Source description
About the role
Infrastructure & Cloud
Design, build, and maintain production infrastructure on AWS (EKS, RDS, ECR, VPC, IAM, Secrets Manager, etc.).
Develop and manage our Kubernetes clusters: deploy workloads, tune Karpenter node autoscaling, maintain Helm charts, and keep clusters healthy.
Own and extend our GitOps deployment pipeline: GitHub Actions for CI/CD, ArgoCD for continuous delivery, and Helm for packaging.
Manage supporting cluster operators including Envoy Gateway, External DNS, cert-manager, Fluent Bit, and the AWS Load Balancer Controller.
Reliability & Observability
Own and improve our observability stack—Grafana for dashboards, Loki for log aggregation, Tempo for distributed tracing, and Prometheus for metrics.
Support multi-environment reliability across dev, stage, and production GovCloud accounts.
Improve system resilience through load testing (Locust), E2E testing (Playwright/Cucumber), and thoughtful capacity planning.
Application Development
Contribute to backend services (FastAPI, SQLAlchemy) in Python and TypeScript.
Work alongside product engineers as a first-class contributor, making architecture decisions that balance speed, cost, and reliability.
Build developer experience tooling: local dev environments, CI pipeline improvements, and automated testing scaffolds that make the whole team faster.
Support and extend Temporal-based workflow orchestration for background processing.
Security & Compliance
Implement least-privilege IAM policies, IRSA (IAM Roles for Service Accounts), and network segmentation in a GovCloud environment.
Manage secrets through AWS Secrets Manager and the External Secrets Operator with automated rotation.
Maintain TLS automation via cert-manager and OIDC authentication flows.
Enable SOC2, CMMC, and FedRAMP compliance activities: GRC platform integration, audit logging pipelines, FIPS-validated endpoint configuration, system boundary documentation, and evidence collection for third-party assessments.
More at Ironflow AI