Senior DevSecOps Engineer - Cloud Hosting & Kubernetes

Overview

Brief Description

At Zywave, we believe in an “everything as code” culture—treating infrastructure, configurations, and processes with the same discipline as software development. The Hosting Engineer will join our Platform Engineering team to design, build, and maintain the foundation of Zywave’s cloud and on-premise hosting environments. This role is deeply technical and hands-on, spanning Kubernetes operations, cloud infrastructure management, observability, and secure hosting of enterprise applications.

Key Responsibilities

• Cloud Infrastructure Management
• Design, deploy, and maintain scalable environments in AWS and Azure.
• Own and evolve Zywave’s hub-and-spoke networking model.
• Build and improve repeatable patterns for secure infrastructure provisioning.
• Drive cost monitoring and optimization of cloud spend.
• Kubernetes Operations
• Manage Kubernetes clusters across EKS, AKS, and on-prem Rancher.
• Implement secure multitenancy and isolation strategies (namespaces, pods, nodes).
• Oversee provisioning, scaling, monitoring, upgrades, and troubleshooting.
• CI/CD & Automation
• Maintain and optimize GitLab/GitHub pipelines for reliable production deployments.
• Implement GitOps workflows with Argo CD for consistent, automated deployments.
• Leverage Argo Workflows for complex automation and orchestration needs.
• Improve release automation, including Helm-based deployment flows.
• Observability & Reliability
• Implement and maintain monitoring, logging, and tracing systems (Prometheus, Grafana, OTEL, Observe Inc).
• Ensure uptime and performance through proactive reliability practices.
• Participate in incident response, including on-call rotation and leading postmortems.
• Security & Compliance
• Integrate secrets management solutions.
• Ensure environments meet compliance and security best practices.
• Support SSO and SCIM configuration with Azure Entra ID and other SaaS integrations.
• Hosting & Systems Management
• Manage and troubleshoot Windows and Linux hosting systems, including IIS.
• Apply expertise in enterprise storage and networking, including object/file storage.
• Support containerization strategies and patterns.
• Soft Skills & Collaboration
• Strong collaboration skills across engineering, security, and operations teams.
• Clear and concise communication, both written and verbal.
• Comfort participating in and leading technical discussions and incident reviews.
• Proactive mindset—able to identify issues and drive solutions independently or as part of a team.
  

Requirements

Required:

• Ability to quickly absorb new technologies and concepts, with the flexibility to learn whatever is necessary to solve problems effectively.
• Strong experience with cloud computing (AWS, Azure).
• Hands-on expertise with Kubernetes (EKS, AKS, Rancher) and Helm.
• Practical background in CI/CD pipelines and deployment automation.
• Familiarity with GitOps tooling (Argo CD) and workflow orchestration (Argo Workflows).
• Proficiency in infrastructure as code (Terraform).
• Working knowledge of Windows/Linux hosting, IIS, and containerized workloads.
• Strong understanding of observability stacks (Prometheus, Grafana, OTEL).
• Experience with version control systems (GitLab, GitHub).
• Strong understanding of security, identity (Azure Entra ID), and secrets management.
• Programming ability in at least one of: .NET, Python, TypeScript/JavaScript.
  
  

Preferred:

• Exposure to Snowflake and enterprise data platforms.
• Experience with enterprise networking and storage architectures.
• Incident management and on-call participation history.
• Cost optimization in large-scale cloud environments.