Senior Devops Engineer

Role & responsibilities

- Design and build Jenkins pipelines for environment refreshes, quarterly OS and middleware patching, Kubernetes/EKS/ArgoCD upgrades and site-resiliency failover exercises

- Automate Kubernetes cluster lifecycle on-prem and on AWS EKS, including deprecated-API pre-flight checks, node draining, readiness gates and wave promotion from sandbox to production

- Run GitOps delivery with ArgoCD, using sync waves to promote changes from one environment to the next

- Automate rotation of certificates, keys and passwords with cert-manager, External Secrets Operator and AWS Secrets Manager, without disrupting applications

- Run automated dependency and vulnerability updates (Renovate, Trivy) so every change goes through a reviewed pull request

- Manage Dynatrace dashboards and alerting as code with Terraform, using plan-on-PR, apply-on-merge and drift detection

- Build automated health checks and readiness dashboards for business-critical processing windows

- Build self-service automation triggered from ServiceNow requests, with access controls and automatic expiry

- Develop AI-assisted on-call tooling that triages incidents across monitoring, ticketing and logs, and runs approved runbook fixes under strict guardrails and human approval

- Plan rollback, pre/post validation and change management for every automation that touches production

- Write runbooks and documentation, and mentor engineers on using and extending the automation

- Work with application teams, database engineers, release management and security on dependencies and handoffs

- Take part in the on-call rotation

Preferred candidate profile

- Strong experience building and maintaining Jenkins pipelines (declarative and scripted, Groovy, shared libraries, parameterised and scheduled jobs)

- Deep hands-on Kubernetes experience, both on-prem and on AWS EKS, including cluster upgrades and production operations

- GitOps experience with ArgoCD

- Ansible for configuration management, patching and orchestration

- Terraform, including remote state and CI-driven plan/apply workflows

- Solid AWS knowledge, especially EKS, IAM, Secrets Manager and S3

- Strong scripting in Python and Bash, including integrating with REST APIs

- Observability experience, preferably Dynatrace (dashboards, alerting, DQL)

- Git and GitHub pull-request workflows

- A track record of delivering automation into production safely, with rollback plans, validation and change management

- The ability to work independently, own outcomes end to end, and explain technical trade-offs to engineers and stakeholders

Nice to have:

- cert-manager, External Secrets Operator, Stakater Reloader

- Renovate, Trivy, pluto/kubent, kured, Kubespray

- Kafka / Confluent Cloud administration (Confluent CLI, API key management, consumer lag monitoring)

- Oracle WebLogic and OHS administration, including PSU patching

- F5 and/or AVI load balancer automation

- ServiceNow (catalog items, request-driven automation, REST API) and Jira automation

- Building AI agents or assistants for operations (e.g. Claude Code, MCP integrations) with safe credential and approval models

- Familiarity with ITGC/SOX controls for access management