Role Description Join our team as a Senior Site Reliability Engineer to drive availability, performance, and operational excellence across our security platforms. - Own reliability outcomes for security platforms by defining SLIs/SLOs and error budgets; build actionable alerting, dashboards, and runbooks. - Architect and implement high availability, capacity planning, and disaster recovery for IDS/IPS, DDoS mitigation, and supporting services. - Design zero/minimal-downtime maintenance and upgrade strategies for OS, firmware, and signature updates. - Automate deployments, configuration, and compliance using SaltStack and Python. - Operate and improve a heterogeneous stack: TrendMicro TippingPoint IPS, Suricata, NetScout/Arbor Sightline/TMS, HAProxy, Nginx, Juniper, Palo Alto, Kentik/KProxy. - Build and evolve observability: Icinga alerting, Grafana dashboards, InfluxDB metrics, rsyslog pipelines; drive SLO-based alerting and noise reduction. - Lead incident response within a 24/7 on-call rotation; act as incident commander, drive rapid mitigation, and run blameless postmortems with durable fixes. - Reduce toil through self-service tooling, APIs, and automated health checks; champion reliability reviews and game days/chaos testing. - Ensure audit-ready operations aligned to WebTrust and PCI-DSS; uphold change management, configuration baselines, and access controls. - Collaborate with Network Engineering, Security Architecture, Hosting, and Product teams; mentor and provide technical guidance to 2–3 contractors. - Maintain high-quality operational documentation, SOPs, and architectural diagrams. Qualifications - 5+ years in SRE/production operations or platform engineering supporting large-scale, mission-critical systems; experience with network/security platforms. - Expert-level SaltStack for configuration management and automation (e.g., Puppet, Ansible). - Strong Linux administration and troubleshooting; deep understanding of TCP/IP, routing, L4–L7, and load balancing. - Proficiency in Python for automation, tooling, and integrations; familiarity with software engineering practices (code reviews, testing, CI/CD). - Observability at scale: Icinga, Grafana, InfluxDB, and rsyslog. - Git-based workflows and Infrastructure as Code concepts. - Proven effectiveness in a 24/7 operations environment with on-call responsibilities and incident management. - Excellent technical writing and documentation skills; ability to lead and mentor contractors. Requirements - Hands-on administration of IDS/IPS and DDoS platforms (TrendMicro TippingPoint, Suricata, NetScout/Arbor Sightline/TMS). - Experience with HAProxy and Nginx; Juniper and Palo Alto administration. - Bachelor’s degree in Computer Science, Information Technology, or related field. - Industry certifications (Security+, CISSP, Linux+). - Experience in web hosting, ISP, or managed service provider environments. - Background in incident response, change management, and compliance audits. - Experience operating hybrid cloud/on-premises infrastructure; understanding of WebTrust and PCI-DSS operational requirements. Benefits - Paid time off. - Retirement savings (e.g., 401k, pension schemes). - Bonus/incentive eligibility. - Equity grants. - Participation in our employee stock purchase plan. - Competitive health benefits. - Family-friendly benefits including parental leave.

• Design, scale, and maintain enterprise pipelines and automate cloud infrastructure provisioning • Manage cluster availability, security, networking, ingress, and service mesh traffic management • Coordinate cross-team releases, Git branching strategies, and database version control/rollback strategies • Build platform monitoring, logging, and metrics dashboards while supporting incident response and root-cause analysis (RCA) • Partner with Dev Leads to remove deployment blockers, align on infrastructure standards, and manage cross-service dependencies

• Administer GitHub Enterprise: user onboarding/offboarding, groups, permissions, AuditLog. • Administer SonarQube Enterprise: project creation, user/permission management, log/db troubleshooting, version upgrades, migrations, and keeping integration tokens with GitHub SAST/DAST pipelines up to date. • Manage AWS SSO/Identity Center: Users/Groups/Permission sets, IAM policies, and audits using Terraform IaC, AWS CLI, and console. • Handle AWS account creation/deletion using AWS Account Factory. • Manage AWS Organization: billing configuration, cost reports, and support ticket resolution. • Support DataDog integrations across AWS Org, GitHub Enterprise, SonarQube Enterprise, and custom containerized applications running on AWS ECS clusters using OTLP/DDOT. • Perform regular User Access Reviews (UAR) for AWS Identity Center, GitHub Enterprise, and SonarQube Enterprise. • Manage CI/CD pipelines on SonarQube and AnthonyTravel applications (including backstage environment). • Review pull requests for every change to the IaC (Terraform) structure. • Assist with regular audits for PCI and SOX compliance, and address issues related to access/privileges and improper offboarding.

Role Description Buscamos un/a Especialista en DevSecOps apasionado/a por la automatización y la seguridad para diseñar, construir y mantener pipelines de CI/CD seguros y robustos. En este rol, serás el experto técnico que garantiza que la seguridad está integrada en cada fase del ciclo de vida del desarrollo de software, desde la planificación hasta el despliegue y la operación en AWS. Trabajarás principalmente con Azure DevOps, Terraform y el ecosistema de seguridad de AWS para crear infraestructuras seguras, resilientes y eficientes. - Diseñar y construir pipelines de CI/CD de extremo a extremo en Azure DevOps utilizando YAML, integrando la seguridad como un pilar fundamental ("Security as Code"). - Automatizar la provisión y gestión de infraestructura en AWS utilizando Terraform, creando módulos reutilizables y seguros. - Integrar herramientas de escaneo de seguridad (SAST, SCA, IaC, DAST, escaneo de contenedores) dentro de los ductos para una detección temprana de vulnerabilidades. - Fortalecer la seguridad de nuestras soluciones de contenedores en Amazon EKS, ECS y Fargate, desde el escaneo de imágenes en ECR hasta la configuración de políticas de red y RBAC, sobretodo conocimiento profundo de EKS. - Actuar como un evangelizador de la cultura DevSecOps, colaborando estrechamente con los equipos de desarrollo y operaciones para fomentar las mejores prácticas de seguridad. Qualifications - Experiencia demostrable en un rol de DevOps, Seguridad Cloud o DevSecOps. - Dominio de Azure DevOps: Creación de pipelines complejos con YAML, gestión de agentes, conexiones de servicios y Azure Repos. - Experiencia avanzada con Terraform: Escritura de código IaC, creación de módulos, gestión de estado remoto y escaneo de seguridad con herramientas como sonarqube o veracode. - Conocimiento profundo de AWS: Especialmente en servicios de seguridad y Amazon EKS/ECS/Fargate. - Experiencia práctica integrando herramientas de seguridad en pipelines de CI/CD (ej. Snyk, SonarQube, Trivy, etc.). - Buenas habilidades de scripting (Bash, Python). Requirements - Certificaciones relevantes como AWS Certified Security - Specialty, AWS Certified DevOps Engineer - Professional, o Azure DevOps Engineer Expert - no es indispensable.