DevOps Engineer, Platform

Origami Risk is hiring a DevOps Engineer, Platform to build and operate the developer platform and delivery systems that help engineering teams deploy and run services. The role focuses on service onboarding, CI/CD pipelines, infrastructure as code, containerized and serverless workloads, observability, security, and AI-augmented delivery workflows in AWS.

Responsibilities:

• Onboards new services and greenfield projects through the team's self-service golden path, from repository scaffolding and infrastructure provisioning through pipelines, configuration, secrets, DNS, and alerting, taking each service from “we are building a service” to “it deploys to production on its own pipeline.”
• Supports high-velocity delivery for new product initiatives, including AI projects, by enabling Day-1 deployment from initial repo creation through infrastructure provisioning, application deployment, observability, and production readiness
• Applies the team's naming and structural standards for repositories, container images, pipelines, configuration, and secrets, and flags gaps where a standard is missing or unclear
• Supports cost efficiency by right-sizing service infrastructure, applying image and artifact retention policies, and cleaning up idle or unused resources
• Builds, maintains, and troubleshoots CI/CD build and deploy pipelines (build, test, scan, containerize, publish, deploy, and the environment gates between them) using the team's shared pipeline templates
• Contributes changes to shared pipeline templates in a backward-compatible way, so new options carry safe defaults and existing consumers never break
• Maintains container image discipline, including immutable versioning, registry management, and retention policies, so a redeploy always runs exactly the image that was tested
• Executes promotions from lower environments to production through gated, repeatable pipelines, with roll-forward as the default recovery path
• Supports the Release team in operating the pipelines DevOps builds, helping them read a failure, retry or approve a stage, and know when to escalate back to DevOps versus the service owner
• Investigates flaky and intermittent pipeline failures to their root cause rather than retrying past them
• Manages change requests and work items within defined SLAs, including change-advisory and release coordination for production promotions
• Authors and maintains infrastructure as code in Terraform for each service's cloud resources, including compute, serverless functions, API gateways, load balancers, storage, configuration, alarms, and workload IAM roles, with every change versioned, peer-reviewed, and deployed through automation
• Treats manual changes as exceptions to be codified promptly, using plan output and state analysis to detect and resolve configuration drift
• Deploys and operates containerized and serverless workloads on Kubernetes and managed container services, including Helm-based releases, namespaces, workload identity, and network policies
• Configures application connectivity, including API gateways, request authorizers, service DNS records, and TLS certificates, and debugs request-path failures end to end
• Provisions the data stores, configuration, and secrets that belong to a service, including managed relational databases with automated schema-migration pipelines, handing ongoing database operations to the Database team
• Uses AI development tools in daily work for infrastructure code, pipeline authoring, automation scripting, troubleshooting, and documentation, while reviewing, testing, and owning everything AI produces
• Contributes to the team's internal AI tooling across the software development lifecycle and shares effective prompts, patterns, and workflows with the team
• Wires services into logging, metrics, and tracing as part of each service's infrastructure code, including retention and log-volume controls, and confirms a new or promoted service emits telemetry before it is handed to SRE
• Identifies, diagnoses, and resolves delivery and service issues in production and pre-production, including failed deploys, connectivity faults, container and runtime configuration problems, and configuration drift, using observability platforms, cluster tooling, pipeline logs, and infrastructure state
• Recognizes quickly when an issue belongs to another team and hands it off with evidence
• Implements the security controls the team owns within the delivery path, including least-privilege workload roles scoped to a single service, secrets management, container and pipeline security scanning, and network-policy enforcement, operating within the guardrails DevOps Infrastructure sets
• Keeps pipeline and platform access least-privilege, including service connections, federated cloud credentials, and repository and pipeline permissions, and supports audit evidence collection for SOC 2, ISO/IEC 27001, and NIST 800-53
• Partners with Engineering teams during onboarding and system design so that services are operationally sound and reliably deployable
• Coordinates with cross-functional teams on shared boundaries so that requests do not stall between teams
• Works intake and sprint commitments in the team's work-tracking system, keeping work items current, estimated, and visible
• Creates and maintains technical documentation, including infrastructure READMEs, deployment runbooks, service onboarding guides, troubleshooting notes, and project status updates

Requirements:

• Bachelor's Degree in Computer Science or related field, or commensurate on-the-job experience
• 3+ years of experience in a DevOps, platform, infrastructure, or software engineering role supporting production systems in AWS
• Hands-on experience with AWS services for application delivery, such as container and serverless compute, API gateways, load balancers, object storage, managed databases, IAM, DNS, and secrets and configuration management
• Experience writing and maintaining Terraform in a team setting, including modules, remote state, plan review, and drift resolution
• Experience building and troubleshooting CI/CD pipelines in a platform such as Azure DevOps, GitHub Actions, or GitLab CI, including reusable templates and environment-gated deployments
• Experience with Docker, container registries, and running containers on Kubernetes or managed container services
• Ability to code and script in Python, PowerShell, or Bash with an emphasis on testing, automation, and reliable deployments; familiarity with configuration management tools
• Working knowledge of building and deploying backend services and modern web front ends (e.g., .NET, Java, Node.js, React)
• Experience instrumenting services with logs, metrics, and traces in an observability or APM platform, and using that telemetry to troubleshoot
• Working knowledge of the networking that application delivery depends on, including DNS, TLS certificates, load balancers, and API gateways
• Strong understanding of Git, pull-request review, continuous integration, continuous deployment, environment promotion, and release automation
• Experience supporting both Windows and Linux workloads
• Regular use of AI development tools and coding assistants, with the judgment to verify and explain what the AI produces
• Familiarity with software engineering practices such as test-driven design, dependency injection, DRY principles, rapid prototyping, and service-oriented architecture
• Strong problem-solving skills, troubleshooting ability, and attention to detail, with clear written and verbal communication
• AWS certification at the associate level
• Kubernetes experience with Helm and workload identity patterns
• Experience with GitOps deployment tooling
• Experience with database schema-migration tooling and relational databases
• Experience with log search and analytics platforms
• Experience with web servers and reverse proxies
• Prior experience supporting client product implementations and production rollouts
• Familiarity with SOC 2, NIST 800-53, or ISO/IEC 27001 control evidence