About MasterControl MasterControl Inc. is a leading provider of cloud-based quality and compliance software for life sciences and other regulated industries. Our mission is the same as that of our customers to bring life-changing products to more people sooner. The MasterControl Platform helps organizations digitize, automate and connect quality and compliance processes across the regulated product development life cycle. Over 1,000 companies worldwide rely on MasterControl solutions to achieve new levels of operational excellence across product development, clinical trials, regulatory affairs, quality management, supply chain, manufacturing and postmarket surveillance. For more information, visit www.mastercontrol.com. SUMMARY We are looking for a highly skilled and experienced Senior DevOps Engineer to join our growing engineering team. In this role, you will be a key driver in designing, building, and maintaining our cloud infrastructure, CI/CD pipelines, and Kubernetes-based platforms. You will work closely with development, security, and operations teams to ensure our systems are scalable, reliable, secure, and efficient. A strong candidate will embrace AI-assisted engineering — leveraging tools like Anthropic Claude and AWS Kiro to accelerate infrastructure development, SRE operations, cost management, and software delivery lifecycle (SDLC) workflows. RESPONSIBILITIES AWS Infrastructure • Design, provision, and manage scalable, highly available, and fault-tolerant AWS infrastructure using Infrastructure as Code (IaC) tools such as Terraform and AWS CDK. • Own and optimize AWS services including EC2, VPC, IAM, RDS, S3, Route 53, CloudWatch, ALB/NLB, and more. • Design and manage robust AWS network infrastructure including VPCs, subnets, routing tables, and network ACLs for high-availability and security. • Configure and optimize Route 53 for DNS management, failover strategies, and multi-region routing policies. • Deploy and manage API Gateways for REST and HTTP APIs, including authentication, rate limiting, request/response transformation, and integration with backend services. • Implement and manage AWS Load Balancers (Application Load Balancer, Network Load Balancer, and Classic Load Balancer) for traffic distribution, session management, and high availability. • Define and enforce AWS security policies including security groups, NACLs, WAF rules, and compliance requirements across network infrastructure. • Enforce AWS security best practices including least-privilege IAM policies, security group management, and network segmentation. • Monitor infrastructure health, costs, and performance; continuously identify and implement optimizations. • Lead cloud architecture reviews and contribute to Well-Architected Framework assessments. Azure Infrastructure & Multi-Cloud • Design and provision Azure infrastructure and services, including virtual networks, Azure Virtual Machines, Azure Kubernetes Service (AKS), and managed databases. • Manage Azure IAM, resource groups, and implement security best practices across Azure environments. • Implement Infrastructure as Code for Azure using Terraform and Azure Resource Manager templates. • Integrate Azure services with AWS environments for hybrid and multi-cloud deployments where applicable. System Administration (Linux & Windows) • Administer Linux-based systems (AWS Linux and Ubuntu) including kernel management, package management, user/group administration, permissions, and access control. • Configure and maintain Linux services, systemd, and daemon processes for reliability and performance. • Administer Windows Server environments including Active Directory integration, Group Policy, patching, and security hardening. • Manage both Linux and Windows across on-premises, cloud, and hybrid environments. • Implement configuration management and automation for consistent system provisioning and lifecycle management. Amazon EKS (Elastic Kubernetes Service) • Design, deploy, and manage production-grade EKS clusters with a focus on security, scalability, and high availability. • Manage Kubernetes resources including Deployments, StatefulSets, DaemonSets, ConfigMaps, Secrets, RBAC, and Network Policies. • Implement and maintain cluster autoscaling (Cluster Autoscaler, Karpenter), node group management, and pod disruption budgets. • Integrate EKS with AWS services such as IAM Roles for Service Accounts (IRSA), AWS Load Balancer Controller, EBS/EFS CSI drivers, and AWS Secrets Manager. • Deploy, configure, and manage Istio service mesh on EKS, including traffic management, mutual TLS (mTLS), observability, and security policy enforcement. • Oversee Kubernetes upgrades, patching, and lifecycle management across environments. ArgoCD & GitOps • Implement and maintain GitOps workflows using ArgoCD for continuous delivery to Kubernetes environments. • Design and manage ArgoCD Application and ApplicationSet configurations for multi-cluster and multi-environment deployments. • Establish GitOps best practices including environment promotion strategies (dev → staging → production), rollback procedures, and drift detection. • Manage ArgoCD RBAC, SSO integration, and security hardening. • Collaborate with development teams to onboard services into the GitOps delivery model. CI/CD Pipelines (GitHub Actions & Jenkins) • Build, maintain, and optimize CI/CD pipelines using GitHub Actions and Jenkins for build, test, security scanning, and deployment workflows. • Configure and manage Jenkins infrastructure, including master/agent architecture, plugin management, and security hardening. • Design Jenkins declarative and scripted pipelines for complex multi-stage deployments across environments. • Integrate Jenkins with container registries, artifact repositories, testing frameworks, and deployment tools. • Develop reusable GitHub Actions workflows and composite actions to standardize pipelines across teams. • Create reusable Jenkins shared libraries and pipeline templates for consistency and maintainability. • Integrate pipelines with container registries (Amazon ECR), security scanning tools (Trivy, Snyk, etc.), and deployment tooling. • Implement pipeline best practices including secrets management, environment protection rules, and workflow approvals. • Monitor pipeline performance and drive improvements in build reliability and deployment velocity. Container Development & Registry Management • Build, optimize, and maintain Docker containers with strong emphasis on Dockerfile best practices including multi-stage builds, minimal base images, layer optimization, and security hardening. • Design efficient