Senior DevOps Engineer

Ascensus; Newton (MA); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

401(k) match

Medical, Dental, Vision

Paid-Time-Off

Health Savings Account

529 college savings match programs

Job summary

Ascensus is seeking a Senior DevOps Engineer located in Newton, Massachusetts. The role requires over 10 years of experience in designing and operating CI/CD platforms, specifically within hybrid environments involving AWS. Responsibilities include standardizing CI/CD frameworks, implementing progressive delivery strategies, and ensuring observability within environments.

The ideal candidate will have strong qualifications in AWS, GitHub Actions, containers, and database management. The position offers a competitive salary between 120k to 165k, along with benefits including health insurance and 401(k) match.

Qualifications

• 10+ years of hands-on experience designing and operating enterprise-grade CI/CD platforms.
• Experience in regulated or financial services environments.
• Strong documentation and architectural communication.

Responsibilities

• Design and operate a standardized CI/CD framework.
• Implement feature flags and automated rollback based on health checks.
• Automate database schema versioning and migrations.

Skills

AWS (mandatory)

GitHub Enterprise

Docker

Kubernetes

Oracle and Microsoft SQL Server

Terraform

CI/CD orchestration

Tools

HashiCorp Vault

AWS Secrets Manager

Prometheus

Grafana

Job description

Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.

Position Summary

We are seeking a Senior DevOps Engineer with 10+ years of hands‑on experience designing, building, and operating enterprise‑grade CI/CD platforms across hybrid environments (AWS and on‑premises). This role will lead platform standardization, progressive delivery, reliability engineering, and security‑by‑design to enable high‑quality, low‑risk software delivery at scale.

Key Responsibilities

• CI/CD Platform & Environment Strategy: Design, implement, and operate a standardized CI/CD framework supporting Dev, QA, PartnerLab, Staging, and Production, and define promotion workflows with enforced quality gates and artifact immutability.
• Establish PartnerLab as a dedicated integration and validation environment with no direct path to Production and ensure environment parity across AWS and on‑prem systems.
• Progressive Delivery & Release Engineering: Implement feature flags, canary deployments, blue‑green deployments, and phased rollouts; enable automated rollback based on health checks, error rates, and SLO breaches; maintain full release traceability from commit through production.
• Test Automation & Quality Engineering: Integrate unit, integration, regression, security, and performance testing into CI/CD pipelines; enforce automated quality gates and support manual validation workflows with controlled access and test artifacts.
• Database & Data Automation: Automate database schema versioning, migrations, rollbacks, and validation; build lower‑environment refresh pipelines sourced from production data; enforce data masking, PII anonymization, and validate data integrity and consistency post‑refresh.
• Observability, Reliability & Operations: Define and enforce observability standards; implement service health dashboards, alerts, and incident signals; integrate deployment health into automated release decisions; support on‑call readiness, incident response, and post‑incident reviews.
• Security, Governance & Compliance: Embed security scanning, secrets management, and access controls into pipelines; enforce least‑privilege IAM, credential rotation, and artifact integrity checks; align CI/CD workflows with enterprise change management and audit requirements.

Required Technical Skills

• Cloud & Infrastructure: AWS (mandatory) – ECS, EKS, Lambda, RDS, IAM, CloudFormation, CloudWatch; hybrid infrastructure experience across on‑prem VMs, bare metal, and internal networks; Terraform for modular, reusable, policy‑compliant infrastructure.
• CI/CD & Platform Engineering: GitHub Enterprise & GitHub Actions (reusable workflows, templates, runners, environments); CI/CD orchestration across hybrid AWS and on‑prem topologies; artifact versioning, promotion, and immutability strategies.
• Containers & Orchestration: Docker image design, optimization, and security hardening; Kubernetes (EKS and on‑prem) deployment patterns, scaling, and lifecycle management; Helm for deployment standardization.
• Testing, Release Safety & Analysis: Automated testing frameworks (unit, integration, regression, performance); static and dynamic analysis tools (code quality, security, dependency scanning); feature flag platforms or equivalent internal capabilities.
• Database & Data Management: Oracle and Microsoft SQL Server (mandatory); schema migration tooling with automated rollback; data masking, anonymization, and controlled refresh automation.
• Observability & Reliability Engineering: Metrics, logging, and tracing with Prometheus, Grafana, Splunk, New Relic, CloudWatch, OpenTelemetry, ELK; SLO‑driven alerting and deployment health evaluation; automated failure containment and rollback strategies.
• Security & Secrets Management: HashiCorp Vault, AWS Secrets Manager, or equivalent; secure pipeline design with controlled credential access.
• Compliance‑ready logging, approvals, and traceability.

Soft Skills & Delivery Expectations

• Experience in regulated or financial services environments.
• Strong documentation, runbooks, and architectural communication.
• Proven collaboration with application, infrastructure, security, and QA teams.
• Comfortable operating in enterprise, onshore delivery models.

Compensation & Benefits

• The national average salary range for this role is 120‑165k in base pay, exclusive of any bonuses and benefits.
• Other rewards and benefits may include: 401(k) match, Medical, Dental, Vision, Paid‑Time‑Off, Health Savings Account with employer contribution up to $1,100, 401(k) & 529 college savings match programs.

We are proud to be an Equal Opportunity Employer.

Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.com email addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about the validity of this job posting, we strongly encourage you to apply directly through our website.