DevOps Engineer

Twenty; New York (NY); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision plans

Paid parental leave

Flexible PTO

401(k) options

On-site fitness center

Job summary

Twenty is seeking a DevOps Engineer / Software Engineer – Infrastructure for an in-office role in New York, NY. The successful candidate will design, build, and operate AWS-based infrastructure, ensuring application reliability through observability improvements.

The ideal applicant has a solid background in AWS, network security, and management tools like Terraform and Ansible. Benefits include health coverage, paid parental leave, retirement plans, and more.

Qualifications

• Experience administering infrastructure and applications deployed on AWS.
• Experience using Terraform for single-tenant and multi-tenant environments.
• Strong instincts with IP networking, network security, and PKI management.

Responsibilities

• Design, build, and operate AWS-based infrastructure.
• Implement Infrastructure-as-Code using Terraform.
• Own and evolve CI/CD pipelines.

Skills

AWS infrastructure management

Terraform

IP networking

Network security

PKI management

Tools

Ansible

GitHub Actions

PostgreSQL

Grafana

OpenTelemetry

Job description

Role Summary

We are seeking a DevOps Engineer / Software Engineer – Infrastructure for an in-office position in our New York, NY office focused on infrastructure and reliability to help design, build, and operate our application platform. This position is at the crossroads of software engineering, operations, and security. You will own core AWS infrastructure, drive observability and reliability improvements, and collaborate closely with product and backend teams. Common backgrounds for this role include DevOps Engineer, SRE, Platform Engineer, or Backend Engineer (Infrastructure).

What You’ll Do

• Design, build, and operate AWS-based infrastructure.
• Implement and maintain Infrastructure-as-Code for single-tenant and multi-tenant environments using Terraform.
• Build and maintain deployment and environment automation (Ansible or similar).
• Own and evolve CI/CD pipelines.
• Design, implement, and refine observability: metrics, logs, traces, dashboards, and alerting.
• Partner with application teams on architecture decisions, performance tuning, and operational readiness.
• Contribute to security and governance: IAM policies, network security, secrets management, and security scanning.
• Document systems, patterns, and runbooks so others can operate and extend the platform reliably.

Must Haves

• Experience administering infrastructure and operating applications deployed on AWS.
• Experience using Terraform to manage single-tenant and multi-tenant systems.
• Strong instincts and practical experience with:
  • IP networking (VPCs, routing, subnets, proxies, DNS).
  • Network security (security groups, NACLs, firewalls).
  • PKI management (TLS certificates, CAs, mTLS, certificate lifecycle).

Should Have

• Experience with Ansible or another deployment automation/configuration management framework.
• Experience with GitHub Actions or another CI/CD platform (GitLab CI/CD, CircleCI, etc.).
• Experience working on reliability projects, such as:
  • Setting up alert management tools and on-call practices.
  • Debugging failures in distributed systems.
• Experience setting up observability and operations programs, including:
  • Collecting and representing telemetry in Grafana (dashboards, panels, alerts).
  • Instrumenting applications using OpenTelemetry or other log/metric/trace aggregation frameworks.
• Experience managing PostgreSQL databases in production (backups, migrations, performance, monitoring).
• Experience managing a pub/sub or queue technology, such as NATS, RabbitMQ, Kafka, AWS SQS, or Google Pub/Sub.
• Familiarity with secrets management (AWS SSM/Secrets Manager, Vault, or similar).

Nice to Have

• Experience or strong interest in cybersecurity (threat modeling, hardening, secure defaults).
• Proficiency in Python or another scripting language for tooling and automation.
• Experience operating a security scanning tool, such as Trivy (or similar vulnerability/container scanners).
• Experience or interest working with large datasets (performance, storage trade-offs, retention policies).
• Experience managing graph databases, such as Neo4j, AWS Neptune, or similar.
• Experience designing or contributing to runbooks and internal platform documentation for non-infrastructure teams.

Benefits

What's on the table:

• Health. Medical, dental, and vision plan options. Life / AD&D, disability coverage options.
• Family. Paid parental leave for eligible full-time employees. 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.
• Vacation. Paid holidays and flexible PTO. Take what you need.
• Retirement. 401(k) with pre-tax and Roth options. HSA/FSA options, dependent care FSA.
• At the office. Commuter benefits. On-site garage parking. Bike storage. Building fitness center. Desk setup stipend.

Benefits vary by location, role, and eligibility. Full plan details provided during the interview and offer process.

If this role sounds like you, apply and share with us your interest.

Some positions may require eligibility to obtain a U.S. Government security clearance. Any clearance requirement will be listed in the role description.

Twenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status.

If you need a reasonable accommodation during the hiring process, let us know and we will work with you.