Senior DevOps Engineer

Dragos is on a relentless mission to defend industrial organizations that provide us with the necessities of modern civilization; running water, functioning electricity, and safe industrial working environments. The DevOps team at Dragos is essential for delivering security solutions for critical OT infrastructure, and they are seeking an experienced DevOps engineer to enhance their reliability and operational excellence.

Responsibilities:

• Set organizational standards for cloud reliability, observability, and operational excellence, including SLO/SLI frameworks, incident management practices, and the platform tooling that underpins them
• Own the developer experience roadmap, identifying and closing systemic gaps in self-service infrastructure, CI/CD workflows, and operational visibility across engineering
• Proactively surface systemic risks in our AWS infrastructure, IaC practices, and delivery pipelines, and drive organizational action before issues become incidents
• Define & execute the long-term technical vision for CI at Dragos, advising leadership on architectural strategy, investment priorities, and systemic risk
• Refactor, consolidate, and improve an existing, sprawling CI infrastructure into a single, reliable solution for use throughout engineering at Dragos
• Mentor engineers across levels and model the culture of engineering rigor, documentation, and cross-functional accountability expected across the organization
• Create and maintain comprehensive documentation of all infrastructure components, processes, and deployment workflows to facilitate knowledge sharing and continuity

Requirements:

• 5-10 years of relevant experience in DevOps, site reliability, or infrastructure-related roles, including building and operating large-scale distributed systems or platform infrastructure
• Proficiency in AWS cloud services, Terraform, and container orchestration using ECS or EKS
• Deep Docker expertise - building and managing container images and their metadata, mastery of layer and cache optimization, and hands-on experience operating ECR (or comparable container registries)
• Experience operating artifact registries (Artifactory, Nexus) and hardening the software supply chain - artifact signing, SBOM generation, and build provenance/integrity
• Expert AWS knowledge across compute (EC2, ECS, Lambda), networking (VPCs, Transit Gateway, Route 53, CloudFront), storage (RDS, S3), and security (IAM, Secrets Manager, Systems Manager), with a track record of high-stakes architectural decisions
• Deep understanding of OIDC and workload-identity federation - using OIDC for keyless CI to-cloud authentication (e.g. GitHub Actions to AWS IAM roles) to eliminate long-lived credentials
• Deep expertise in cloud reliability and operational excellence: SLO/SLI design, centralized observability, alerting strategy, and incident lifecycle management at production scale using metrics, logs, and traces to debug and optimize complex systems
• Experience with modern AI tooling, security best practices, and building and integrating agentic solutions to improve existing engineering processes
• Proficient in Python
• Strong experience in building and managing bulletproof CI/CD pipelines in GitHub Actions
• Experience setting CI/CD governance and delivery standards at an organizational level defining the self-service patterns teams build on, and driving platform adoption and architectural alignment across multiple teams to reduce toil and improve engineering velocity
• Data-driven approach to platform work - quantifying toil, lead time, and reliability, and building the business case for infrastructure investment with before/after metrics
• Clear and concise communication skills, both written and verbal, for effective collaboration and documentation
• GoLang being a nice-to-have for additional development capabilities
• Experience with migrating BitBucket or Jenkins pipelines to GitHub Actions a big plus
• A background in security is a strong plus
• Buildkite a plus