[Remote] DevOps Manager, Platform

Note: The job is a remote job and is open to candidates in USA. Origami Risk delivers single-platform SaaS solutions for risk, insurance, compliance, and safety management. The DevOps Manager, Platform leads and develops the team responsible for the developer platform, CI/CD automation, AWS application delivery infrastructure, Kubernetes capabilities, service connectivity, observability integration, incident response, and AI-augmented DevOps workflows.

Responsibilities

• Leads, develops, and retains a team of DevOps Engineers building the developer platform, cultivating a high-performance culture defined by technical excellence, an automation mindset, and operational ownership
• Sets clear goals, role expectations, and success criteria for each engineer; conducts regular 1:1s and gives direct, constructive feedback with a visible path for growth
• Conducts structured performance reviews that recognize strong delivery contributions, address quality or reliability gaps specifically, and grow both AI fluency and platform-engineering depth
• Identifies capability gaps across the team, encompassing CI/CD, service-layer Terraform, container orchestration and EKS, API and connectivity patterns, and AI-assisted operations, while building targeted hiring, upskilling, and cross-training plans
• Fosters a culture where every manual process is a temporary state, automation is the permanent solution, and AI tooling is an expected part of how each engineer works
• Supports Engineering hiring across the organization by participating in technical interviews and helping calibrate the platform-engineering bar
• Owns the end-to-end path from “we are building a service” to “it deploys to production on its own pipeline”, repository scaffolding, ECR, Terraform workspace, pipeline, variable groups, secrets paths, hostname, gateway wiring, and alarms, reducing the elapsed time and ownership ambiguity in new-service onboarding
• Leads the team's service-layer infrastructure-as-code practice, ensuring IaC stacks are defined, versioned, peer-reviewed, and deployed through Terraform on S3 and DynamoDB backends, with manual changes treated as exceptions to be immediately codified
• Oversees the shared pipeline templates consumed org-wide, enforcing the additive-only change policy so new parameters carry safe defaults and template changes never break existing consumers
• Sets and enforces the naming and structural standards the delivery path depends on, ECR repositories, variable groups, Kubernetes ServiceAccounts, secret paths, and private hostnames, because they are what make onboarding repeatable
• Drives service-level cost efficiency as a continuous discipline, right-sizing service stacks, OpenSearch Serverless OCU caps, ECR lifecycle policies, and idle-stack cleanup
• Operates within the Cloud Infrastructure team's landing zone, guardrails, and shared platforms rather than owning them, keeping clean boundaries between service delivery and the estate
• Owns the per-service Azure DevOps build and deploy pipelines, build, test, scan, containerize, push, deploy, and the environment gates between them, as the team's highest-volume recurring duty
• Holds the team accountable for container image discipline, immutable tags and distinct hotfix tags, ECR repository definitions, and lifecycle policies, so a redeploy can never silently pull a different image
• Owns the environment promotion model, feature branch to main, one pipeline per repository gated per environment, and immutable-tag promotion with roll-forward by default, across the full environment ladder
• Builds the CI/CD pipelines the Release team runs, and trains and supports that team to operate them, how a promotion is gated, how to approve or retry a stage, how to read a failure, and when to escalate back to DevOps versus the service owner
• Coaches Engineers to diagnose and eliminate the root causes of flaky, intermittent delivery failures rather than treating them as acceptable operational noise
• Oversees the EKS platform layer, add-ons, workload identity through Pod Identity and IRSA, namespaces, NetworkPolicies, and the golden-path add-ons, and multi-environment service onboarding
• Owns the golden path, the zero-touch onboarding path for services, the shared token-gateway authorizer, and Helm support, so a new feature/capability needs no bespoke infrastructure work
• Oversees deployment automation for containerized services, Lambda functions, ECS tasks, and EKS workloads, ensuring patterns are consistent, traceable, and recoverable across environments
• Owns application connectivity, API Gateway in REST and HTTP forms and public and private, Lambda authorizers, per-service DNS records and ACM certificates inside delegated zones, and ExternalDNS, along with end-to-end debugging of gateway-path failures
• Provisions the service data stores that belong to a stack, application S3, SSM configuration, Secrets Manager entries, and Aurora/RDS with DDL and Flyway pipelines, handing ongoing database operations to the Database team
• Drives adoption of AI development tools, including Claude Code and Cursor, across the team's daily workflow, establishing norms for AI-assisted IaC authoring, pipeline authoring, automation scripting, and operational documentation
• Builds and operates internal AI tooling across the software development lifecycle, intake, design, implementation, review, CI/CD, and operations, so product and engineering teams can move faster
• Champions AI-assisted operations as a management discipline, integrating AI-powered log analysis, anomaly detection, runbook generation, and LLM-augmented incident analysis into workflows that reduce mean time to diagnosis
• Uses AI to accelerate the team's most demanding work, service onboarding, Terraform scaffolding, pipeline authoring, and operational diagnosis, and shares effective patterns with engineering leadership
• Holds team members accountable for AI tool adoption and proficiency, incorporating AI fluency into performance conversations, development plans, and hiring criteria
• Leads the team's ownership of service observability wiring, CloudWatch log groups, metrics, and traces defined in each service's Terraform, with retention and high-volume log control at the service level, and confirms a new or promoted service emits telemetry before it is handed to SRE
• Keeps clean boundaries with the observability platforms themselves, New Relic, Datadog, Sumo Logic, and Langfuse, which Cloud Infrastructure operates, and with monitor, alert, and dashboard design, which SRE owns, positioning the team as the integration point rather than the on-call owner of those views
• Owns the team's response to delivery-path and service-stack incidents, failed deploys, gateway and connectivity faults, image and task-definition problems, and environment configuration drift, and establishes quickly when an incident is not the team's and hands off with evidence
• Leads blameless post-incident reviews, produces structured root cause analyses, and owns follow-through on corrective actions that prevent recurrence
• Tracks delivery reliability metrics, deployment frequency, change failure rate, lead time, and mean time to recovery for the delivery path, reporting trends and improvement actions to the Director of DevOps
• Holds the team accountable for the security controls it owns within the delivery path, workload IAM roles scoped to a single service stack, secret paths, container image scanning, and network-policy enforcement, operating within the guardrails, SCPs, and permission boundaries Cloud Infrastructure sets
• Partners with Application Security Engineers to integrate infrastructure-level controls, container scanning, secrets management, and network-policy enforcement, into the automation workflows the team owns
• Ensures pipeline and platform access is timely, least-privilege, regularly reviewed, and audit-ready, service connections, OIDC role mappings, and repository and pipeline permissions
• Supports audit readiness and evidence collection for SOC 2, ISO/IEC 27001, and NIST 800-53, maintaining accurate records of pipeline configurations, access grants, and change history for the systems the team owns
• Serves as the primary delivery partner to Engineering and capability teams, providing platform consultation during system design and ensuring services are operationally sound and reliably deployable
• Collaborates with the Release and Engineering Systems teams on pipeline governance, release planning, and deployment coordination, ensuring the delivery path is validated and ready before promotion
• Partners with the Cloud Infrastructure team on the shared boundaries between service delivery and the landing zone, the delivery toolchain, EKS placement, IAM roles, and application DNS and secrets, keeping ownership explicit so requests do not stall between teams
• Represents the DevOps team in Engineering leadership forums, communicating delivery health, operational risk, team capacity, and improvement roadmap with data-backed specificity
• Manages vendor and tooling relationships relevant to the delivery domain, CI/CD and source-control platforms, container registry and Kubernetes tooling, and AI development tools, ensuring SLAs are met and escalations are handled with urgency

