AWS Infrastructure

• Design, provision, and manage scalable, highly available, and fault-tolerant AWS infrastructure using Infrastructure as Code (IaC) tools such as Terraform and AWS CDK.
• Own and optimize AWS services including EC2, VPC, IAM, RDS, S3, Route 53, CloudWatch, ALB/NLB, and more.
• Design and manage robust AWS network infrastructure including VPCs, subnets, routing tables, and network ACLs for high-availability and security.
• Configure and optimize Route 53 for DNS management, failover strategies, and multi-region routing policies.
• Deploy and manage API Gateways for REST and HTTP APIs, including authentication, rate limiting, request/response transformation, and integration with backend services.
• Implement and manage AWS Load Balancers (Application Load Balancer, Network Load Balancer, and Classic Load Balancer) for traffic distribution, session management, and high availability.
• Define and enforce AWS security policies including security groups, NACLs, WAF rules, and compliance requirements across network infrastructure.
• Enforce AWS security best practices including least-privilege IAM policies, security group management, and network segmentation.
• Monitor infrastructure health, costs, and performance; continuously identify and implement optimizations.
• Lead cloud architecture reviews and contribute to Well-Architected Framework assessments.

Azure Infrastructure & Multi-Cloud

• Design and provision Azure infrastructure and services, including virtual networks, Azure Virtual Machines, Azure Kubernetes Service (AKS), and managed databases.
• Manage Azure IAM, resource groups, and implement security best practices across Azure environments.
• Implement Infrastructure as Code for Azure using Terraform and Azure Resource Manager templates.
• Integrate Azure services with AWS environments for hybrid and multi-cloud deployments where applicable.

System Administration (Linux & Windows)

• Administer Linux-based systems (AWS Linux and Ubuntu) including kernel management, package management, user/group administration, permissions, and access control.
• Configure and maintain Linux services, systemd, and daemon processes for reliability and performance.
• Administer Windows Server environments including Active Directory integration, Group Policy, patching, and security hardening.
• Manage both Linux and Windows across on-premises, cloud, and hybrid environments.
• Implement configuration management and automation for consistent system provisioning and lifecycle management.

Amazon EKS (Elastic Kubernetes Service)

• Design, deploy, and manage production-grade EKS clusters with a focus on security, scalability, and high availability.
• Manage Kubernetes resources including Deployments, StatefulSets, DaemonSets, ConfigMaps, Secrets, RBAC, and Network Policies.
• Implement and maintain cluster autoscaling (Cluster Autoscaler, Karpenter), node group management, and pod disruption budgets.
• Integrate EKS with AWS services such as IAM Roles for Service Accounts (IRSA), AWS Load Balancer Controller, EBS/EFS CSI drivers, and AWS Secrets Manager.
• Deploy, configure, and manage Istio service mesh on EKS, including traffic management, mutual TLS (mTLS), observability, and security policy enforcement.
• Oversee Kubernetes upgrades, patching, and lifecycle management across environments.

ArgoCD & GitOps

• Implement and maintain GitOps workflows using ArgoCD for continuous delivery to Kubernetes environments.
• Design and manage ArgoCD Application and ApplicationSet configurations for multi-cluster and multi-environment deployments.
• Establish GitOps best practices including environment promotion strategies (dev → staging → production), rollback procedures, and drift detection.
• Manage ArgoCD RBAC, SSO integration, and security hardening.
• Collaborate with development teams to onboard services into the GitOps delivery model.

CI/CD Pipelines (GitHub Actions & Jenkins)

• Build, maintain, and optimize CI/CD pipelines using GitHub Actions and Jenkins for build, test, security scanning, and deployment workflows.
• Configure and manage Jenkins infrastructure, including master/agent architecture, plugin management, and security hardening.
• Design Jenkins declarative and scripted pipelines for complex multi-stage deployments across environments.
• Integrate Jenkins with container registries, artifact repositories, testing frameworks, and deployment tools.
• Develop reusable GitHub Actions workflows and composite actions to standardize pipelines across teams.
• Create reusable Jenkins shared libraries and pipeline templates for consistency and maintainability.
• Integrate pipelines with container registries (Amazon ECR), security scanning tools (Trivy, Snyk, etc.), and deployment tooling.
• Implement pipeline best practices including secrets management, environment protection rules, and workflow approvals.
• Monitor pipeline performance and drive improvements in build reliability and deployment velocity.

Container Development & Registry Management

• Build, optimize, and maintain Docker containers with strong emphasis on Dockerfile best practices including multi-stage builds, minimal base images, layer optimization, and security hardening.
• Design efficient container images that minimize size, reduce startup time, and optimize resource consumption.
• Manage container image repositories using Amazon ECR, including image lifecycle policies, tagging strategies, image retention policies, vulnerability scanning, and access control.
• Integrate container building and registry management into CI/CD pipelines, automating image builds, security scanning, tagging, and registry pushes.
• Implement container security scanning and vulnerability detection to ensure image compliance and remediate security issues.
• Mentor teams on container best practices, image optimization techniques, and secure containerization patterns.

