站点可靠性工程师 III
Site Reliability Engineer III
在Mitratech，我们是一支由技术专家组成的团队，专注于打造世界级的产品，简化法律、风险、合规和人力资源职能中的操作。我们是一个紧密协作、全球分布的团队，在一个支持个人卓越、以多样性和包容性工作文化为中心的生态系统中茁壮成长，注重优秀的人才实践、学习机会和乐趣！我们的文化是创业精神与企业投资的理想结合，使我们能够以快速的步伐，使用一些最复杂、最先进的技术进行创新。
35多年来，Mitratech的专家们一直专注于解决复杂的需求。如今，我们为全球20,000家不同规模的公司提供服务，其中包括30%的财富500强企业，覆盖160多个国家，拥有超过500,000名用户。
随着持续增长，我们一直在寻找有创造力、热情且带来新视角的人才。加入我们的全球团队，看看是什么让Mitratech成为一个真正卓越的工作场所！
**职位简介**
Mitratech正在寻找一名高级AWS DevOps工程师III，负责主导并推动我们的CI/CD、基础设施自动化和云平台工程实践。AWS是主要的云平台——你将每天使用广泛的AWS服务，包括计算（EC2、Fargate、EKS、Lambda）、消息传递（SQS）、数据（RDS、Aurora）、AI/ML（Bedrock）、分析（QuickSight）以及基础设施交付（CDK、Terraform）。Azure是一个次要环境，你将定期使用；Linux管理贯穿所有工作。
你将在所有三种CI/CD工具（GitHub Actions、Bitbucket Pipelines和Jenkins）中得心应手，能够设计可重用的流水线模式，将流水线在不同工具间迁移，并无论源代码控制或构建平台如何，都能确保一致的交付标准。Terraform是主要的IaC工具；AWS CDK用于应用-基础设施共置模式，是该职位的关键部分。
作为DevOps III，你将独立处理复杂问题，提出架构建议，指导初级工程师，并积极提升交付可靠性和自动化覆盖率。你还将参与CI/CD和基础设施事件的值班轮班。
**日常职责**
**CI/CD流水线工程 — GitHub | Bitbucket | Jenkins**
- 设计、实施和维护跨GitHub Actions（可重用工作流、复合动作、矩阵构建、自定义注册表）的端到端CI/CD流水线
- 优化流水线性能，提高构建和部署效率
- 确保流水线的可维护性和可扩展性，支持多团队协作
- 与开发团队合作，制定最佳实践并推广
- 编写文档和培训材料，帮助团队理解和使用流水线
- 参与流水线故障排查和根因分析，持续改进系统稳定性
查看英文原文
At Mitratech, we are a team of technocrats focused on building world-class products that simplify operations in the Legal, Risk, Compliance, and HR functions. We are a close-knit, globally dispersed team that thrives in an ecosystem that supports individual excellence and takes pride in its diverse and inclusive work culture centered around great people practices, learning opportunities, and having fun! Our culture is the ideal blend of entrepreneurial spirit and enterprise investment, enabling the chance to move at a rapid pace with some of the most complex, leading-edge technologies available.
For over 35 years, the experts at Mitratech have been focused on solving the complex needs. Today, we serve 20,000 client companies of all sizes globally, representing 30% of the Fortune 500 and over 500,000 users in over 160 countries.
As we continue to grow, we’re always looking for resourceful, enthusiastic, and fresh perspectives. Join our global team and see what makes Mitratech a truly exceptional place to work!
**ABOUT THE ROLE**
Mitratech is seeking a senior Site Reliability Engineer III to own and evolve our CI/CD, infrastructure automation, and cloud platform engineering practice. AWS is the primary cloud platform -- you will work daily with a broad AWS service footprint including compute (EC2, Fargate, EKS, Lambda), messaging (SQS), data (RDS, Aurora), AI/ML (Bedrock), analytics (QuickSight), and infrastructure delivery (CDK, Terraform). Azure is a secondary environment you will work in with some regularity; Linux administration underpins everything.
