DevOps Engineer at BOLDSCIENCE

<p><strong>Role Summary:</strong> We’re hiring a Senior DevOps Engineer to own and continuously improve our CI/CD and developer enablement experience on an AWS-first, serverless platform. You’ll build reliable and secure deployment pipelines in GitHub Actions, improve automation testing workflows and reporting, strengthen observability and cost visibility, and provide pragmatic platform support (DNS/hosting) while maintaining a strong security posture (IAM, access controls, guardrails).</p> <p>About you: You should be a clear communicator who partners well with product engineers. You are automation-first, pragmatic, and metrics driven. You prefer paved roads over bespoke fixes – someone who is happy documenting decisions and patterns for re-use.</p> <p><strong>Key Responsibilities:</strong></p> <ul> <li>CI/CD Ownership <ul> <li>Own end-to-end CI/CD pipelines and release workflows across service using GitHub actions</li> <li>Drive improvement of pipeline speed, reliability, repeatability, and deployment safety (environmental promotion, approvals, rollback)</li> <li>Build and maintain reusable pipeline components (shared workflows, actions, templates) to standardize delivery</li> </ul> </li> <li>Developer Experience &amp; test automation enablement <ul> <li>Improve developer workflow efficiency through automation, self-service tooling, and documented “golden paths”</li> <li>Partner with engineers to support and evolve automated testing, including test execution, reporting, and feedback loops</li> <li>Reduce developer toil by eliminating manual steps and improving failure diagnostics (faster root cause, clearer logs)</li> </ul> </li> <li>Observability, metrics, and cost reporting <ul> <li>Own platform observability strategy for serverless workloads: logging, metrics, alerting, dashboards, and traces (where relevant)</li> <li>Establish and maintain operational KPIs (pipeline health, deploy success, reliability, MTTR)</li> <li>Deliver cost visibility and reporting (FinOps-style): trends, key drivers, optimization opportunities, and budgeting support</li> </ul> </li> <li>Platform support (as needed) <ul> <li>Provide support for website hosting patterns and operational needs (as applicable)</li> <li>Own/assist with domain management and DNS changes (safe change process, documentation, access controls)</li> </ul> </li> <li>Platform security &amp; IAM <ul> <li>Own and improve <strong>IAM</strong> configuration and access patterns (least privilege, role design, secure defaults)</li> <li>Embed security controls into CI/CD (secrets handling, permissions, pipeline hardening, scanning where applicable)</li> <li>Maintain security posture and guardrails across AWS (and the smaller Azure footprint where relevant)</li> </ul> </li> <li>Collaboration &amp; operational intelligence <ul> <li>Participate in incident response and follow-through (postmortems, preventative actions)</li> <li>Document standards, runbooks, and platform patterns; mentor engineers on best practices</li> </ul> </li> </ul> <p><strong>Qualifications&nbsp;</strong></p> <ul> <li>Deep hands-on AWS experience, including security fundamentals (IAM, networking basics, logging/monitoring)</li> <li>Strong CI/CD and release engineering experience, specifically GitHub actions</li> <li>Strong Infrastructure-as-code experience (Terraform required, CloudFormation strongly preferred)</li> <li>Practical experience supporting serverless systems in production (AWS Lambda + event-driven AWS services)</li> <li>Experience with observability (dashboards, alerting, metrics/logging) and operational response</li> <li>Ability to own and improve developer experience (tooling mindset, empathy for dev workflows, automation-first)</li> <li>Strong scripting/automation skills (Bash + Python or Go)</li> <li>Azure experience as above</li> <li>AWS Certification/s (e.g. AWS Certified Solutions Architect)</li> <li>Integration of Generative AI service (e.g. AWS Bedrock, OpenSearch, etc.)</li> <li>Advanced observability practices (OpenTelemetry, tracing, SLO/SLI design)</li> <li>Cost optimization experience in serverless environments (Lambda tuning, DynamoDB patterns, log volume control)</li> <li>Security tooling in CI/CD (dependency scanning, SBOMs, artifact signing/provenance)</li> </ul> <p>&nbsp;</p>