Senior DevOps Engineer

Job Overview Plan A Technologies is looking for an experienced Senior DevOps Engineers with two areas of primary focus. CI/CD is the most urgent need, followed by general platform and IaC. Kubernetes and containers are a strong third area. You do not need to be equally deep in everything, but you must be genuinely senior and current in at least one of the two primary areas and capable in the other.

Please note: you must have at least 4+ years of experience with HubSpot Marketing Hub campaigns, alongside a strong track record of designing and overseeing email automation, workflows, and custom templates to be considered for this role.

JOB RESPONSIBILITY CI/CD

• Design, build, and run Jenkins-based pipelines at scale, including reusable shared libraries and pipeline templates that dev/QA teams consume without hand-writing pipelines from scratch.
• Define and enforce pipeline standards: branching and promotion models, quality gates, test stages, artifact versioning, and what blocks a release versus what only warns.
• Operate and evolve our artifact strategy on Sonatype Nexus, including binary and media assets (images, audio) alongside code artifacts.
• Execute the migration of repositories and pipelines from Bitbucket to GitHub, including GitHub-hosted app runners, with minimal disruption to active teams.
• Integrate and tune build and test tooling: Maven, JUnit, JMeter, Selenium, SonarQube.
• Introduce new capabilities: database change management with Liquibase, secrets management with HashiCorp Vault (open source), and CI/CD health and delivery metrics.
• Support game studios who run their own Jenkins servers against their dev/test environments while consuming our centralized tooling (artifact repository, scanning, and so on).

Platform, Cloud, and IaC

• Build and maintain a library of Terraform/OpenTofu modules and Terragrunt configurations that let teams self-serve dev and QA infrastructure within guardrails.
• Practice a shift-left, immutable, ephemeral approach. Build golden images with Packer and Ansible and provision environments from code rather than modifying them in place.
• Work within a multi-account, multi-region AWS environment built on AWS Organizations and a custom landing zone. This includes account vending, cross-account access patterns, and network and IAM standards.
• Contribute to infrastructure that spans AWS, other providers, and bare-metal hosting, including servers that are managed over SSH only.
• Help evolve those environments from VM-based deployments toward container clusters.

Containers and Kubernetes

• Deploy and operate Kubernetes workloads on EKS and on bare-metal and provider-hosted clusters, managed centrally with Rancher.
• Run AWS-only supporting workloads (automation, observability, internal tooling) on ECS with Fargate and help define when each platform is the right choice.
• Package and deploy applications with Helm using push-based delivery pipelines.

Security (a first-class concern in everything above)

• Build security into pipelines and IaC from the start: static analysis (SonarQube, with Snyk on the roadmap), dynamic testing (StackHawk), and IaC policy scanning (Checkov and/or tfsec as policy-as-code is introduced).
• Apply least-privilege IAM design, secrets hygiene, and image and artifact integrity practices across CI/CD and infrastructure.
• Reduce shared-credential risk, such as replacing shared SSH keys with scoped, auditable access models, without breaking existing automation.

Team and Standards

• Contribute to governance and architecture standards, including multi-account strategy, naming, tagging, and DNS and network conventions.
• Write clear documentation and runbooks so that other teams can adopt standards on their own.
• Participate in design and code reviews as part of the team's normal delivery process.
• Collaborate with dev and QA leads across studios and platform teams to understand their needs and balance self-service with compliance.

Experience

• 8+ years in DevOps, platform, SRE, or build/release engineering, including current hands-on work (in your present or most recent role) and a minimum of 4 consecutive years of hands-on work with the core tools below.
• Jenkins at depth: declarative pipelines, shared libraries, plugin management, controller/agent design, and troubleshooting.
• Terraform and/or OpenTofu at depth: module design, remote state and locking, multi-account and multi-region patterns, safe refactoring and imports.
• Linux administration and open-source tooling fluency.
• Solid AWS experience in a multi-account, multi-region environment, including IAM, VPC and networking, and Well-Architected principles.
• Hands-on experience with Kubernetes (EKS or equivalent) and Helm.
• Experience with Ansible and Packer (or comparable tools) for building and maintaining immutable images.
• Experience building artifact and dependency workflows with Nexus or a comparable repository manager (Artifactory, for example).
• Practical experience with build and test automation for JVM-based projects (Maven, JUnit) and with integrating quality and security scanning (SonarQube or similar) into pipelines.
• Experience with Git-based workflows, branching and promotion strategies, and repository platform administration (GitHub and/or Bitbucket).
• A security-first mindset, demonstrated through concrete examples in pipelines, IaC, and cloud access design.
• Experience building self-service capabilities (templates, modules, golden paths) that multiple teams consume.
• Strong written and verbal communication in English, and the ability to work effectively with a distributed team.
• Good communication and problem-solving skills.
• Initiative and drive to do great things.

Strongly Preferred

• Terragrunt experience managing many environment and account combinations.
• Rancher or other multi-cluster Kubernetes management, and Kubernetes on bare metal or non-AWS infrastructure.
• ECS/Fargate experience.
• Bitbucket to GitHub migration experience, including GitHub Actions or app-runner hosting.
• HashiCorp Vault and Liquibase experience.
• Performance and functional test tooling (JMeter, Selenium) in pipelines.
• Experience with Snyk, StackHawk, Checkov, tfsec, or similar security tooling.
• CI/CD delivery metrics experience (DORA-style measures).
• Experience designing or operating hybrid environments that combine public cloud with third-party hosting or bare metal.
• Experience in regulated, compliance-driven environments (PCI, SOC 2, or similar).

Nice to Have

• Experience in online gaming, gambling, or other regulated real-money gaming. Regulated-industry or compliance exposure in other domains counts.
• GitOps tooling (ArgoCD or Flux) experience. It is not a current focus for us, but it is a likely future direction.
• Experience contributing to an internal developer platform or portal.
• Relevant certifications (AWS Solutions Architect, Terraform Associate, CKA, or similar). They are helpful but not a substitute for hands-on depth.

About The Company/Benefits Plan A Technologies is a global engineering firm created to solve the toughest tech challenges facing today’s businesses. Founded by software entrepreneurs Aron Ezra and Slav Kulik, Plan A helps organizations analyze their tech ecosystem to identify exactly what needs to be improved across their products and infrastructure—and then builds the solutions to fix it.

Rather than offering theoretical ideas or software that never launches, Plan A combines elite engineering talent with custom-built, proprietary AI agents to deliver fast, secure, production-ready solutions. Its capabilities span proprietary AI agent deployment, custom software development, application modernization, data platforms, cloud migrations, systems integration, and practical technical advice.

With more than 500 successful product deployments completed worldwide, Plan A helps organizations of every size—from ambitious startups to global enterprises—modernize their systems, automate complex operations, and stay ahead of the technology curve.

Read more about us here: www.PlanAtechnologies.com .

Location: Work From Home 100% of the time, or come in to one of our global offices. Up to you.

Great colleagues and an upbeat work environment: You'll join an excellent team of supportive engineers and project managers who work hard but don't ever compete with each other.

Benefits: Vacation, Brand New Laptop, and More: You’ll get a generous vacation schedule, and other goodies.

If this sounds like you, we'd love to hear from you!