Senior DevOps Engineer (Remote, Contract)

INFUSE; New York (NY); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Fully remote

Paid time off

Sick leave

Short Fridays in summer

US holidays and birthday off

Job summary

INFUSE is seeking a Senior DevOps Engineer to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack across production LLM products and legacy systems. You will lead the transition to EKS and GitHub Actions, enforce zero-trust baselines, and mentor engineering teams.

As part of a dynamic, remote team, you will design secure architectures, implement IaC and automation, and drive cost efficiency while maintaining high reliability and security standards across the product

Qualifications

• 5+ years in DevOps / SRE with hands-on AWS experience at scale.
• Terraform expert; strong Ansible; GitHub Actions workflows design.
• Docker & Kubernetes production experience (AWS EKS & Helm).
• Production security incl. zero-trust, automated secrets management, Cloudflare WAF/proxy config.
• English proficiency at least B2 level.

Responsibilities

• Design, build, and run secure AWS infra (EC2, Docker Compose, EKS) with Terraform and Ansible.
• Migrate workloads to EKS; maintain CI/CD in GitHub Actions; move Jenkins jobs to GitHub Actions.
• Enforce security baselines; least-privilege IAM; Cloudflare WAF; backups and monitoring.
• Own monitoring, alerting, logs with Grafana, OpenTelemetry, Sentry; on-call and post-incident reviews.
• Manage AWS costs with tagging, rightsizing, and project estimates; propose improvements.
• Document undocumented infrastructure and bring under IaC and CI/CD standards.
• Collaborate with internal teams and contractors; mentor engineers.

Skills

DevOps/SRE

Terraform

Ansible

Docker

Kubernetes (EKS)

Zero-trust security

English B2+

Tools

Grafana

Prometheus

OpenTelemetry

Cloudflare

Nginx

Job description

OUR HIRING PROCESS:

We will review your application against our job requirements. We do not employ machine learning technologies during this phase as we believe every human deserves attention from another human. We do not think machines can evaluate your application quite like our seasoned recruiting professionals- every person is unique. We promise to give your candidacy a fair and detailed assessment. We may then invite you to submit a video interview for the review of the hiring manager. This video interview is often followed by a test or short project that allows us to determine whether you will be a good fit for the team. At this point, we will invite you to interview with our hiring manager and/or the interview team. Please note: We do not conduct interviews via text message, Telegram, etc. and we never hire anyone into our organization without having met you face-to-face (or via Zoom). You will be invited to come to a live meeting or Zoom, where you will meet our INFUSE team. From there on, it’s decision time! If you are still excited to join INFUSE and we like you as much, we will have a conversation about your offer. We do not make offers without giving you the opportunity to speak with us live.

INFUSE is looking for a Senior DevOps Engineer

to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization. We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.

As part of our dynamic team, your responsibilities in this role will include:

• Design, build and run secure AWS infrastructure (EC2 with Docker Compose, EKS) with Terraform and Ansible ; move suitable workloads from EC2 to EKSBuild and maintain CI/CD in GitHub Actions ; move remaining Jenkins jobs to GitHub ActionsKeep new and existing services at our security baseline:
• Cloudflare proxy with WAF and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as rootOwn monitoring, alerting and logs on our standard stack ( Grafana, OpenTelemetry, Sentry ); on-call, incident response, post-incident reviewsOwn backups and regular restore testsControl AWS cost: tags, rightsizing, removing unused resources, estimates for new projectsRegularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticketTake over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standardsJoin new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness reviewWork with internal teams and contractors ; set and enforce standards; mentor other engineers.

Our ideal candidate possesses the following skills:

• 5+ Years in DevOps / SRE: Proven background operating mission-critical production environments, including 3+ years of hands‑on experience running AWS at scale
• IaC & CI/CD Mastery: Expert with Terraform, highly proficient with Ansible, and experienced in designing production workflows with GitHub Actions
• Containerization & Kubernetes: Strong production experience with Docker and Kubernetes (specifically managed AWS EKS and Helm)
• Production Security & Incident Management: Hands‑on practice with platform hardening, zero‑trust patterns, automated secrets management, system patching, and Cloudflare WAF/proxy configuration. Comfortable with on‑call rotations, incident response, and executing verified backup restore drills
• English proficiency at B2 level or higher.

What Else We Expect & Value:

Application Ecosystem Familiarity:

• Experience supporting Node.js and Python microservices paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare

Modern Observability:

• Practical setup and maintenance of Grafana , Prometheus , and OpenTelemetry pipelines

Core Scripting & Systems:

• Deep fluency in Linux administration , Bash , and Python scripting.

Collaborative Leadership:

• Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.

AI-Augmented Workflow:

• Daily experience leveraging modern AI developer tools and agents ( Claude Code preferred ) to accelerate engineering output.

Proactive & Autonomous Mindset:

• A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table.

Nice to have:

• Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications.

What we offer:

• Fully remote
• work formatSchedule: Monday-Friday, 2 PM - 11 PM Eastern European Time (including 1 hour break)
• A collaborative, innovation-first environment that values initiative and experimentation
• Paid time off and sick leave
• Reduced working hours on Fridays during the summer
• Days off on US national holidays and your birthday.

Hiring process:

• Interview with Recruiter
• Interview with Hiring Manager
• Technical Interview
• Offer.