Role Description Mojio's DevOps function is lean and hands-on. You'll join a small team responsible for our AWS-based infrastructure, security posture, and internal IT needs, working alongside another DevOps engineer to keep things running smoothly rather than covering everything solo. This is an individual-contributor role: you won't be managing a team, but you will have real, direct ownership over production infrastructure. A self-directed, dependable, detail-oriented approach matters more than seniority or years of experience. Key Responsibilities - Manage and maintain Mojio's AWS infrastructure - EKS, RDS, VPC/networking, IAM, CloudFront, ECR, and related services - supporting a worldwide, ISO 27001-aligned production environment. - Operate and troubleshoot our Kubernetes-based platform (including Knative workloads and Helm charts), and support GitOps-based deployment workflows (e.g., Argo CD, Flux) and CI/CD pipelines (GitHub Actions). - Own day-to-day security operations: triage and remediate vulnerabilities (CVEs, dependency and container scanning findings via tools like Snyk), apply patches, and maintain our security scanning/compliance posture (e.g., AWS Security Hub). - Manage access and identity administration — provisioning and de-provisioning AWS/VPN/Okta/GitHub access, handling employee onboarding and offboarding requests, and responding to day-to-day IT and access-request tickets from the team. - Support monitoring and alerting (Grafana, Prometheus, PagerDuty) and participate in an on-call rotation to help resolve production issues and outages. - Assist with cost optimization efforts (e.g., right-sizing, Spot Instance usage, cost visibility tooling) and infrastructure-as-code practices (Terraform). - Work with the Engineering team on making infrastructure and deployment processes simpler and more self-serve over time. Qualifications - 3+ years of hands-on DevOps, infrastructure, or site reliability experience, ideally at a small-to-medium sized startup/organization where you owned tasks end-to-end. - Real-world, production experience with AWS (EKS, S3, Route 53, MSK, RDS, VPC, IAM, CloudFront, or similar core services). - Proven experience with Kubernetes, including deploying, managing and scaling containerized applications. - Strong understanding of containerization technologies such as Docker. - Experience with Kustomize and managing helm charts for packing and deploying Kubernetes workloads. - Experience building infrastructure as a code using Terraform/Terragrunt. - Proficiency in scripting or programming languages such as Python, Go or Bash. - Comfort with source control (Git) and CI/CD tooling (GitHub Actions or equivalent). - Basic security fundamentals - experience patching vulnerabilities, responding to scan findings, or working within a compliance framework (e.g., ISO 27001, SOC 2). - Basic understanding of networking principles and a strong commitment to cybersecurity best practices. - Some exposure to IT/access administration (VPN, SSO/Okta, GitHub or cloud IAM permissions) and comfort supporting non-engineering stakeholders with access requests. - A self-starting, can-do attitude - comfortable owning a broad scope independently and communicating clearly with stakeholders across the company. Preferred Qualifications - Experience operating high availability, production clusters. - Experience with technologies such as GitOps (FluxCD, ArgoCD), OpenTofu, SQL Databases, secret management (Vault), cost-visibility tools (KubeCost, OpenCost), Karpenter, Couchbase. - Experience in the connected car, IoT, or cloud SaaS field. - Exposure to Elastic stack, Prometheus stack, and PagerDuty-style monitoring and incident response. - Experience managing multi-account AWS organizations (SCPs, OUs, cross-account IAM access). - Comfort using AI-assisted tools in day-to-day DevOps work (e.g., AI coding/IaC assistants for writing and reviewing infrastructure code, or AI-enhanced monitoring for anomaly detection and faster incident triage). Benefits - Work from home flexibility. - 4 weeks of vacation each year. - Generous annual allowance for professional education. - Stock options. - Cell Phone Plan Reimbursement. - Health & wellness annual spending allowance. - Great health benefits.

• Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript). • Enforce compliance rules (cdk-nag NIST packs) from the first stack. • Manage networking, compute, data stores, and secrets. • Architect GitHub Actions with affected-only builds and remote caching. • Implement merge queues and test sharding. • Maintain a strict latency budget on PR gates to ensure speed. • Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls. • Automate the generation of security-authorization evidence for the government. • Manage a dual-scan delivery pipeline for signed artifacts and provenance. • Implement CAC/ICAM-integrated identity and mTLS. • Develop policy-as-code authorization and continuous posture monitoring. • Own all merged code, ensuring agent output meets production-grade standards. • Refine the team’s versioned engineering "harness" and rules. • Debug flakiness anywhere in the stack, from application code to database schemas.

• Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript). • Enforce compliance rules (cdk-nag NIST packs) from the first stack. • Manage networking, compute, data stores, and secrets. • Architect GitHub Actions with affected-only builds and remote caching. • Implement merge queues and test sharding. • Maintain a strict latency budget on PR gates to ensure speed. • Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls. • Automate the generation of security-authorization evidence for the government. • Manage a dual-scan delivery pipeline for signed artifacts and provenance. • Implement CAC/ICAM-integrated identity and mTLS. • Develop policy-as-code authorization and continuous posture monitoring. • Decompose infrastructure problems into precise specs for AI agents to implement. • Own all merged code, ensuring agent output meets production-grade standards. • Debug flakiness anywhere in the stack, from application code to database schemas. • Support the application engineering team by optimizing their feedback loops.

• Collaborate with business stakeholders to gather, analyze, and document business and functional requirements. • Work closely with Product Owners, Scrum Masters, and development teams in an Agile environment. • Create and manage Epics, Features, User Stories, Tasks, and Acceptance Criteria using Azure DevOps (ADO). • Facilitate backlog grooming, sprint planning, and requirement prioritization sessions. • Develop detailed As-Is and To-Be process maps and workflow documentation. • Support Android and iOS mobile application initiatives by translating business needs into technical requirements. • Coordinate and support User Acceptance Testing (UAT), including test planning, defect tracking, and validation.