高级 DevOps 工程师（基础设施/平台团队）
Senior DevOps Engineer (Infra / Platform Team)
职位描述
我们正在寻找一名高级DevOps工程师加入我们的基础设施团队，帮助设计、构建和运营安全、合规且自动化的云环境，为我们的内部系统和面向客户的产品平台提供支持。
你将与经验丰富的基础设施和安全工程师一起工作，他们相信基础设施即代码，强制实施最小权限访问，并自动化一切——从CI/CD流水线到合规性证据收集。
这个职位适合在基于AWS的环境中茁壮成长的人，喜欢编写Terraform模块和Python自动化，并理解如何在速度、可靠性和合规性（ISO 27001、SOC 2、CIS基准）之间取得平衡。
职责
- 在多个账户和区域（Control Tower、Organizations、SSO）中设计、实施和维护AWS基础设施。
- 开发、测试和版本控制Terraform模块和可重用的基础设施蓝图。
- 构建和改进CI/CD流水线（GitHub Actions、自托管运行器、OIDC）。
- 实施安全自动化：CloudWatch警报、Security Hub、GuardDuty、AWS Config、KMS密钥策略和合规即代码流水线。
- 管理可观测性堆栈（CloudWatch、Grafana、Prometheus、ELK）。
- 支持容器化工作负载（ECS EC2、EKS、Lambda）。
- 参与ISO 27001控制措施的实施和证据收集（Vanta、Terraform合规映射）。
- 构建对开发者友好的工具和抽象层，用于云资源的配置和监控。
- 解决跨系统、网络和应用程序的复杂问题。
要求
- 5年以上DevOps、基础设施或SRE相关工作经验。
- 对AWS有深入的专业知识（IAM、EC2、S3、CloudWatch、KMS、Config、Security Hub等）。
- 具有Terraform的生产经验（模块编写、测试、提供者升级）。
- 具备Python和Bash的强脚本/自动化技能。
- 对CI/CD（优先GitHub Actions）和基础设施测试（pytest、Terratest等）有扎实的理解。
- 熟悉ISO 27001、SOC 2或CIS AWS基础基准。
- 具有容器编排（EKS/ECS）、无服务器（Lambda）和现代部署模式的经验。
- 优秀的沟通和文档编写能力；有在分布式团队工作的经验。
加分项
- 具有Vanta、Security Hub自定义集成或GuardDuty告警路由的经验。
- 熟悉MySQL/PostgreSQL操作、RDS或Aurora。
- 具有构建内部工具的经验（Terraform）
查看英文原文
About the Role
We’re looking for a Senior DevOps Engineer to join our Infrastructure team and help design, build, and operate secure, compliant, and automated cloud environments that power our internal systems and customer-facing platforms.
You’ll work alongside experienced infrastructure and security engineers who believe in treating infrastructure as code, enforcing least-privilege access, and automating everything — from CI/CD pipelines to compliance evidence collection.
This role is ideal for someone who thrives in AWS-based environments, enjoys writing Terraform modules and Python automation, and understands how to balance velocity, reliability, and compliance (ISO 27001, SOC 2, CIS Benchmarks).
Responsibilities
- Design, implement, and maintain AWS infrastructure across multiple accounts and regions (Control Tower, Organizations, SSO).
- Develop, test, and version Terraform modules and reusable infrastructure blueprints.
- Build and improve CI/CD pipelines (GitHub Actions, self-hosted runners, OIDC).
- Implement security automation: CloudWatch alarms, Security Hub, GuardDuty, AWS Config, KMS key policies, and compliance-as-code pipelines.
- Manage observability stacks (CloudWatch, Grafana, Prometheus, ELK).
- Support containerized workloads (ECS EC2, EKS, Lambda).
- Contribute to ISO 27001 controls implementation and evidence collection (Vanta, Terraform compliance mappings).
- Build developer-friendly tools and abstractions for provisioning and monitoring cloud resources.
- Troubleshoot complex issues across systems, networks, and applications.
Requirements
- 5+ years of experience in DevOps, Infrastructure, or SRE roles.
- Deep expertise in AWS (IAM, EC2, S3, CloudWatch, KMS, Config, Security Hub, etc.).
- Production experience with Terraform (module authoring, testing, provider upgrades).
- Strong scripting / automation skills in Python and Bash.
- Solid understanding of CI/CD (GitHub Actions preferred) and infrastructure testing (pytest, Terratest, etc.).
- Familiarity with ISO 27001, SOC 2, or CIS AWS Foundations Benchmark.
- Experience with container orchestration (EKS/ECS), serverless (Lambda), and modern deployment patterns.
- Excellent communication and documentation skills; experience working in distributed teams.
Nice to Have
- Experience with Vanta, Security Hub custom integrations, or GuardDuty alert routing.
- Knowledge of MySQL/PostgreSQL operations, RDS, or Aurora.
- Experience building internal tools (Terraform providers, Python CLIs, GitHub Apps).
- Passion for clean, testable code and reproducible automation.
What We Offer
- Work directly with the engineers who build and maintain our Terraform modules, compliance automation, and self-hosted runners.
- A culture that values security, simplicity, and ownership.
- 100% remote, flexible hours, async-friendly environment.
- Competitive compensation.
Originally posted on Himalayas