[Remote] DevOps Manager, Infrastructure

Note: The job is a remote job and is open to candidates in USA. Origami Risk delivers single-platform SaaS solutions for risk, insurance, compliance, and safety management. The DevOps Manager, Infrastructure leads and develops the infrastructure team while remaining hands-on in operating and improving AWS, Windows, networking, identity, automation, observability, security, and AI-augmented DevOps capabilities.

Responsibilities

• Leads, develops, and retains a team of Cloud Infrastructure Engineers building a high-performance culture defined by technical excellence, an automation mindset, and operational ownership
• Sets clear goals, role expectations, and success criteria for each engineer; conducts regular 1:1s and gives direct, constructive feedback with a visible path for growth
• Conducts structured performance reviews that recognize strong operational contributions, address delivery or quality gaps specifically, and grow both AI fluency and foundational infrastructure depth
• Identifies capability gaps across the team encompassing IaC, Windows/AD administration, networking, container orchestration, security controls, and AI-assisted operations, while building targeted hiring, upskilling, and cross-training plans
• Fosters a culture where every manual process is a temporary state, automation is the permanent solution, and AI tooling is an expected part of how each engineer works
• Supports Engineering hiring across the organization by participating in technical interviews and helping calibrate the infrastructure engineering bar
• Owns the operational health of the organization's AWS infrastructure setting team standards for provisioning, configuration management, environment consistency, patching cadences, capacity planning, and cost optimization across all environments
• Leads the team's infrastructure-as-code practice ensuring resources are defined, versioned, peer-reviewed, and deployed through Terraform, and that manual changes are treated as exceptions to be immediately codified
• Oversees the team's operation of the Ansible Automation Platform encompassing roles, inventory, and configurations as the primary configuration-management system across the estate
• Ensures reliable operation of the self-hosted Active Directory forests, Windows Server fleets, and Windows RDS, including Group Policy, OU structure, service-account and gMSA management, and identity hygiene
• Owns certificate, DNS, and domain lifecycle management across, ensuring renewals and changes are reliable and never a source of outages
• Ensures our Vault secrets service is operated to a high standard as a shared, self-service secrets platform for multiple teams
• Drives cloud cost efficiency as a continuous discipline, by right-sizing, reserved capacity, auto-scaling, and resource-cleanup automation that control spend as the platform scales
• Oversees core AWS services, EC2, ECS, EKS, Lambda, RDS, S3, VPC, Route 53, IAM, CloudFront, and Auto Scaling, while ensuring configurations are standardized, documented, and aligned with architectural and security standards
• Owns operation of the Fortinet firewall estate and NGINX Plus web tier encompassing IPS, routing, firewall policy, object management, SSL inspection, and VIP configuration that proxies traffic to NGINX that is deployed and configured through Terraform and Ansible
• Ensures the infrastructure architecture reflects network security controls, traffic-routing policies, and connectivity requirements — operating infrastructure that is reliable and secure at every layer
• Holds the team accountable for firmware and security-update discipline across firewalls, NGINX, FTP, and other network-facing systems
• Ensures the infrastructure and automation the team owns integrate cleanly with the delivery pipeline — enabling automated provisioning and deployment workflows and holding the team accountable for the infrastructure reliability that automated releases depend on
• Partners with the Release Automation and Engineering Systems teams so that pipeline tooling has the environment provisioning, configuration, and deployment automation it needs — with appropriate access controls, standards alignment, and change tracking
• Oversees deployment automation for containerized services, Lambda functions, ECS tasks, and EKS workloads — ensuring patterns are consistent, traceable, and recoverable across environments
• Coaches Engineers to diagnose and eliminate the root causes of flaky, intermittent infrastructure failures rather than treating them as acceptable operational noise
• Drives adoption of AI development tools — including Claude Code and Cursor — across the team's daily workflow, establishing norms for AI-assisted IaC authoring, automation scripting, and operational documentation
• Champions AI-assisted operations as a management discipline — integrating AI-powered log analysis, anomaly detection, runbook generation, and LLM-augmented incident analysis into workflows that reduce mean time to diagnosis
• Uses AI to accelerate the team's most demanding work — large-scale infrastructure audit and compliance analysis, drift detection, capacity planning, and intelligent alerting — and shares effective patterns with engineering leadership
• Evaluates AI-native infrastructure tools and makes evidence-based recommendations to the Director of DevOps on where AI investment will deliver the highest operational return
• Holds team members accountable for AI tool adoption and proficiency — incorporating AI fluency into performance conversations, development plans, and hiring criteria
• Leads the team's ownership of infrastructure and application observability — monitoring dashboards, alerting policies, log aggregation, and anomaly detection across the stack using New Relic, Datadog, CloudWatch, and related tooling
• Holds the team accountable for alert quality — building monitoring that surfaces actionable signals rather than noise that erodes on-call confidence
• Owns the team's on-call model — rotation schedules, escalation paths, and readiness standards — ensuring every engineer has the runbooks, tooling access, and AI-assisted investigation capabilities to resolve incidents effectively
• Leads blameless post-incident reviews, produces structured root cause analyses, and owns follow-through on corrective actions that prevent recurrence
• Tracks infrastructure reliability metrics — availability, MTTR, change failure rate, and deployment frequency — reporting trends and improvement actions to the Director of DevOps
• Holds the team accountable for infrastructure security controls across all environments — IAM policy governance, security-group management, secrets management, encryption standards, vulnerability patching, and compliance with baselines aligned to NIST 800-53, ISO/IEC 27001, and SOC 2
• Ensures the team conducts regular infrastructure security assessments — reviewing IAM permissions, security-group configurations, exposed endpoints, and compliance configurations — and drives timely remediation of identified gaps
• Owns infrastructure access governance — provisioning and de-provisioning that are timely, least-privilege, regularly reviewed, and audit-ready at all times
• Supports audit readiness and evidence collection for SOC 2, ISO/IEC 27001, and NIST 800-53 — maintaining accurate records of infrastructure configurations, access grants, and change history
• Partners with Application Security Engineers to integrate infrastructure-level controls — container scanning, secrets management, and network-policy enforcement — into the automation workflows the team owns
• Serves as the primary operational partner to Engineering delivery teams — providing infrastructure consultation during system design and ensuring services are operationally sound and reliably deployable
• Collaborates with the Engineering Systems and Release Workflow teams on pipeline governance, release planning, and deployment coordination — ensuring required infrastructure capacity is available, validated, and ready before promotion
• Represents the DevOps team in Engineering leadership forums — communicating infrastructure health, operational risk, team capacity, and improvement roadmap with data-backed specificity
• Manages vendor and tooling relationships relevant to the infrastructure domain — cloud provider support, monitoring platforms, firewall/appliance vendors, and licensing — ensuring SLAs are met and escalations are handled with urgency

