Responsibilities

• Design and maintain Terraform and Terragrunt modules for multi-account AWS environments
• Manage EKS clusters, Karpenter node provisioning, networking, and IAM
• Drive infrastructure toward immutable, declarative patterns
• Build and operate the observability stack across metrics, logs, traces, dashboards, and alerting
• Define SLOs and support SLO-based alerting tied to DORA metrics
• Drive incident response and contribute to HA/DR architecture for a regulated financial platform
• Own CI/CD pipelines using GitLab runners, ArgoCD, and GitOps patterns
• Build golden pipelines and self-service tooling that reduce friction between code merge and production
• Implement policy-as-code, container scanning, supply chain security, and secrets management
• Partner with security teams on audit readiness and compliance controls
• Architect and deploy production EKS clusters with Karpenter for intelligent, cost-efficient node scaling
• Build a Terragrunt-driven multi-account AWS landing zone with SCPs, Control Tower, and least-privilege IAM
• Design GitOps deployment pipelines using ArgoCD with ApplicationSets for multi-environment promotion
• Stand up a full observability stack using metrics, logs, traces, and alerting
• Evaluate and implement a service mesh such as Istio or Linkerd for mTLS, traffic management, and canary deployments
• Introduce supply chain security practices including image signing with Cosign, SBOM generation, and admission policies
• Build an internal developer platform with self-service namespaces, templated pipelines, and environment provisioning
• Contribute to architecture decision records, blameless post-mortems, internal documentation, and broader platform engineering standards
• Help shape conventions, tooling choices, golden paths, and internal engineering culture from the ground up