Senior DevOps Engineer

Ascensus is the leading independent technology and service platform powering savings plans across America, providing products and expertise that help nearly 16 million people save for a better today and tomorrow.Section 1: Position SummaryWe are seeking a Senior DevOps Engineer with 10+ years of hands‑on experience designing, building, and operating enterprise‑grade CI/CD platforms across hybrid environments (AWS and on‑premises). This role will lead platform standardization, progressive delivery, reliability engineering, and security‑by‑design to enable high‑quality, low‑risk software delivery at scale.Key ResponsibilitiesCI/CD Platform & Environment StrategyDesign, implement, and operate a standardized CI/CD framework supporting Dev, QA, PartnerLab, Staging, and ProductionDefine promotion workflows with enforced quality gates and artifact immutabilityEstablish PartnerLab as a dedicated integration and validation environment with no direct path to ProductionEnsure environment parity across AWS and on‑prem systemsProgressive Delivery & Release EngineeringImplement feature flags, canary deployments, blue‑green deployments, and phased rolloutsEnable automated rollback based on health checks, error rates, and SLO breachesMaintain full release traceability from commit through productionTest Automation & Quality EngineeringIntegrate unit, integration, regression, security, and performance testing into CI/CD pipelinesEnforce automated quality gates before environment promotionSupport manual validation workflows with controlled access, observability, and test artifactsDatabase & Data AutomationAutomate database schema versioning, migrations, rollbacks, and validationBuild lower‑environment refresh pipelines sourced from production dataEnforce data masking and PII anonymization for non‑production environmentsValidate data integrity and consistency post‑refreshObservability, Reliability & OperationsDefine and enforce observability standards across logs, metrics, and tracesImplement service health dashboards, alerts, and incident signalsIntegrate deployment health into automated release decisionsSupport on‑call readiness, incident response, and post‑incident reviewsSecurity, Governance & ComplianceEmbed security scanning, secrets management, and access controls into pipelinesEnforce least‑privilege IAM, credential rotation, and artifact integrity checksAlign CI/CD workflows with enterprise change management and audit requirementsRequired Technical SkillsCloud & InfrastructureAWS (mandatory): ECS, EKS, Lambda, RDS, IAM, CloudFormation, CloudWatchHybrid infrastructure experience across on‑prem VMs, bare metal, and internal networksTerraform for modular, reusable, policy‑compliant infrastructureCI/CD & Platform EngineeringGitHub Enterprise & GitHub Actions (reusable workflows, templates, runners, environments)CI/CD orchestration across hybrid AWS and on‑prem topologiesArtifact versioning, promotion, and immutability strategiesContainers & OrchestrationDocker image design, optimization, and security hardeningKubernetes (EKS and on‑prem) deployment patterns, scaling, and lifecycle managementHelm for deployment standardizationTesting, Release Safety & AnalysisAutomated testing frameworks (unit, integration, regression, performance)Static and dynamic analysis tools (code quality, security, dependency scanning)Feature flag platforms or equivalent internal capabilitiesDatabase & Data ManagementOracle and Microsoft SQL Server (mandatory)Schema migration tooling with automated rollbackData masking, anonymization, and controlled refresh automationObservability & Reliability EngineeringMetrics, logging, and tracing with Prometheus, Grafana, Splunk, New Relic, CloudWatch, OpenTelemetry, ELKSLO‑driven alerting and deployment health evaluation (e.g., Uptrends, PagerDuty)Automated failure containment and rollback strategiesSecurity & Secrets ManagementHashiCorp Vault, AWS Secrets Manager, or equivalentSecure pipeline design with controlled credential accessCompliance‑ready logging, approvals, and traceabilitySoft Skills & Delivery ExpectationsExperience in regulated or financial services environmentsStrong documentation, runbooks, and architectural communicationProven collaboration with application, infrastructure, security, and QA teamsComfortable operating in enterprise, onshore delivery modelsWe are proud to be an Equal Opportunity EmployerThe national average salary range for this role is  120-165k in base pay, exclusive of any bonuses and benefits. This base salary range represents the low and high end of the salary range for this position. Actual salary offered will vary and may be above or below the range based on various factors including but not limited to location, experience, performance, and internal pay alignment. We do not anticipate that candidates hired will begin at the top of the range however, from time to time, it may occur on a case-by-case basis.  Other rewards and benefits may include: 401(k) match, Medical, Dental, Vision, Paid-Time-Off, etc.  For more information, please visit careers.ascensus.com/#Benefits.Be aware of employment fraud. All email communications from Ascensus or its hiring managers originate from @ascensus.com or @futureplan.comemail addresses. We will never ask you for payment or require you to purchase any equipment. If you are suspicious or unsure about validity of a job posting, we strongly encourage you to apply directly through our website.SummaryLocation: Newton, MA; Charlotte, NC; Boston, MA; Philadelphia, PA; Atlanta, GA; Dallas, TXType: Full time