You will be comfortable across all three CI/CD Tools (GitHub Actions, Bitbucket Pipelines, and Jenkins), able to design reusable pipeline patterns, migrate pipelines between tools, and enforce consistent delivery standards regardless of the source control or build platform. Terraform is the primary IaC tool; AWS CDK is used for application-infrastructure co-located patterns and is a key part of this role.
At DevOps III you operate independently on complex problems, make architectural recommendations, mentor junior engineers, and actively raise the bar on delivery reliability and automation coverage. You will also participate in on-call rotation for pipeline and infrastructure events.
**A DAY IN THE LIFE**
**CI/CD Pipeline Engineering — GitHub | Bitbucket | Jenkins**
- Design, implement, and maintain end-to-end CI/CD pipelines across GitHub Actions (reusable workflows, composite actions, matrix builds, self-hosted runners), Bitbucket Pipelines (pipe steps, custom runners, deployment environments), and Jenkins (declarative pipelines, shared libraries, agent pools, and Blue Ocean).
- Build reusable pipeline templates and shared libraries that standardize delivery patterns across all three CI/CD platforms -- engineers should be able to ship reliably without knowing which tool runs underneath.
- Drive pipeline governance across all platforms: branch protection policies, PR-required checks, approval gates, environment promotion strategies, and parallel job optimization.
- Implement and enforce pipeline quality gates: automated test integration, SAST/SCA security scanning, container image scanning, Terraform plan validation, CDK diff review, and compliance policy checks.
- Own artifact management across ECR (container images), S3 (build artifacts), and package feeds: versioning strategies, promotion workflows, and retention policies across dev/staging/prod.
- Migrate and consolidate pipelines: when Bitbucket or Jenkins pipelines need to move to GitHub Actions (or vice versa), you design the migration path, execute it, and document the new standard.
**AWS Platform Engineering — Core Services (Primary)**
- Architect and manage AWS compute services: EC2 (AMI management, launch templates, Auto Scaling Groups), ECS Fargate (task definitions, service discovery, capacity providers), EKS, and Lambda (function packaging, layers, event source mappings, concurrency management).
- Design and maintain AWS messaging and event-driven architectures: SQS (standard and FIFO queues, DLQs, visibility timeouts, batch processing integration), SNS, and EventBridge for decoupled pipeline triggers and async workload patterns.
- Manage AWS data services: RDS and Aurora (multi-AZ, read replicas, parameter groups, automated backups, IAM database authentication, Performance Insights) -- including operational runbooks for failover, patching, and connectivity.
- Own AWS networking design: VPC architecture, subnet strategy, security groups, NACLs, Transit Gateway, VPN/Direct Connect, Route 53, ALB/NLB, PrivateLink, and VPC endpoints for secure private connectivity.
- Manage multi-account AWS Organizations: SCPs, account vending via Control Tower or Account Factory for Terraform, guardrails, and landing zone governance across production, staging, and sandbox environments.
- Implement AWS security posture controls: Security Hub, GuardDuty, Config Rules, CloudTrail, Macie, IAM Access Analyzer, and Secrets Manager -- integrated with CI/CD pipeline policy enforcement.
**AWS CDK & Terraform — Infrastructure as Code**
- Author and maintain AWS CDK applications (TypeScript or Python) for application-infrastructure co-located patterns: Lambda functions with their event sources, SQS queues, RDS instances, ECS task definitions, and supporting IAM roles -- all as versioned, testable code alongside application code.
- Own and evolve the Terraform/OpenTofu module library for AWS and Azure: design composable modules, enforce DRY principles, manage remote state (S3 + DynamoDB locking), and implement workspace strategies for multi-environment deployments.
- Implement GitOps workflows for all IaC: every resource change goes through PR, plan/diff validation (Terraform plan + CDK diff in pipeline), and pipeline-applied apply/deploy -- zero manual console changes in production.
