DevOps Engineer

Role Overview

Fractal is seeking a DevOps Engineer to design, provision, and operate AWS-based infrastructure, with strong experience in Kubernetes/EKS, VPC/VPN networking, and CI/CD. You will improve deployment speed, reliability, performance, and security across the organization.

Responsibilities

• Design, implement, and maintain AWS infrastructure (Kubernetes clusters, VPC/VPN configurations)
• Use AWS Bedrock and SageMaker for ML model deployment and management
• Optimize container resource allocation using Kubernetes namespaces and related techniques
• Partner with development teams to streamline CI/CD for fast and reliable delivery
• Monitor performance and security, troubleshoot incidents, and improve reliability
• Own and improve cloud scalability and cost efficiency
• Build and maintain CI/CD pipelines (build, test, security checks, deploy)
• Implement Infrastructure as Code with Terraform (modules, environments, remote state, drift detection)
• Standardize deployments using GitLab CI or Bitbucket Pipelines
• Implement monitoring/alerting and incident response practices
• Improve security posture: least-privilege IAM, secrets management, policy-as-code
• Automate releases and reduce lead time

Requirements

• 5+ years in DevOps/SRE/Platform Engineering (or equivalent)
• 3+ years hands-on AWS and Terraform in production
• Proven ownership of CI/CD pipelines across multiple services/environments

Technical Skills (from posting)

• AWS: VPC, IAM, EC2, ECS/EKS, RDS, S3, CloudWatch, load balancing, Route 53
• CI/CD: GitLab CI or Bitbucket Pipelines; blue/green and canary strategies; approvals
• Terraform: modules, workspaces/environments, remote state, plan/apply workflows
• Containers: Docker; Kubernetes/EKS (fundamentals) and/or ECS fundamentals
• Scripting: Bash and Python or Go for automation
• Security: IAM best practices; secrets (SSM/Secrets Manager/Vault); SAST/DAST basics
• Observability: metrics/logs/traces; CloudWatch; common tools like Datadog/Splunk/ELK
• Networking: DNS, TLS, subnets, security groups, NACLs, VPN/private connectivity basics

Nice to Have

• Production EKS experience (Helm, Argo CD/Flux)
• Policy as code (OPA, Sentinel) and cloud governance practices
• FinOps/cost optimization experience

Location

• United States (no further constraints specified)