (Grafana, Prometheus/Loki, Azure Monitor/Application Insights). • Define golden signals dashboards, measure SLOs/SLIs/error budgets, and help implement actionable alerting. • Drive structured logging standards, distributed tracing patterns, and OpenTelemetry implementation standards for teams to deploy and SRE to validate. • Conduct monitoring/auditing of production systems to ensure instrumentation completeness. • Take ownership of production incident response, lead incident handling, and drive remediation. • Conduct blameless post-incident reviews and ensure follow-through on action items. • Continuously improve operational processes, reliability practices, and team readiness. • Monitor system resource utilization and forecast future needs. • Tune autoscaling configurations in partnership with Engineering teams. • Evaluate capacity efficiency and support cost optimization strategies. • Validate DR environments and test failover processes—not build them. • Ensure DR capabilities are functioning as-designed with clear documentation. • Define and lead regular DR drills in partnership with Engineering/Platform teams. • Work with the Non-Functional Testing team on resilience and DR scenario simulations. • Support chaos experiment planning and validation as a nice-to-have capability.

• Creating infrastructure and environments to support our platforms and applications using Terraform and related technologies to ensure all our environments are controlled and consistent. • Implementing DevOps technologies and processes, e.g: containerisation, CI/CD, infrastructure as code, metrics, monitoring etc. • Automating always. • Supporting, monitoring, maintaining and improving our infrastructure and the live running of our applications. • Maintaining the health of cloud accounts for security, cost and best practices. • Providing assistance to other functional areas such as development, test and client services.