{"id":2474180,"url":"https://alion.io/job/optionmetrics-cloud-infrastructure-devops-engineer","title":"Cloud Infrastructure & DevOps Engineer","company":{"id":679999,"name":"OptionMetrics","domain":"optionmetrics.com","url":"https://alion.io/company/optionmetrics","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-14T06:34:16Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":100000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Cloudflare","optional":false},{"name":"Confluence","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Opsgenie","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"TeamCity","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-10-13T20:43:05Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T09:57:28Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"OptionMetrics, headquartered in New York, NY. is a dynamic and innovative technology company, a trusted provider of financial information and research derived from the option markets. We are at the forefront of developing solutions that empower businesses. Our commitment to excellence, coupled with a collaborative, forward-thinking culture, has made us the preferred choice for top-tier talent. Our data and analytics models are utilized by over 350 investment banks, hedge funds, asset management firms, and academic institutions globally, solidifying our position as a leader in the industry.\nAre you ready to own the cloud foundation behind a market-leading financial data business? At OptionMetrics, we're looking for a Senior Cloud Infrastructure & DevOps Engineer to own our multi-account AWS environment, our client-facing file-delivery platform, the deployment pipelines and scheduled workflows that ship our data, and the security controls around all of it. Our clients and internal teams depend on this infrastructure every day. You'll keep it reliable, automate how it runs, and leave it better documented than you found it.\nYou'll report to the Head of IT Operations and work closely with Engineering, Product, Sales and Customer Support.\nWhat You'll Own:\nClient file delivery (CrushFTP): Production, test and DMZ environments on autoscaling and S3, client and support account provisioning, and operating the legacy platform through its retirement.\nAWS multi-account foundation: Organizations, SSO and IAM, the Transit Gateway hub-and-spoke network, and the migration of workloads off the main account.\nTLS and certificates: A full certificate inventory, auto-renewing ACM certificates, and alerting on expiring or mismatched certificates across every domain.\nEdge and application security: Cloudflare and AWS WAF rules, rate limiting, bot mitigation, and incident response for customer-facing applications.\nDevOps and release engineering: CI/CD pipelines (GitHub Actions, TeamCity), deployments to production and non-production environments, and release plans for every production change.\nWorkflow automation and monitoring: Our scheduled data workflows (Stonebranch/OpsWise), plus monitoring, alerting and on-call (Site24x7, Opsgenie) for business-critical jobs and services.\nInfrastructure as Code: Terraform and GitHub Actions with OIDC-based deployment, a sandbox account, and code-reviewed changes.\nCost and compliance: Cost reporting, tag enforcement with AWS Config, and CrowdStrike coverage and access audits.\nWhat You'll Do:\nDesign, build and operate highly available AWS infrastructure across dev, test, prod and DMZ accounts.\nPlan and run production changes with a published change notice covering scope, impact, rollback and confirmation.\nPerform and oversee deployments to production and non-production environments, with a release plan, a rollback path and a Jira record for each.\nBuild, maintain and troubleshoot CI/CD pipelines, and help development teams ship safely and repeatably.\nMonitor and tune business-critical scheduled workflows, troubleshoot failures, and drive failed jobs to root cause through the weekly failure review.\nBuild monitoring, alerting, consolidated metrics and logs that give stakeholders a clear view of system and workflow health.\nRespond to infrastructure and security incidents: contain first, then find the root cause and document it in Jira.\nTurn repeated manual work into automation using scripts, GitHub Actions, Infrastructure as Code and AI tooling.\nApply least privilege to every access request: expiring SSO roles, and no long-lived keys without a documented use case.\nWrite and maintain runbooks, architecture and network diagrams, and Confluence standards for everything you own, including legacy systems.\nKeep Jira current: every ticket you own shows a status, a blocker or a next step, updated at least every two weeks.\nTake ad-hoc requests from Sales, Support and Product. Clarify the need, commit to a date, and deliver.\nCoach junior engineers and hand off repeatable work to them with written runbooks.