• Design, implement, and maintain scalable CI/CD pipelines that automate software build, testing, deployment, and release processes. • Drive continuous improvement initiatives that increase deployment efficiency, reliability, and developer productivity. • Partner with engineering teams to establish DevOps best practices across the software development lifecycle. • Champion automation-first approaches that reduce manual effort and improve operational consistency. • Design and support highly available, secure, and scalable cloud infrastructure across AWS and Microsoft Azure environments. • Develop and maintain Infrastructure-as-Code (IaC) solutions using tools such as Terraform and CloudFormation. • Optimize platform performance, cost efficiency, and operational resilience across production and non-production environments. • Partner with engineering teams to build and maintain cloud-native architectures that support growth and scale. • Design, deploy, and manage containerized workloads utilizing Docker and Kubernetes. • Establish deployment standards and operational best practices for Kubernetes-based environments. • Support container orchestration, monitoring, scaling, and lifecycle management initiatives. • Drive platform modernization efforts through the adoption of cloud-native technologies. • Implement and maintain infrastructure and application security best practices, including encryption, access controls, network security, and vulnerability management. • Design solutions that support fault tolerance, disaster recovery, and business continuity objectives. • Collaborate with teams to improve observability, monitoring, alerting, and incident response capabilities. • Proactively identify risks and implement solutions that improve system reliability and uptime. • Collaborate with software engineers, architects, and product teams to support scalable application development and deployment strategies. • Provide technical guidance on infrastructure architecture, cloud adoption, and operational best practices. • Participate in architectural reviews and contribute to long-term platform strategy discussions. • Foster a culture of continuous learning, innovation, and engineering excellence.

Role Description Mojio's DevOps function is lean and hands-on. You'll join a small team responsible for our AWS-based infrastructure, security posture, and internal IT needs, working alongside another DevOps engineer to keep things running smoothly rather than covering everything solo. This is an individual-contributor role: you won't be managing a team, but you will have real, direct ownership over production infrastructure. A self-directed, dependable, detail-oriented approach matters more than seniority or years of experience. Key Responsibilities - Manage and maintain Mojio's AWS infrastructure - EKS, RDS, VPC/networking, IAM, CloudFront, ECR, and related services - supporting a worldwide, ISO 27001-aligned production environment. - Operate and troubleshoot our Kubernetes-based platform (including Knative workloads and Helm charts), and support GitOps-based deployment workflows (e.g., Argo CD, Flux) and CI/CD pipelines (GitHub Actions). - Own day-to-day security operations: triage and remediate vulnerabilities (CVEs, dependency and container scanning findings via tools like Snyk), apply patches, and maintain our security scanning/compliance posture (e.g., AWS Security Hub). - Manage access and identity administration — provisioning and de-provisioning AWS/VPN/Okta/GitHub access, handling employee onboarding and offboarding requests, and responding to day-to-day IT and access-request tickets from the team. - Support monitoring and alerting (Grafana, Prometheus, PagerDuty) and participate in an on-call rotation to help resolve production issues and outages. - Assist with cost optimization efforts (e.g., right-sizing, Spot Instance usage, cost visibility tooling) and infrastructure-as-code practices (Terraform). - Work with the Engineering team on making infrastructure and deployment processes simpler and more self-serve over time. Qualifications - 3+ years of hands-on DevOps, infrastructure, or site reliability experience, ideally at a small-to-medium sized startup/organization where you owned tasks end-to-end. - Real-world, production experience with AWS (EKS, S3, Route 53, MSK, RDS, VPC, IAM, CloudFront, or similar core services). - Proven experience with Kubernetes, including deploying, managing and scaling containerized applications. - Strong understanding of containerization technologies such as Docker. - Experience with Kustomize and managing helm charts for packing and deploying Kubernetes workloads. - Experience building infrastructure as a code using Terraform/Terragrunt. - Proficiency in scripting or programming languages such as Python, Go or Bash. - Comfort with source control (Git) and CI/CD tooling (GitHub Actions or equivalent). - Basic security fundamentals - experience patching vulnerabilities, responding to scan findings, or working within a compliance framework (e.g., ISO 27001, SOC 2). - Basic understanding of networking principles and a strong commitment to cybersecurity best practices. - Some exposure to IT/access administration (VPN, SSO/Okta, GitHub or cloud IAM permissions) and comfort supporting non-engineering stakeholders with access requests. - A self-starting, can-do attitude - comfortable owning a broad scope independently and communicating clearly with stakeholders across the company. Preferred Qualifications - Experience operating high availability, production clusters. - Experience with technologies such as GitOps (FluxCD, ArgoCD), OpenTofu, SQL Databases, secret management (Vault), cost-visibility tools (KubeCost, OpenCost), Karpenter, Couchbase. - Experience in the connected car, IoT, or cloud SaaS field. - Exposure to Elastic stack, Prometheus stack, and PagerDuty-style monitoring and incident response. - Experience managing multi-account AWS organizations (SCPs, OUs, cross-account IAM access). - Comfort using AI-assisted tools in day-to-day DevOps work (e.g., AI coding/IaC assistants for writing and reviewing infrastructure code, or AI-enhanced monitoring for anomaly detection and faster incident triage). Benefits - Work from home flexibility. - 4 weeks of vacation each year. - Generous annual allowance for professional education. - Stock options. - Cell Phone Plan Reimbursement. - Health & wellness annual spending allowance. - Great health benefits.

• Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript). • Enforce compliance rules (cdk-nag NIST packs) from the first stack. • Manage networking, compute, data stores, and secrets. • Architect GitHub Actions with affected-only builds and remote caching. • Implement merge queues and test sharding. • Maintain a strict latency budget on PR gates to ensure speed. • Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls. • Automate the generation of security-authorization evidence for the government. • Manage a dual-scan delivery pipeline for signed artifacts and provenance. • Implement CAC/ICAM-integrated identity and mTLS. • Develop policy-as-code authorization and continuous posture monitoring. • Own all merged code, ensuring agent output meets production-grade standards. • Refine the team’s versioned engineering "harness" and rules. • Debug flakiness anywhere in the stack, from application code to database schemas.

• Build and manage AWS GovCloud environments entirely in AWS CDK (TypeScript). • Enforce compliance rules (cdk-nag NIST packs) from the first stack. • Manage networking, compute, data stores, and secrets. • Architect GitHub Actions with affected-only builds and remote caching. • Implement merge queues and test sharding. • Maintain a strict latency budget on PR gates to ensure speed. • Build "Compliance as a build artifact" where pipeline gates map directly to NIST controls. • Automate the generation of security-authorization evidence for the government. • Manage a dual-scan delivery pipeline for signed artifacts and provenance. • Implement CAC/ICAM-integrated identity and mTLS. • Develop policy-as-code authorization and continuous posture monitoring. • Decompose infrastructure problems into precise specs for AI agents to implement. • Own all merged code, ensuring agent output meets production-grade standards. • Debug flakiness anywhere in the stack, from application code to database schemas. • Support the application engineering team by optimizing their feedback loops.