{"id":4172174,"url":"https://alion.io/job/piano-senior-devops-engineer-ai-services","title":"Senior DevOps Engineer AI Services","company":{"id":1754906,"name":"Piano","domain":"piano.io","url":"https://alion.io/company/piano-io","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-11-12T10:38:37Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"ClickHouse","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"Grafana","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-12T15:02:53Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T15:02:53Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Piano\nPiano’s Digital Revenue Optimization solution helps digital services grow revenue by better understanding and influencing their customers’ behavior. Piano unifies analytics, segmentation, and commercial personalization in one AI-driven application, enabling sites and apps to efficiently maximize the value of every user visit. Headquartered in Amsterdam with offices in the Americas, Europe, and Asia-Pacific, Piano serves a global client base including the BBC, Deutsche Telekom, Nikkei, AXA and the Wall Street Journal. For more information, visit piano.io.\nThe role\nThis is a DevOps role in the AI department that runs the full delivery path of Piano's AI services, from the managed laptop software deployments and the AWS network edge to the Kubernetes cluster and the CI runner.\nYou will be an engineer on the team who operates across AWS networking, an MDM-managed fleet, AWS infrastructure as code, and GitOps-delivered Kubernetes, all at once. Every change you ship is reversible, reviewed and measured.\nWhat you will do\nDelivery pipeline\nCI/CD and release engineering.Own every pipeline for AI Services in GitLab CI. Run the runner strategy, OCI layer caching and build cost. Ship 100+ production releases a year with no stability regressions.\nGitOps and Kubernetes.Run the EKS clusters through Helm and ArgoCD with auto-sync to production. Own drift, rollbacks and half-applied syncs.\nInfrastructure as code.Manage AWS (VPC, ALB, security groups, WAF, IAM, OIDC, EFS) in Terraform, deployed through CI pipelines you design and own. Every change ships with its revert command.\nDevices, network and identity\nEndpoint fleet delivery.Design the tooling and infrastructure that bring AI Services to end-user devices: policy helper binaries, managed settings and configuration profiles, rolled out via MDM to hundreds of Mac, Windows and Linux machines and to container environments. Own versioning, staged rollout and rollback across the fleet.\nNetwork edge.Own the path from office and VPN to AWS: corporate egress PoPs, ALB/SG allowlists at quota limits, WAF scopes, TLS. Troubleshoot from the client's egress through VPC routing to the load balancer.\nIdentity plumbing.Operate Entra ID app registrations, OIDC trust for CI and the rotation of JWTs, keys and service credentials, without outages over weekends.\nOperations, security and cost\nOn-call and SLA incident response.Join the platform on-call rotation. Triage, mitigate and resolve production incidents within SLA, keep stakeholders informed and lead the post-incident review.\nSecurity operations.Run CVE exposure scans across all clusters, remediate audit findings at CVSS 8.5+ and prove closure.\nTelemetry and cost plumbing.Run the OTLP, ClickHouse and Grafana pipelines that report AI usage and spend per user to finance.\nWhat this role requires\nAll of the following are required to fulfil the role due to the included ownership of production services. Candidates must show evidence of working experiences.\nAWS networking:designed and operated VPCs, subnets and routing, ALBs, security-group allowlists and WAF (regional and CloudFront scope), with multi-AZ high availability.\nEndpoint fleet:built traceable, easy-to-troubleshoot infrastructure that distributes software to every end-user device through Microsoft Intune.\nCloud IaC:Terraform on AWS, including IAM, OIDC trust, EKS and EFS.\nGitOps Kubernetes:Helm and ArgoCD in production, with automated sync to production.\nCI/CD optimisation:a proven record of making CI/CD faster and leaner for monolithic codebases, which our AI Services run on.\nRelease volume:owned a platform that ships hundreds of releases and deployments a year, the pace AI work now demands.\nOn-call:served on a production on-call rotation and resolved incidents within contractual SLA targets, including post-incident reviews.\nSecurity remediation:tracked operational security vulnerabilities and mitigated them through to closure.\nScaling strategies:deep understanding of the Kubernetes Horizontal Pod Autoscaler (HPA) and of designing autoscaling systems.\nEnd-to-end ownership:owned outcomes from start to finish while keeping stakeholders, engineering teams and platform users informed throughout.\nWhat this role is not\nNot a single-layer specialist role. The work spans network, endpoint, identity, pipeline and cluster, all at once.\nNot a steady-state operations role. AI Services ship 100+ production releases a year, and the delivery path moves with them.\nWhy this role matters\nThe role is essential for the company's productivity, because AI tooling breaks at the layers no single specialist owns: network, endpoint, identity, pipeline and cluster. This role spans all of them, at the pace AI work now demands.","description_format":"text","description_chars":4725,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Subscription Commerce","Web Analytics & Tag Management","Customer Data Platforms (CDP) & Reverse ETL"],"lifecycle":[{"event":"open","at":"2026-11-12T15:02:53Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":52,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T17:29:19Z"},"pay":null,"html_url":"https://alion.io/job/piano-senior-devops-engineer-ai-services","json_url":"https://alion.io/job/piano-senior-devops-engineer-ai-services.json","meta":{"generated_at":"2026-11-12T17:29:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36760,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754906},"rest":"https://alion.io/mcp/rest/get_company?id=1754906"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpiano-senior-devops-engineer-ai-services"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpiano-senior-devops-engineer-ai-services"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpiano-senior-devops-engineer-ai-services"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/piano-senior-devops-engineer-ai-services\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpiano-senior-devops-engineer-ai-services"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4172174}},{"tool":"search_jobs","arguments":{"company":"piano.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4172174},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}