\nHow We Work:\nDisagree, then commit. Push back with evidence. Once a decision is made, deliver it as agreed, or agree an alternative in writing.\nRespect for colleagues. Criticize the problem, not the people or teams involved, in every channel.\nStay calm when escalated. Answer with status and next steps.\nMake your work visible. Post a daily written standup update (Shipped / Next / Blockers) and take part in team rituals.\nReview every change. Production changes go through code review, including urgent ones.\nOwn the whole job. Documentation, legacy systems and request handling are part of the role, not a distraction from it.\nSkills You'll Need:\n6+ years in cloud or infrastructure engineering, including 4+ years running production AWS.\nDeep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail.\nStrong Linux administration skills.\nHands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments.\nExperience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines.\nProduction experience with Terraform and CI/CD in GitHub Actions, including OIDC.\nSolid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS.\nA security mindset: least privilege, WAF and rate limiting, and incident response.\nScripting in Python or Bash.\nClear written and verbal communication: change notices, runbooks and Jira write-ups others can act on.\nA track record of delivering on commitments in an environment with frequent interruptions.\nSkills You'll Need:\n6+ years in cloud or infrastructure engineering, including 4+ years running production AWS.\nDeep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail.\nStrong Linux administration skills.\nHands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments.\nExperience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines.\nProduction experience with Terraform and CI/CD in GitHub Actions, including OIDC.\nSolid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS.\nA security mindset: least privilege, WAF and rate limiting, and incident response.\nScripting in Python or Bash.\nClear written and verbal communication: change notices, runbooks and Jira write-ups others can act on.\nA track record of delivering on commitments in an environment with frequent interruptions.\nWhat Will Make You Stand Out:\nAWS Certification (Solutions Architect, SysOps or Security).\nSRE or platform engineering experience, including SLOs, observability and on-call practice.\nExperience with TeamCity, Site24x7 or Opsgenie.\nContainers and orchestration (Docker, ECS).\nExperience with CrushFTP or other managed file-transfer platforms.\nCloudflare experience (WAF, Turnstile, access rules).\nBuilding AI tooling for operations, such as Claude skills or agents for runbooks and audits.\nExperience with CrowdStrike and Active Directory.\nLeading a multi-account AWS migration from start to finish.\nExperience in financial data or fintech.\nWhat Success Looks Like:\nFirst 90 days: Every certificate is on auto-renewal or alerting. The AWS network diagram for all accounts is published. Runbooks exist for account provisioning and read-only access requests. No ticket you own goes more than 14 days without an update.\nFirst year: Every production deployment follows a documented release plan, and scheduled workflow failures are trending down month over month. Workloads are off the main account. All new infrastructure is in Terraform with code review. Tag compliance is above 95%. Legacy CrushFTP is retired. Junior engineers handle routine requests from your runbooks.\nWhat We Offer:\nA collaborative environment where everyone's input makes a difference.\nPaid time off: Vacation, Personal, Sick days, and Holidays.\nPre-tax commuter benefits (NJT, MTA, etc.) and 401k plan offered.\nFull medical and dental insurance coverage.","description_format":"text","description_chars":8403,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Dental insurance","Insurance coverage"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Market Research","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-13T20:49:17Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":7,"reasons":["conf:1","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/optionmetrics-cloud-infrastructure-devops-engineer","json_url":"https://alion.io/job/optionmetrics-cloud-infrastructure-devops-engineer.json","meta":{"generated_at":"2026-10-14T12:22:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15030,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679999},"rest":"https://alion.io/mcp/rest/get_company?id=679999"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foptionmetrics-cloud-infrastructure-devops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foptionmetrics-cloud-infrastructure-devops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foptionmetrics-cloud-infrastructure-devops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/optionmetrics-cloud-infrastructure-devops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foptionmetrics-cloud-infrastructure-devops-engineer"}]}