Senior Staff DevOps Engineer

Job Description

Job Title: Senior Staff DevOps Engineer. Location: Denver, Colorado, USA

• Hybrid, with remote work available a few days per week
• Travel: Up to 25%

Responsibilities:

• Own the CI/CD pipeline platform, including shared libraries, reusable templates, standards, and self-service pipeline tooling.
• Maintain infrastructure-specific pipelines.
• Design and implement blue-green, canary, rolling, and feature-flag deployment strategies.
• Own end-to-end release management, including versioning, cross-service coordination, release trains, and go/no-go decisions.
• Ensure every release includes vulnerability review, dependency risk assessment, compliance checks, and rollback validation.
• Establish and maintain GitOps practices using version-controlled declarative infrastructure and application definitions.
• Develop and maintain IaC modules using OpenTofu, Terragrunt, Packer, Ansible, Helm, and Kustomize;
• Build self-service developer portals, environment provisioning tools, and internal developer platforms.
• Track DORA metrics and SDLC health indicators using Jira, identify bottlenecks, and drive continuous improvement.
• Design and operate AI Ops and agentic workflows using AWS Agent Core for pipeline triage, dependency management, environment provisioning, release coordination, and deployment decisions.
• Identify additional opportunities for agentic automation across daily DevOps operations;
• Instrument deployments with observability, configure SLO monitoring, implement canary analysis and automated rollback, and participate in incident response.
• Own pipeline and infrastructure security responsibilities, including vulnerability management, artifact scanning, SAST, DAST, and SBOM generation.
• Work with Security and SRE teams to enforce vulnerability gates and deployment reliability requirements.

Qualifications:

• At least 5 years of hands-on experience with Jenkins, GitLab CI, or GitHub Actions and advanced Git workflows.
• Experience with GitHub Actions OIDC and Workload Identity Federation.
• At least 5 years of practical experience with Python, Bash, or Go.
• At least 4 years of direct experience with Infrastructure-as-Code using OpenTofu, Terragrunt, Packer, or Ansible.
• At least 4 years of experience with Docker, Buildah, Kubernetes, EKS, Kyverno, and Bottlerocket.
• Proven experience with GitOps tools such as Flux and Helm;
• Experience with artifact management platforms including Artifactory, Nexus, ECR, ACR, or GAR.
• Technical experience integrating SAST, DAST, SCA, container scanning, and IaC validation into CI/CD pipelines.
• Experience with tools such as Trivy and native OpenTofu testing frameworks.
• Established experience with AI Ops and agentic frameworks, including AWS Agent Core and LLM-based automation.

Preferred:

• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
• CKA or CKAD certification.
• Experience with MSK/Kafka, IAM authentication, and TLS.
• Experience with internal developer platforms such as Backstage or Port.
• Platform engineering experience supporting 100+ developers.
• Experience with multi-environment promotion strategies.
• Experience with SBOM generation using Syft or CycloneDX;
• Experience with Cosign artifact signing and software supply chain security.
• DevSecOps pipeline design and vulnerability management at scale.
• Experience with AI Ops, intelligent automation, or agentic AI frameworks.
• Experience with AWS Agent Core or equivalent agentic orchestration platforms.

Benefits and Compensation:

• Base salary: $167,808 to $219,704 per year.
• Total compensation includes base salary, bonus, equity, and benefits.
• Medical, dental, and vision insurance.
• Matching 401(k);
• Unlimited PTO and paid holidays.
• Parental and adoption leave.
• Legal insurance.
• Home technology stipend.