container images that minimize size, reduce startup time, and optimize resource consumption. • Manage container image repositories using Amazon ECR, including image lifecycle policies, tagging strategies, image retention policies, vulnerability scanning, and access control. • Integrate container building and registry management into CI/CD pipelines, automating image builds, security scanning, tagging, and registry pushes. • Implement container security scanning and vulnerability detection to ensure image compliance and remediate security issues. • Mentor teams on container best practices, image optimization techniques, and secure containerization patterns. AI-Assisted DevOps (Claude & AWS Kiro) • Leverage Anthropic Claude as an AI engineering assistant to rapidly generate, review, and refactor Terraform modules and AWS CDK stacks, reducing toil and accelerating infrastructure delivery. • Utilize AWS Kiro to automate and streamline infrastructure provisioning, SRE workflows, and cloud operations tasks through AI-driven assistance. • Apply AI tooling across the SDLC — from requirements and design through implementation, testing, deployment, and incident resolution — to improve team velocity and code quality. • Use Claude and Kiro to assist with SRE work including runbook generation, automated root cause analysis drafting, postmortem write-ups, alert tuning, and on-call automation. • Employ AI-assisted tooling to monitor and optimize AWS costs — analyzing Cost Explorer data, identifying waste, rightsizing recommendations, and generating cost reports and savings proposals. • Establish team best practices and guardrails for responsible, secure, and effective use of AI coding and operations tools. • Continuously evaluate emerging AI-powered DevOps tooling and champion adoption of high-value capabilities across the engineering organization. General DevOps & Collaboration • Mentor junior and mid-level engineers on DevOps practices, tooling, cloud infrastructure, and AI-assisted workflows. • Define and enforce standards for observability including logging, metrics, and distributed tracing (e.g., Prometheus, Grafana, OpenTelemetry, Datadog). • Participate in on-call rotations and lead incident response, root cause analysis (RCA), and postmortem processes. • Champion a culture of automation, reliability, and continuous improvement across the organization. • Collaborate with security teams to implement DevSecOps practices throughout the SDLC. REQUIRED SKILLS • 5+ years of experience in a DevOps, Site Reliability Engineering (SRE), or Cloud Infrastructure role. • Deep hands-on expertise with AWS, including core services (EC2, VPC, IAM, S3, RDS) and advanced services. • Strong expertise with AWS network infrastructure including VPCs, Route 53, API Gateways, Load Balancers (ALB/NLB), and AWS security policies. • Hands-on experience with Linux system administration (AWS Linux and Ubuntu), including kernel management, package management, services, and security hardening. • Hands-on experience with Windows Server administration including Active Directory, Group Policy, patching, and security configuration. • Experience with Azure infrastructure and cloud services. • Strong Kubernetes experience, including production EKS cluster management, networking, and storage. • Proficiency with ArgoCD and GitOps principles for Kubernetes-based continuous delivery. • Proven experience building and maintaining CI/CD pipelines with GitHub Actions and Jenkins. • Strong Docker experience including building, optimizing, and maintaining production container images with emphasis on Dockerfile best practices and security. • Proficiency with Amazon ECR (Elastic Container Registry) including image management, lifecycle policies, vulnerability scanning, and access control. • Proficiency with Infrastructure as Code tools, including Terraform and AWS CDK. • Hands-on experience using Anthropic Claude and/or AWS Kiro for infrastructure development, SRE operations, cost analysis, and SDLC acceleration. • Production experience with Istio service mesh, including traffic management, mTLS, Envoy proxy configuration, and Istio-based observability and security policies. • Strong scripting skills in Bash, Python, or similar languages (TypeScript/Python experience with AWS CDK a strong plus). • Solid understanding of networking fundamentals: DNS, TCP/IP, TLS, load balancing, and firewalls. • Experience with secrets management solutions (AWS Secrets Manager, HashiCorp Vault, or External Secrets Operator). PREFERRED QUALIFICATIONS • AWS certifications such as AWS Certified DevOps Engineer – Professional or AWS Solutions Architect – Professional. • Azure certifications such as Azure Administrator or Azure Solutions Architect. • Linux System Administrator certifications (e.g., LPIC, Red Hat Certified System Administrator). • Windows Server or Microsoft certifications (e.g., Microsoft Certified: Windows Server Hybrid Administrator). • Experience with Karpenter for EKS node provisioning. • Familiarity with additional service mesh technologies such as Istio. • Experience with observability platforms such as Datadog, Grafana, or Prometheus. • Docker and container security certifications or demonstrated expertise in securing containerized applications. • Demonstrated experience using AI tools to drive measurable improvements in delivery speed, reliability, or cost efficiency. • Contributions to open-source projects or internal developer platforms. • Experience in a high-growth startup or large-scale production environment. PHYSICAL DEMANDS AND WORKING CONDITIONS • Ability to work effectively in a team environment and communicate clearly through various channels. • Capacity to work with computers for extended periods and adapt to changing requirements in a fast-paced environment. Why Work Here? #WhyWorkAnywhereElse? MasterControl is a place where Exceptional Teams come together to do their best work. In fact, hiring Exceptional Teams is a core value of ours. MasterControl employees are surrounded by intelligent, motivated, and collaborative individuals. We like to call it #TheBestTeamOnThePlanet. We work hard to develop and challenge our employees' skillsets, recognize their contributions, encourage professional development, and offer a one-of-a-kind culture. This is why we say #WhyWorkAnywhereElse? MasterControl could be your next (and last) career move! Here are some of the benefits MasterControl employees enjoy: - Competitive compensation - Schedule flexibility - Company parties and employee recognition programs - Wellness programs - Much, much more!

Senior DevOps Engineer

similar openings