Senior DevOps Engineer (Cloud & On-Premises)

Role Overview

Senior DevOps Engineer (Cloud & On-Premises) for a Business Systems Development team in New Jersey, USA (Hybrid; ~2 days in-office). This is a hands-on, “crack on” DevOps role (80–90% technical work) owning the end-to-end lifecycle of Kubernetes across AWS EKS and on-premises data centers. The environment is fast-paced and regulated (financial services), with a focus on stability, security, and performance.

Responsibilities

• Kubernetes Lifecycle & Application Onboarding (Primary 60%)
  • Own end-to-end onboarding of applications onto on-prem Kubernetes and AWS EKS
  • Author/refactor Kubernetes manifests using Kustomize and Helm charts (policy enforcement + environment overrides)
  • Implement/manage GitOps with Flux and ArgoCD for declarative state + drift reconciliation
  • Run production-readiness reviews (resource limits, liveness/readiness probes, PDBs, topology spread constraints)
• CI/CD & Developer Experience (15%)
  • Architect/maintain multi-branch Jenkins pipelines (scripted/declarative) for secure container builds
  • Integrate with image registries (ECR, Harbor) and add image-scanning gates
  • Build internal automation tooling in Python (environment turn-ups, stress test orchestration, DR runbooks)
• Observability, Networking & Security (20%)
  • Deploy/tune observability stack: Prometheus, Grafana, Splunk, AlertManager
  • Configure/troubleshoot Kubernetes networking: Ingress (Nginx/HAProxy), service mesh (Istio/Linkerd), CNI (Calico/Cilium)
  • Implement authentication/authorization: AWS IAM with EKS IRSA and centralized identity via Keycloak
  • Manage TLS: internal PKI, cert-manager renewals, and mTLS debugging

Requirements

• 7+ years experience in combined on-premises and cloud environments
• Significant experience in Financial Services (banking, capital markets, hedge funds, or fintech)
• Strong developer background: experience building with Python, Java, Go, or Node.js and understanding application/API contracts
• Deep Kubernetes runtime and dependency/network understanding (not purely container orchestration)

Nice-to-haves / Demonstrated Capabilities (from examples)

• Refactoring Helm charts for non-root security contexts
• Debugging mTLS between an on-prem Kafka cluster and EKS microservices
• Writing a Python operator or Jenkins shared library for bespoke disaster recovery automation

Reporting Line

Reports to the Director of DevOps.