Staff DevOps Engineer

Required

• We’re seeking a DevOps Engineering leader to architect and operate secure, scalable Kubernetes platforms across AWS and AWS GovCloud, including FedRAMP-authorized environments. This person will drive zero-trust security, Terraform and GitOps automation, observability, reliability, disaster recovery, and cost governance for both multi-tenant and dedicated enterprise deployments. They’ll also provide technical leadership, mentor engineers, and partner closely with Security and Engineering to evolve Ontic’s platform strategy.
• 8-10+ years of experience in DevOps / Platform Engineering in enterprise or high-scale SaaS environments.
• Proven experience in architecting and operating production environments in AWS and AWS GovCloud; GCP or OCI experience is a plus.
• Demonstrated experience maintaining a FedRAMP Moderate/High production environment, including continuous monitoring, vulnerability remediation, incident response, configuration management, and audit evidence.
• Experience owning infrastructure patterns and changes within the authorized boundary, including system inventory, data-flow implications, inherited controls, and third-party services.
• Strong experience designing and operating AWS Landing Zone architectures, including multi-account governance and guardrails.
• Advanced Terraform experience building reusable, secure infrastructure modules and standardized environments.
• Deep understanding of AWS and AWS GovCloud networking, including VPC design, segmentation, routing, private connectivity, and security controls.
• Deep expertise in Kubernetes-based platform design and large-scale cluster operations.
• Strong experience implementing GitOps workflows (ArgoCD) and CI/CD automation (Jenkins, GitLab).
• Hands-on production experience with distributed systems, including MongoDB, Elasticsearch, Kafka, Redis, and ArangoDB.
• Strong understanding of IAM, encryption at rest and in transit, and zero-trust access models.