AI-Assisted DevOps (Claude & AWS Kiro)

• Leverage Anthropic Claude as an AI engineering assistant to rapidly generate, review, and refactor Terraform modules and AWS CDK stacks, reducing toil and accelerating infrastructure delivery.
• Utilize AWS Kiro to automate and streamline infrastructure provisioning, SRE workflows, and cloud operations tasks through AI-driven assistance.
• Apply AI tooling across the SDLC — from requirements and design through implementation, testing, deployment, and incident resolution — to improve team velocity and code quality.
• Use Claude and Kiro to assist with SRE work including runbook generation, automated root cause analysis drafting, postmortem write-ups, alert tuning, and on-call automation.
• Employ AI-assisted tooling to monitor and optimize AWS costs — analyzing Cost Explorer data, identifying waste, rightsizing recommendations, and generating cost reports and savings proposals.
• Establish team best practices and guardrails for responsible, secure, and effective use of AI coding and operations tools.
• Continuously evaluate emerging AI-powered DevOps tooling and champion adoption of high-value capabilities across the engineering organization.

General DevOps & Collaboration

• Mentor junior and mid-level engineers on DevOps practices, tooling, cloud infrastructure, and AI-assisted workflows.
• Define and enforce standards for observability including logging, metrics, and distributed tracing (e.g., Prometheus, Grafana, OpenTelemetry, Datadog).
• Participate in on-call rotations and lead incident response, root cause analysis (RCA), and postmortem processes.
• Champion a culture of automation, reliability, and continuous improvement across the organization.
• Collaborate with security teams to implement DevSecOps practices throughout the SDLC.

REQUIRED SKILLS

• 5+ years of experience in a DevOps, Site Reliability Engineering (SRE), or Cloud Infrastructure role.
• Deep hands-on expertise with AWS, including core services (EC2, VPC, IAM, S3, RDS) and advanced services.
• Strong expertise with AWS network infrastructure including VPCs, Route 53, API Gateways, Load Balancers (ALB/NLB), and AWS security policies.
• Hands-on experience with Linux system administration (AWS Linux and Ubuntu), including kernel management, package management, services, and security hardening.
• Hands-on experience with Windows Server administration including Active Directory, Group Policy, patching, and security configuration.
• Experience with Azure infrastructure and cloud services.
• Strong Kubernetes experience, including production EKS cluster management, networking, and storage.
• Proficiency with ArgoCD and GitOps principles for Kubernetes-based continuous delivery.
• Proven experience building and maintaining CI/CD pipelines with GitHub Actions and Jenkins.
• Strong Docker experience including building, optimizing, and maintaining production container images with emphasis on Dockerfile best practices and security.
• Proficiency with Amazon ECR (Elastic Container Registry) including image management, lifecycle policies, vulnerability scanning, and access control.
• Proficiency with Infrastructure as Code tools, including Terraform and AWS CDK.
• Hands-on experience using Anthropic Claude and/or AWS Kiro for infrastructure development, SRE operations, cost analysis, and SDLC acceleration.
• Production experience with Istio service mesh, including traffic management, mTLS, Envoy proxy configuration, and Istio-based observability and security policies.
• Strong scripting skills in Bash, Python, or similar languages (TypeScript/Python experience with AWS CDK a strong plus).
• Solid understanding of networking fundamentals: DNS, TCP/IP, TLS, load balancing, and firewalls.
• Experience with secrets management solutions (AWS Secrets Manager, HashiCorp Vault, or External Secrets Operator).

PREFERRED QUALIFICATIONS

• AWS certifications such as AWS Certified DevOps Engineer – Professional or AWS Solutions Architect – Professional.
• Azure certifications such as Azure Administrator or Azure Solutions Architect.
• Linux System Administrator certifications (e.g., LPIC, Red Hat Certified System Administrator).
• Windows Server or Microsoft certifications (e.g., Microsoft Certified: Windows Server Hybrid Administrator).
• Experience with Karpenter for EKS node provisioning.
• Familiarity with additional service mesh technologies such as Istio.
• Experience with observability platforms such as Datadog, Grafana, or Prometheus.
• Docker and container security certifications or demonstrated expertise in securing containerized applications.
• Demonstrated experience using AI tools to drive measurable improvements in delivery speed, reliability, or cost efficiency.
• Contributions to open-source projects or internal developer platforms.
• Experience in a high-growth startup or large-scale production environment.

PHYSICAL DEMANDS AND WORKING CONDITIONS

• Ability to work effectively in a team environment and communicate clearly through various channels.
• Capacity to work with computers for extended periods and adapt to changing requirements in a fast-paced environment.
• On-call hours may be required.

Why Work Here?

#WhyWorkAnywhereElse?

MasterControl is a place where Exceptional Teams come together to do their best work. In fact, hiring Exceptional Teams is a core value of ours. MasterControl employees are surrounded by intelligent, motivated, and collaborative individuals. We like to call it #TheBestTeamOnThePlanet.

We work hard to develop and challenge our employees' skillsets, recognize their contributions, encourage professional development, and offer a one-of-a-kind culture. This is why we say #WhyWorkAnywhereElse?

MasterControl could be your next (and last) career move!

• Competitive compensation
• Schedule flexibility
• Company parties and employee recognition programs
• Wellness programs
• Much, much more!