Lead DevOps Cloud Engineer

About TransUnion is an American consumer credit reporting agency. TransUnion collects and aggregates information on over one billion individual consumers in over thirty countries including "200 million files profiling nearly every credit-active consumer in the United States". Its customers include over 65,000 businesses. Based in Chicago, Illinois, TransUnion's 2014 revenue was US$1.3 billion.

Job Description and Responsibilities

Design, build, and maintain CI/CD pipelines for application builds and deployments
Own Infrastructure as Code using Terraform across multi-cloud (AWS, GCP) and on-prem environments
Support and troubleshoot Linux-based production environments; strong shell scripting for automation and diagnostics
Collaborate with application teams on deployment strategy for Java/Spring Boot services and data engineering pipelines
Build and maintain monitoring, logging, and observability stacks (metrics, traces, logs, alerting) across hybrid infrastructure
Own security posture: TLS/HTTPS enforcement, certificate lifecycle management, secrets management, IAM/access control across cloud and data centre environments
Drive compliance readiness (SOC2, PCI-DSS, ISO 27001 as applicable) — audit trails, access reviews, vulnerability management
Lead incident response, on-call practices, and postmortems
Optimize infrastructure cost and reliability across AWS/GCP
Mentor junior engineers and contribute to DevOps best practices/standards

Required Skills
Hands-on experience with both AWS and GCP (multi-cloud is a must)
Experience managing on-prem/data centre infrastructure alongside cloud
Strong Terraform experience for IaC across environments
Proven CI/CD pipeline design and management (Jenkins/GitLab CI/GitHub Actions or similar)
Deep Linux troubleshooting skills — systems internals, networking, performance tuning
Strong shell scripting (Bash) proficiency
Experience supporting Java/Spring Boot application deployments
Familiarity with data engineering workloads (Spark, Kafka, Airflow, or similar)
Monitoring/Observability: Prometheus, Grafana, ELK/Datadog or equivalent; setting up dashboards, alerting, SLOs
Security & compliance: TLS/HTTPS/certificate management, secrets management (Vault/KMS), IAM policy design, vulnerability scanning, patch management
Working knowledge of compliance frameworks (SOC2, PCI-DSS, ISO 27001) and audit processes
Containerization/orchestration (Docker, Kubernetes) — nice-to-have
Configuration management tools (Ansible/Chef/Puppet)