Principal DevOps Engineer

What You'll Do: 

• Architect and implement secure, production-grade EKS clusters using infrastructure-as-code (IaC) and GitOps principles

• Integrate and configure open-source tools including ArgoCD (GitOps), Kyverno (policy enforcement), Karpenter (autoscaling), and the Grafana stack (monitoring and observability)

• Ensure security best practices are applied across all infrastructure components, including IAM, network policies, secrets management, and container runtime configurations

• Design and enforce Kubernetes security policies, RBAC, and network segmentation using tools like Kyverno and AWS-native controls

• Collaborate with Product and Platform teams to ensure infrastructure meets performance, reliability, and compliance requirements

• Build and maintain CI/CD pipelines with embedded security checks, vulnerability scanning, and policy validation

• Develop reusable Terraform modules and Helm charts that enforce secure defaults and compliance standards

• Monitor and troubleshoot production workloads, ensuring high availability, performance, and security posture

• Participate in an on-call rotation to support production systems and respond to incidents

• Advocate for DevSecOps principles and mentor engineers on secure cloud-native tooling and automation

• Evaluate emerging technologies and make strategic recommendations to leadership, with a focus on security and operational excellence

• Document architecture decisions, operational runbooks, and incident response procedures with a security-first mindset

• Other tasks and responsibilities as assigned

What You'll Need:  

• Bachelor’s degree in Computer Science, Engineering, or related field*

• 8+ years of experience in DevOps, site reliability engineering, or cloud infrastructure roles

• Deep expertise with Kubernetes (preferably EKS) in production environments

• Hands-on experience with ArgoCD, Karpenter, Prometheus, Grafana, Loki, and Tempo

• Proficiency in Terraform and Helm for infrastructure and application deployment

• Strong understanding of GitOps workflows and CI/CD pipeline design

• Experience with AWS services including IAM, VPC, EC2, S3, and CloudWatch

• Solid grasp of container security, Kubernetes RBAC, and policy-as-code (PaC)

• Excellent troubleshooting skills across infrastructure, networking, and application layers

• Strong communication skills and ability to work effectively with remote teams

• Must be authorized to work in the United States

*Additional years of relevant experience or a combination of an Associate’s degree or equivalent and relevant experience may be substituted for the Bachelor’s degree. 

At CIS, we are committed to providing an inclusive environment in which the diverse backgrounds, experiences, and views of our employees, members, and customers are valued and respected. It is through this commitment that we are able to work together towards our common mission: to make the connected world a safer place.