Skills

• Bachelor's Degree in Computer Science, Software Engineering, Information Systems, or a related field
• 6+ years of DevOps, platform, or cloud infrastructure engineering experience, including 2+ years in a management role with direct people-leadership accountability for a DevOps or platform engineering team
• Demonstrated track record of leading and developing technical teams, hiring, coaching, performance management, and building a high-performance culture
• Deep hands-on proficiency with AWS services for application delivery, ECS, Fargate, EKS, Lambda, API Gateway, ALB/NLB, S3, RDS, IAM, and Route 53, operating production environments at scale
• Proficiency with infrastructure-as-code tooling, Terraform required, with the ability to review, guide, and hold the team accountable for service-layer IaC quality and consistency
• Deep experience with CI/CD pipelines, Azure DevOps Pipelines and/or GitHub Actions, including reusable template design and environment-gated promotion
• Experience with container technologies including Docker, ECS, and EKS, image build pipelines, registry management, and Kubernetes workload identity through Pod Identity or IRSA
• Experience with API Gateway, Lambda authorizers, and service-to-service connectivity patterns in AWS
• Proficiency with configuration management and automation, Ansible, and scripting in Python, PowerShell, and Bash, with the depth to coach on and review automation code
• Experience wiring services into observability platforms such as New Relic, Datadog, or CloudWatch, at a depth sufficient to set team standards for service-stack telemetry
• Demonstrated experience driving AI tool adoption within a DevOps or platform engineering team, AI-assisted IaC authoring, AI-augmented log analysis, or intelligent alerting and automation
• Strong troubleshooting, incident management, and on-call leadership skills, able to lead the team through high-pressure delivery incidents with structure, calm, and effective coordination
• AWS certification at the associate or professional level (e.g., AWS Solutions Architect, AWS DevOps Engineer – Professional)
• Experience building a self-service developer platform or golden path for service onboarding
• Experience with Kubernetes platform engineering, Helm chart libraries, ExternalDNS, and gateway/authorizer patterns
• Experience with Terraform Cloud / HCP and migrating workspaces to S3 and DynamoDB backends
• Experience implementing SRE practices, SLOs and error budgets, in partnership with an SRE team
• Familiarity with Temporal or AWS Step Functions for workflow orchestration in deployment pipelines
• Experience supporting compliance frameworks, SOC 2, NIST 800-53, or ISO/IEC 27001, including control evidence and audit readiness for delivery systems
• Experience evaluating and adopting AI-native developer-productivity or deployment-intelligence tools, AI-assisted deployment risk scoring or LLM-powered operational runbook generation

Benefits

• Eligible for a bonus
• Competitive medical benefits
• Competitive dental benefits
• Competitive vision benefits
• Wellness reimbursement
• Life insurance
• 401(k) with company match
• Vacation and sick leave benefits under a flexible time off policy in most states
• Medical and Dental coverage available for employees, dependents, domestic partners, and spouses
• Paid Time Off – Flexible options plus 10 paid company holidays where available
• All full-time positions are hybrid, with many eligible to be completely remote
• Fully paid by Origami Risk – Vision insurance, Short & Long-Term Disability Insurance, and Basic Life Insurance
• Generous family leave options—including adoption and foster care placements
• Pre-Tax Savings Accounts – Flexible Spending Account, Health Savings Account, Commuter Benefits, Dependent Care Savings Account
• Retirement Savings – 401(k) with company match up to 4%
• Employee Assistance Program (EAP) – Confidential & Free support offered to colleagues facing personal or work-related complications
• Education Assistance Program – to help colleagues pursue industry/role-specific certifications
• Wellness Benefits – reimbursement program to invest in healthy habits as well as support better colleague productivity and stress management
• Additional coverages available – Pet Insurance, Critical Illness Insurance, and Voluntary Life & AD&D coverage
• Flexible PTO not available in California or the UK

Company Overview

Company H1B Sponsorship