Senior Engineer - DevOps, Onsite

Devopsroles; Springfield (MO); On-site; CAD 156,000 - 212,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k Retirement Savings

Paid holidays

Paid vacation

Job summary

Bass Pro Shops is seeking a Senior DevOps Engineer to join our platform engineering team onsite in Springfield, Missouri. You will own and optimize hundreds of GitHub Actions pipelines, manage AKS clusters, and enforce secure, observable, and resilient software delivery across multi‑regional Azure footprints.

You will implement GitOps workflows with FluxCD/ArgoCD, manage Helm releases, and drive deployment strategies while ensuring platform security and reliability at scale.

Qualifications

• 5–8 years of experience in a DevOps, platform engineering, or site reliability role.

Responsibilities

• Own and maintain hundreds of GitHub Actions CI/CD pipelines across multiple teams and repositories.
• Integrate security scanning tooling across the full pipeline estate and enforce scan gates at scale.
• Implement and maintain GitOps workflows using FluxCD and/or ArgoCD; manage configuration drift and progressive delivery.
• Package and version applications using Helm charts; maintain internal chart libraries and release workflows.
• Drive improvements in build performance and deployment strategies including blue/green, canary, and rolling updates.

Skills

GitHub Actions CI/CD

Kubernetes

Terraform

FluxCD

ArgoCD

Helm

Azure

Security scanning

Scripting (Bash, Python)

Tools

AKS

Terraform

Azure Kubernetes Service

Elastic Stack

OpenTelemetry

Akamai

Azure Key Vault

GitHub Actions

FluxCD

ArgoCD

Helm

Job description

Bass Pro Shops is seeking a Senior DevOps Engineer to join our platform engineering team. This is a high-ownership, high-impact role at the center of how we build, ship, and operate software at scale. You will be responsible for managing and continuously improving software delivery across hundreds of CI/CD pipelines, operating a multi-regional Azure Kubernetes footprint, and ensuring our platform is secure, observable, and resilient.

You'll work across the full spectrum of platform engineering — from pipeline security scanning and GitOps delivery to distributed data infrastructure and global traffic management. If you want to own a platform that touches everything and has real engineering depth, this is the role.

This role is required to be onsite in Springfield, Missouri.

Responsibilities

Software Delivery & Pipelines

• Own and maintain hundreds ofGitHub ActionsCI/CD pipelines across multiple teams and repositories
• Integrate and managesecurity scanning tooling(SAST, container image scanning, dependency scanning, secrets detection) across the full pipeline estate; enforce scan gates and triage findings at scale
• Implement and maintainGitOpsworkflows usingFluxCDand/orArgoCD; manage fleet-level configuration drift, reconciliation, and progressive delivery
• Package and version applications usingHelm charts; maintain internal chart libraries and manage release workflows
• Drive improvements in build performance, deployment strategies (blue/green, canary, rolling), and rollback capabilities

Infrastructure & Kubernetes

• Manage and operateAzure Kubernetes Service (AKS)clusters across environments — including cluster lifecycle, RBAC, network policies, autoscaling, and workload placement
• Author and maintainInfrastructure as CodeusingTerraform— modules covering Azure networking (VNets, subnets, NSGs, private endpoints, peering), compute, storage, AKS, and managed services
• Manage container image build pipelines,Azure Container Registry (ACR), base image governance, and automated vulnerability scanning
• Manage secrets and sensitive configuration throughAzure Key Vault; enforce least-privilege access across pipelines and services

Multi-Regional & Traffic Management

• Architect and operatemulti-regional Azure footprintsincluding cross-region failover, geo-replication, and latency-aware traffic design
• Configure and manageAkamaiedge policies — CDN, WAF, DDoS mitigation, TLS offload, and API Gateway rules
• Implement and maintainAzure Traffic Manager for DNS-level global load balancing, health probing, and regional failover

Distributed Systems

• Design and operateApache Kafkainfrastructure — broker configuration, topic and partition management, consumer group tuning, schema governance, and multi-cluster replication
• ManageMongoDBdeployments (replica sets, sharding, backup/restore strategies) on Kubernetes and/or Azure-managed equivalents
• SupportRedisdeployments — clustering, eviction policies, persistence, and high availability configuration

Observability & Security

• Build and maintain observability pipelines using theElastic StackandOpenTelemetry— log aggregation, distributed tracing, and metrics from infrastructure through application layers
• Support and enforce security and compliance postures aligned withPCI DSSandCIS Benchmarkstandards at the infrastructure, Kubernetes, and pipeline layers
• Participate in on-call rotations and incident response; conduct post-mortems and drive reliability improvements

Required Qualifications

• 5–8 years of experience in a DevOps, platform engineering, or site reliability role
• Proven experience managing and securingCI/CD pipelines at scale(100+ pipelines) usingGitHub Actions, including integration of security scanning tools (Trivy, Dependabot, or equivalent)
• Deep hands‑on experience withAKSand Kubernetes — RBAC, network policies, resource management, cluster upgrades, and multi‑environment operations
• StrongTerraformskills — module authoring, state management, workspace strategy, and Azure resource coverage
• Production experience withFluxCDorArgoCDin a GitOps delivery model
• Proficiency withHelm— authoring charts, managing dependencies, and release workflows
• Solid understanding ofAzure networking— VNets, NSGs, route tables, private endpoints, DNS, and peering
• Experience withAzure Key Vaultand secrets management patterns across pipelines and workloads
• Hands‑on experience withElastic StackandOpenTelemetryfor observability
• Proficiency inLinuxadministration and scripting —Bash,Shell, andPython
• Working knowledge ofPCI DSSandCIS Benchmarkhardening standards applied to cloud and container environments
• Experience withmulti‑regional Azure architecturesand global traffic routing patterns
• Hands‑on experience withApache Kafka,MongoDB, andRedisin production environments

Preferred Qualifications

• Experience withAkamaiedge platform — property configuration, WAF policies, and API Gateway
• Experience withAzure Traffic Managerand/orAzure Front Doorfor global load balancing and failover
• Familiarity with Azure Policy, Microsoft Defender for Cloud, or cloud security posture management tooling
• Experience with service mesh technologies (Istio, Linkerd)
• Kafka multi-cluster replication and consumer lag monitoring at scale
• Azure certifications (AZ-104, AZ-400, CKA/CKAD)

PHYSICAL REQUIREMENTS

Regularly sit, and do computer work.

Occasionally walks, and stands.

Seldom/Never lifts up to 50 lbs.

INDEPENDENT JUDGEMENT

Performs duties within scope of general company policies, procedures, and objectives. Analyzes problems and performs needs assessments. Uses judgment in adapting broad guidelines to achieve desired result. Regular exercise of independent judgment within accepted practices. Makes recommendations that affect policies, procedures, and practices.

Full Time Benefits Summary

Enjoy discounts on retail merchandise, our restaurants, world-class resorts and conservation attractions!

• Medical
• Dental
• Vision
• Health Savings Account
• Flexible Spending Account
• Voluntary benefits
• 401k Retirement Savings
• Paid holidays
• Paid vacation
• Paid sick time
• Bass Pro Cares Fund
• And more!

We will be accepting applications on an ongoing basis.

Bass Pro Shops is an equal opportunity employer. Hiring decisions are administered without regard to race, color, creed, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, ancestry, citizenship status, disability, veteran status, genetic information, or any other basis protected by applicable federal, state or local law.

Reasonable Accommodations

Qualified individuals with known disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and certain state or local laws. If you need a reasonable accommodation for any part of the application process, please visit your nearest location or contact us at [e-mail].

Bass Pro Shops