- Integrate CDK and Terraform into the CI/CD pipeline ecosystem: GitHub Actions workflows for CDK deploy, Bitbucket Pipelines for Terraform apply, and Jenkins shared library steps for IaC validation.
- Manage CDK construct libraries: author reusable L3 constructs that encode Mitratech's opinionated defaults for Lambda, ECS, RDS, and SQS patterns -- reducing boilerplate for product engineers.
**AI/ML Operations — AWS Bedrock & Analytics (QuickSight)**
- Operate and maintain AWS Bedrock integrations: model deployment automation, inference endpoint configuration, IAM permission boundaries for foundation model access, and Bedrock guardrails for responsible AI use within Mitratech products.
- Build and maintain CI/CD pipelines for Bedrock-enabled applications: package Lambda functions that invoke Bedrock, manage prompt templates and model version configurations as versioned artifacts, and implement canary/blue-green deployment patterns for AI-augmented features.
- Manage QuickSight infrastructure: dataset refresh schedules, capacity management, VPC connectivity for RDS and Redshift data sources, IAM permissions, and embedding configuration for customer-facing analytics within Mitratech products.
- Automate QuickSight asset management: dashboard and dataset deployment via QuickSight APIs integrated into CI/CD pipelines -- no manual dashboard publishing in production.
- Support data pipeline reliability between RDS/Aurora, S3 data lake, SQS-driven ingestion, and QuickSight: monitor data freshness SLAs and integrate pipeline health signals into the team's observability stack.
**QUALIFICATIONS**
**Required**
- 5 to 7 years as a DevOps or Cloud/Infrastructure Engineer in production; 4+ years with AWS as the primary platform.
- Hands-on CI/CD expertise across GitHub Actions AND at least one of Bitbucket Pipelines or Jenkins -- must be able to design, build, and maintain pipelines on multiple platforms, not just one.
- AWS CDK proficiency (TypeScript or Python): authoring CDK stacks and reusable constructs for Lambda, ECS Fargate, SQS, RDS, and supporting IAM patterns.
- Expert Terraform: module authoring, remote state (S3 + DynamoDB locking), workspace strategy, and GitOps-driven apply pipelines.
- Deep AWS Fargate: task definition authoring, service auto-scaling, capacity provider strategies, VPC networking, and ECR image lifecycle management.
- AWS Lambda operations: packaging and deployment automation, layers, function URLs, event source mappings (SQS, S3, EventBridge), and concurrency/throttle management.
- AWS SQS: queue design, DLQ configuration, visibility timeout tuning, and batch processing integration with Lambda and Fargate.
- AWS RDS/Aurora: operational runbooks for failover, patching, parameter group management, IAM authentication, and Performance Insights analysis.
- AWS Bedrock: at least one production integration -- model invocation pipelines, IAM permission design, and deployment automation for Bedrock-enabled Lambda functions.
- AWS QuickSight: dataset management, SPICE, VPC connectivity, and API-driven dashboard deployment in CI/CD.
- Strong Linux administration: RHEL/Amazon Linux/Ubuntu OS hardening, systemd, performance profiling, SSM Patch Manager, and Ansible configuration management.
- Shift-left security across all pipeline platforms: SAST, SCA, container scanning, secrets scanning, and IaC security scanning (Checkov, cfn-guard).
**Preferred**
- AWS certifications: Solutions Architect Professional, DevOps Engineer Professional, or Security Specialty.
- AWS Control Tower / Account Factory for Terraform (AFT) for multi-account landing zone management.
- HashiCorp Vault for dynamic credential issuance and secrets management.
- EC2 Image Builder or Packer for golden AMI pipeline automation.
- AWS Step Functions for complex serverless orchestration patterns alongside Lambda/SQS.
- DORA metrics instrumentation using LinearB, Sleuth, or equivalent engineering productivity platforms.
**_We are an equal-opportunity employer that values diversity at all levels. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity, disability, or veteran status._**