DevOps 负责人
DevOps Team Lead
负责我们AWS云平台的交付、可靠性和日常运营,这是一个广泛的多账户云环境,通过代码进行管理,并朝着全球分布、多区域工作负载扩展。
这是一个高度技术性的领导角色。你将是团队中技术能力最强的成员之一,同时也会帮助制定和优先处理工作。你将把产品和工程需求转化为基础设施要求,指导团队的交付,并确保我们构建的内容是自动化的、安全的、有文档记录的、成本意识强的,并且在操作上是可靠的。
该职位大约60%的时间用于实际工程工作,40%用于技术领导工作,包括需求分析、计划、评审、协调和指导。
你将负责
- 在多账户AWS环境中设计、构建、评审并运营我们的基础设施即代码(IaC)体系,包括可重用模块、环境配置、状态管理和账户配置。
- 负责并改进基础设施变更的CI/CD流水线,包括自动化验证、安全与合规控制以及无密钥云认证。
- 构建和维护支持我们产品的核心AWS服务,包括网络、容器、数据库、存储、消息传递、系统管理、备份、监控和成本控制。
- 建立并强化IaC、IAM、资源标记、状态管理、版本控制、安全、文档和操作准备方面的实用工程标准。
- 将来自产品、工程、安全和数据团队的模糊请求转化为明确的需求、里程碑、估算、依赖关系和验收标准。
- 负责并优化DevOps待办事项清单,推动团队的Scrum节奏,包括计划、站会、细化、评审和回顾。
- 通过可观测性、SLO、可操作的警报、运行手册、灾难恢复、备份与恢复实践,以及持续减少运维负担来增强平台可靠性。
- 参与轮班的夜间和周末值班安排,在平台事件中提供技术领导,包括事件协调和事后跟进。轮班频率将根据团队规模和覆盖需求而定,但会在团队内公平分配。
- 与安全团队合作,将身份验证、最小权限访问、网络分段、加密、秘密管理、审计日志和合规要求嵌入到…
查看英文原文
The DevOps Team Lead owns the delivery, reliability, and day-to-day operation of our AWS cloud platform, an extensive multi-account cloud environment managed as code and expanding toward globally distributed, multi-region workloads.
This is a highly hands-on technical leadership role. You'll be one of the strongest technical contributors on the team while also helping shape and prioritize the work. You'll translate product and engineering needs into infrastructure requirements, guide the team's delivery, and ensure what we build is automated, secure, documented, cost-conscious, and operationally reliable.
The role is approximately 60% hands-on engineering and 40% technical leadership, including requirements, planning, review, coordination, and coaching.
What You'll Do
- Design, build, review, and operate our Infrastructure-as-Code estate across a multi-account AWS environment, including reusable modules, environment configurations, state management, and account provisioning.
- Own and improve CI/CD pipelines for infrastructure changes, including automated validation, security and compliance controls, and keyless cloud authentication.
- Build and maintain the core AWS services supporting our products, including networking, containers, databases, storage, messaging, systems management, backup, monitoring, and cost controls.
- Establish and reinforce practical engineering standards around IaC, IAM, resource tagging, state management, versioning, security, documentation, and operational readiness.
- Translate ambiguous requests from product, engineering, security, and data teams into clear requirements, milestones, estimates, dependencies, and acceptance criteria.
- Own and refine the DevOps backlog and facilitate the team's Scrum cadence, including planning, stand-ups, refinement, reviews, and retrospectives.
- Strengthen platform reliability through observability, SLOs, actionable alerting, runbooks, disaster recovery, backup and restore practices, and continuous reduction of operational toil.
- Participate in a rotating night and weekend on-call schedule and provide technical leadership during platform incidents, including incident coordination and post-incident follow-through. Rotation frequency will depend on team size and coverage needs but is shared equitably across the team.
- Partner with security to embed identity, least-privilege access, network segmentation, encryption, secrets management, audit logging, and compliance requirements into the platform.
- Lead cloud cost visibility and optimization, including tagging, right-sizing, commitment planning, anomaly response, and the cost implications of multi-region architecture.
- Help evolve the platform toward globally distributed workloads, including regional rollout, data residency and replication, latency-aware routing, cross-region failover, and associated operational tradeoffs.
- Use AI tools effectively in engineering workflows and help design and operate the cloud infrastructure needed to support emerging AI capabilities.
- Set technical direction in partnership with architecture and coach engineers through code review, pairing, design discussions, documentation, and shared platform ownership.
What You'll Bring
- Extensive experience in software engineering, infrastructure, or DevOps, with demonstrated experience operating at a senior or technical lead level in complex cloud environments.
- Expert-level, current hands-on experience with Terraform or equivalent Infrastructure as Code, including managing large-scale cloud environments through IaC.
- Experience with IaC at scale, including reusable module design and versioning, state architecture, safe refactoring, upgrades, drift detection and remediation, and bringing legacy infrastructure under IaC management.
- Deep hands-on AWS experience across compute, storage, networking, IAM, and security, ideally within a multi-account AWS Organization.
- Proven ownership of infrastructure CI/CD pipelines, including automated policy, validation, and security controls.
- Experience designing and operating containerized or distributed production workloads with appropriate networking, security, and observability.
- Scripting proficiency and a track record of automating operational work.
- Demonstrated ownership of production operations, including on-call, incident response, runbook development, and the ability to independently troubleshoot and resolve platform issues.
- Experience leading Agile/Scrum practices, including backlog ownership, refinement, estimation, planning, and stakeholder negotiation.
- Strong ability to turn ambiguous needs into thorough, actionable technical plans that account for requirements, dependencies, risks, milestones, and estimates.
- Strong understanding of cloud security, compliance, and risk management, including least privilege, zero trust, encryption, and appropriate exception management.
- Excellent written communication, documentation, and stakeholder engagement skills.
- A self-directed, collaborative approach with a focus on improving systems rather than repeatedly working around problems.
- Willingness and ability to participate in a rotating night and weekend on-call schedule and independently manage production incidents while on call.
Preferred Experience
- Microsoft Azure experience, particularly Azure Cloud Adoption Framework concepts, landing zones, governance, policy, cost management, and IaC tooling.
- Experience operating globally distributed or multi-region applications, including data replication, global routing, failover, data residency, and regional compliance considerations.
- Experience with monorepo IaC environments, policy-as-code, IaC security tooling, or automated code-quality platforms.
- FinOps experience, including tagging-based cost allocation, commitment planning, anomaly detection, and multi-region cost analysis.
- SRE practices, including SLOs, error budgets, observability, and structured incident management.
- Experience supporting analytics, data engineering, database, or integration workloads as a platform provider.
- AWS certification such as Solutions Architect Professional, DevOps Engineer Professional, or Security Specialty.
- Experience with hybrid connectivity to on-premises environments or improving software development lifecycle practices.
- Experience provisioning or operating infrastructure for AI/ML platforms, including model serving, vector stores, accelerated compute, or supporting data pipelines.
Originally posted on Himalayas