Lead Devops Engineer

About the Role

Experience

• 8+ years in cloud infrastructure, with 3+ years hands-on AWS - owning complex systems end-to-end and driving technical decisions across engineering teams.

Cloud & Infrastructure

• Deep expertise in AWS services, such as: EC2, EKS, ECS, RDS, Elasticache, S3, IAM, VPC, Route 53, CloudFront.
• Expert-level Terraform (Terragrunt a strong plus), able to define custom internal modules to bootstrap complete solutions.
• Confident managing multi-account AWS environments.
• Strong Linux systems knowledge — kernel, networking, performance tuning, package management.
• Container expertise: Docker, Kubernetes, and Helm chart authoring.
• Kubernetes Topology: leverage Taints and tolerations, Affinities, Topology Spreads to build reliable systems.

Automation & CI/CD

• Strong scripting skills in Bash and at least one general-purpose language (Python preferred).
• Experience with CI/CD platforms: Jenkins, GitHub Actions, or CircleCI.
• Source control mastery: Git (GitHub), branching strategies, code review workflows, GitOps.
• Experience authoring reliable automation pipelines: from regular scripting to orchestration workflows using tools such as GitHub Actions or Step Function.

Observability & Security

• Hands-on experience with configuring monitoring/logging stacks: Prometheus/Grafana, ELK, and CloudWatch.
• Nginx configuration, SSL/TLS management, and certificate lifecycle automation.
• VPN implementation: OpenVPN.
• Zero Trust Implementation: Cloudflare Tunnels.
• Familiarity with cloud security best practices: IAM least-privilege, secrets management (Vault / AWS Secrets Manager), network segmentation.
• Experience with Containers and Kubernetes security: Network Policies, RBAC, Logs and events auditing, containers hardening, Seccomp.

Data & Middleware

• Experience supporting relational databases (PostgreSQL), caches (Redis, Memcache), and message buses (Kafka/RedPanda, RabbitMQ), NoSQL Databases (MongoDB, DynamoDB).
• Working knowledge of networking fundamentals: DNS, TCP/IP, load balancing, CDN.

AI Fluency

• You actively use AI coding assistants (Copilot, Cursor, Claude, ChatGPT) as part of your daily workflow - not occasionally.
• You have applied LLMs or AI tooling to infrastructure problems: incident summarization, code generation, IaC linting, runbook drafting.
• You understand the limitations of AI-generated infrastructure code and apply critical review before shipping to production.
• Curiosity about where AIOps, LLMOps, and platform engineering are heading — and excitement to help Novo get there first.

Equal Opportunity

Responsibilities

• Take full technical ownership of Novo's cloud infrastructure and developer platform
• Write code, design systems, and solve hard infrastructure problems directly
• Own Novo's cloud infrastructure end-to-end and drive architecture decisions
• Use AI tooling to reduce toil and speed up delivery
• Configure monitoring/logging stacks including Prometheus/Grafana, ELK, and CloudWatch
• Manage Nginx configuration, SSL/TLS management, and certificate lifecycle automation
• Implement VPN with OpenVPN and Zero Trust with Cloudflare Tunnels
• Apply cloud security best practices including IAM least-privilege, secrets management, and network segmentation
• Implement containers and Kubernetes security including Network Policies, RBAC, logs and events auditing, containers hardening, and Seccomp
• Support relational databases (PostgreSQL), caches (Redis, Memcache), message buses (Kafka/RedPanda, RabbitMQ), and NoSQL databases (MongoDB, DynamoDB)
• Apply networking fundamentals including DNS, TCP/IP, load balancing, and CDN
• Apply LLMs or AI tooling to infrastructure problems such as incident summarization, code generation, IaC linting, and runbook drafting