Description
Sentra is a leading cloud data security company that gives organizations complete visibility and control over their sensitive data across multi-cloud environments. Our platform automatically discovers, classifies, and secures data at scale - helping security teams find, understand, and protect their most critical assets wherever they live in the cloud.
We are backed by top-tier investors and operate at the intersection of cloud infrastructure and data security, serving enterprise customers across highly regulated industries.
The Platform team at Sentra is the backbone of our engineering velocity. We own the cloud infrastructure, developer tooling, CI/CD pipelines, Kubernetes platform, observability stack, and everything that allows our product engineers to ship reliably and fast.
As a Senior DevOps Engineer on this team, you will design, build, and operate the systems that our entire engineering organization depends on. You'll work closely with product engineers, security, and leadership to evolve our infrastructure as we scale across AWS regions, expand to new geographies, and harden our platform for enterprise-grade reliability.
Responsibilities
- Design and operate production Kubernetes clusters (Amazon EKS) across multiple AWS regions, ensuring high availability, security, and cost efficiency using tools like Karpenter for node autoscaling.
- Drive and complete the GitOps migration by extending ArgoCD coverage from infrastructure tools to all application microservices, enabling consistent, auditable, and declarative deployments across environments.
- Own CI/CD pipelines end-to-end: design, maintain, and improve GitHub Actions workflows for build, testing, security scanning, and multi-environment deployment of containerized services.
- Manage and evolve secrets and configuration management infrastructure using External Secrets Operator and AWS Secrets Manager, while enforcing least-privilege access across all environments.
- Expand and maintain the observability stack — including metrics, logging, and distributed tracing — to provide engineering teams with the visibility needed to operate reliable services at scale.
- Partner with the security team to strengthen cloud security posture, including IAM role design, network policies, security groups, encryption at rest and in transit, and compliance readiness.
- Lead infrastructure cost optimization initiatives by rightsizing workloads, identifying waste, and presenting cost impact analyses to engineering leadership.
- Contribute to platform engineering standards through documentation, runbooks, SLO definitions, and on-call best practices that improve operational excellence across the organization.
- Mentor and technically guide junior platform engineers, while driving architectural decisions and reviewing infrastructure-as-code changes.
- Evaluate and introduce new tools and technologies that improve reliability, security, developer experience, and operational efficiency.
Requirements
- 5+ years of hands-on DevOps / Platform Engineering experience in production environments.
- Deep expertise in Kubernetes, including cluster operations, networking, RBAC, storage, and autoscaling.
- Strong AWS cloud background, with at least 3 years of experience managing production workloads on AWS.
- Proven experience with GitOps tools such as ArgoCD or Flux in production environments.
- Solid Infrastructure-as-Code skills with Terraform at scale.
- Experience designing and maintaining robust CI/CD pipelines using GitHub Actions or equivalent tools.
- Comfortable working with Helm charts, Kubernetes manifests, and operators.
- Strong scripting and automation skills using Python, Bash, or Go.
- Experience with secrets management and IAM best practices in AWS.
- Proven track record of independently leading infrastructure projects from design through production rollout.
- Excellent written and verbal communication skills in English.
Nice to have:
- Experience operating Kafka and event-driven architectures, including AWS MSK.
- Familiarity with the Temporal workflow engine running in Kubernetes environments.
- Experience with multi-region AWS deployments and data residency considerations.
- Hands-on experience with Karpenter or Kubernetes Cluster Autoscaler.
- Exposure to cloud data security or security-focused SaaS products.
- Experience working with External Secrets Operator or HashiCorp Vault.
- Knowledge of eBPF-based networking and service mesh technologies such as Cilium, Linkerd, or Istio.
- Prior experience working in a fast-growing B2B SaaS startup environment.
- Contributions to open-source infrastructure or platform engineering projects.