Skills

• Bachelor's Degree in Computer Science, Software Engineering, Information Systems, or a related field
• 6+ years of cloud infrastructure engineering experience, including 2+ years in a management role with direct people-leadership accountability for a DevOps or Infrastructure Engineering team
• Demonstrated track record of leading and developing technical teams — hiring, coaching, performance management, and building a high-performance culture
• Deep hands-on proficiency with AWS cloud services — EC2, ECS, EKS, Lambda, RDS, S3, VPC, IAM, Route 53, CloudFront, and Auto Scaling — designing and operating production AWS environments at scale
• Proficiency with infrastructure-as-code tooling — Terraform required (AWS CDK a plus) — with the ability to review, guide, and hold the team accountable for IaC quality and consistency
• Hands-on experience administering Windows Server and Active Directory in production — Group Policy, service accounts/gMSA, and identity management — with the depth to lead a team operating self-hosted AD
• Working knowledge of network and web-tier infrastructure — firewalls (Fortinet or equivalent NGFW), reverse proxy/load balancing (NGINX or equivalent), DNS, and certificate lifecycle management
• Proficiency with configuration management and automation — Ansible / Ansible Automation Platform — and scripting in Python, PowerShell, and Bash, with the depth to coach on and review automation code
• Experience with container technologies including Docker, ECS, and EKS — image build pipelines, registry management, and containerized deployment automation
• Experience with observability and monitoring platforms such as New Relic, Datadog, CloudWatch, or SumoLogic — at a depth sufficient to set team standards and review team-produced monitoring
• Demonstrated experience driving AI tool adoption within a DevOps or infrastructure engineering team — AI-assisted IaC authoring, AI-augmented log analysis, or intelligent alerting and automation
• Strong troubleshooting, incident management, and on-call leadership skills — able to lead the team through high-pressure production incidents with structure, calm, and effective coordination
• AWS certification at the associate or professional level (e.g., AWS Solutions Architect, AWS DevOps Engineer – Professional)
• Experience operating HashiCorp Vault or an equivalent secrets-management platform as a shared service
• Experience with CI/CD pipeline platforms — Azure DevOps Pipelines and/or GitHub Actions — sufficient to partner effectively with release and pipeline teams
• Experience implementing SRE practices — SLOs, error budgets, and chaos engineering — within a managed infrastructure team
• Familiarity with Temporal or AWS Step Functions for workflow orchestration in infrastructure automation or deployment pipelines
• Experience with log aggregation tooling including Elasticsearch, Logstash, Kibana (ELK), Graylog, or Fluent
• Experience supporting compliance frameworks — SOC 2, NIST 800-53, or ISO/IEC 27001 — including managing team accountability for control evidence and audit readiness
• Experience evaluating and adopting AI-native infrastructure intelligence tools — AI-assisted deployment risk scoring, predictive scaling, or LLM-powered operational runbook generation

Benefits

• Eligibility for a bonus
• Competitive medical benefits
• Competitive dental benefits
• Competitive vision benefits
• Wellness reimbursement
• Life insurance
• 401(k) with company match
• Vacation and sick leave benefits under a flexible time off policy in most states
• Medical and Dental coverage available for employees, dependents, domestic partners, and spouses
• Paid Time Off – Flexible options plus 10 paid company holidays where available
• All full-time positions are hybrid, with many eligible to be completely remote
• Vision insurance fully paid by Origami Risk
• Short- and Long-Term Disability Insurance fully paid by Origami Risk
• Basic Life Insurance fully paid by Origami Risk
• Generous family leave options—including adoption and foster care placements
• Flexible Spending Account
• Health Savings Account
• Commuter Benefits
• Dependent Care Savings Account
• 401(k) with company match up to 4%
• Employee Assistance Program (EAP) – Confidential and free support offered to colleagues facing personal or work-related complications
• Education Assistance Program to help colleagues pursue industry- or role-specific certifications
• Wellness Benefits reimbursement program to invest in healthy habits and support better colleague productivity and stress management
• Pet Insurance
• Critical Illness Insurance
• Voluntary Life & AD&D coverage

Company Overview

Company H1B Sponsorship