Cloud Infrastructure & DevOps Engineer
Read straight from Option Metrics's careers page, verified 24m ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
SalaryNo pay range posted
LocationNew York, NY
Work moderemote · United States
Typefull-time
SenioritySenior
Experience6+ yrs
DepartmentIT Operations
Company size6+ people
PostedOct 13, 2026 · 3w ago
Verified live24m ago
May no longer be actively hiring
83% of this company's open roles have been listed for 90+ daysNo pay range listed, though New York requires one
At a glanceSummarised by Seekless from the posting.
6+ years in cloud or infrastructure engineering
4+ years running production AWS
Deep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail
Strong Linux administration skills
Hands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments
Experience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines
Production experience with Terraform and CI/CD in GitHub Actions, including OIDC
Solid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS
A security mindset: least privilege, WAF and rate limiting, and incident response
Scripting in Python or Bash
Clear written and verbal communication: change notices, runbooks and Jira write-ups others can act on
A track record of delivering on commitments in an environment with frequent interruptions
AWS Certification (Solutions Architect, SysOps or Security)
SRE or platform engineering experience, including SLOs, observability and on-call practice
Experience with TeamCity, Site24x7 or Opsgenie
Containers and orchestration (Docker, ECS)
Experience with CrushFTP or other managed file-transfer platforms
Cloudflare experience (WAF, Turnstile, access rules)
Building AI tooling for operations, such as Claude skills or agents for runbooks and audits
Experience with CrowdStrike and Active Directory
Leading a multi-account AWS migration from start to finish
Experience in financial data or fintech
Skills
AWS
VPC
Transit Gateway
Client VPN
IAM
SSO
Organizations
ELB/ALB/NLB
ACM
EC2 Auto Scaling
S3
AWS Config
CloudTrail
Linux
GitHub Actions
TeamCity
Terraform
OIDC
TLS
PKI
DNS
Route53
FTP
FTPS
SFTP
SSH
HTTP
HTTPS
Python
Bash
Jira
Confluence
Stonebranch/OpsWise
Control-M
Airflow
CrushFTP
Docker
ECS
Cloudflare
CrowdStrike
Active Directory
Site24x7
Opsgenie
Claude
Benefits
Vacation
Personal days
Sick days
Holidays
Commuter benefits
401(k)
Health insurance
Dental insurance
About the company
OptionMetrics, headquartered in New York, NY. is a dynamic and innovative technology company, a trusted provider of financial information and research derived from the option markets. We are at the forefront of developing solutions that empower businesses. Our commitment to excellence, coupled with a collaborative, forward-thinking culture, has made us the preferred choice for top-tier talent. Our data and analytics models are utilized by over 350 investment banks, hedge funds, asset management firms, and academic institutions globally, solidifying our position as a leader in the industry.
Are you ready to own the cloud foundation behind a market-leading financial data business? At OptionMetrics, we’re looking for a Senior Cloud Infrastructure & DevOps Engineer to own our multi-account AWS environment, our client-facing file-delivery platform, the deployment pipelines and scheduled workflows that ship our data, and the security controls around all of it. Our clients and internal teams depend on this infrastructure every day. You’ll keep it reliable, automate how it runs, and leave it better documented than you found it.
About the role
You’ll report to the Head of IT Operations and work closely with Engineering, Product, Sales and Customer Support.
What You’ll Own:
Responsibilities
Client file delivery (CrushFTP): Production, test and DMZ environments on autoscaling and S3, client and support account provisioning, and operating the legacy platform through its retirement.
AWS multi-account foundation: Organizations, SSO and IAM, the Transit Gateway hub-and-spoke network, and the migration of workloads off the main account.
TLS and certificates: A full certificate inventory, auto-renewing ACM certificates, and alerting on expiring or mismatched certificates across every domain.
Edge and application security: Cloudflare and AWS WAF rules, rate limiting, bot mitigation, and incident response for customer-facing applications.
DevOps and release engineering: CI/CD pipelines (GitHub Actions, TeamCity), deployments to production and non-production environments, and release plans for every production change.
Workflow automation and monitoring: Our scheduled data workflows (Stonebranch/OpsWise), plus monitoring, alerting and on-call (Site24x7, Opsgenie) for business-critical jobs and services.
Infrastructure as Code: Terraform and GitHub Actions with OIDC-based deployment, a sandbox account, and code-reviewed changes.
Cost and compliance: Cost reporting, tag enforcement with AWS Config, and CrowdStrike coverage and access audits.
What You’ll Do:
Design, build and operate highly available AWS infrastructure across dev, test, prod and DMZ accounts.
Plan and run production changes with a published change notice covering scope, impact, rollback and confirmation.
Perform and oversee deployments to production and non-production environments, with a release plan, a rollback path and a Jira record for each.
Build, maintain and troubleshoot CI/CD pipelines, and help development teams ship safely and repeatably.
Monitor and tune business-critical scheduled workflows, troubleshoot failures, and drive failed jobs to root cause through the weekly failure review.
Build monitoring, alerting, consolidated metrics and logs that give stakeholders a clear view of system and workflow health.
Respond to infrastructure and security incidents: contain first, then find the root cause and document it in Jira.
Turn repeated manual work into automation using scripts, GitHub Actions, Infrastructure as Code and AI tooling.
Apply least privilege to every access request: expiring SSO roles, and no long-lived keys without a documented use case.
Write and maintain runbooks, architecture and network diagrams, and Confluence standards for everything you own, including legacy systems.
Keep Jira current: every ticket you own shows a status, a blocker or a next step, updated at least every two weeks.
Take ad-hoc requests from Sales, Support and Product. Clarify the need, commit to a date, and deliver.
Coach junior engineers and hand off repeatable work to them with written runbooks.
How We Work:
Disagree, then commit. Push back with evidence. Once a decision is made, deliver it as agreed, or agree an alternative in writing.
Respect for colleagues. Criticize the problem, not the people or teams involved, in every channel.
Stay calm when escalated. Answer with status and next steps.
Make your work visible. Post a daily written standup update (Shipped / Next / Blockers) and take part in team rituals.
Review every change. Production changes go through code review, including urgent ones.
Own the whole job. Documentation, legacy systems and request handling are part of the role, not a distraction from it.
Skills You’ll Need:
6+ years in cloud or infrastructure engineering, including 4+ years running production AWS.
Deep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail.
Strong Linux administration skills.
Hands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments.
Experience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines.
Production experience with Terraform and CI/CD in GitHub Actions, including OIDC.
Solid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS.
A security mindset: least privilege, WAF and rate limiting, and incident response.
Scripting in Python or Bash.
Clear written and verbal communication: change notices, runbooks and Jira write-ups others can act on.
A track record of delivering on commitments in an environment with frequent interruptions.
Skills You’ll Need:
6+ years in cloud or infrastructure engineering, including 4+ years running production AWS.
Deep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail.
Strong Linux administration skills.
Hands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments.
Experience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines.
Production experience with Terraform and CI/CD in GitHub Actions, including OIDC.
Solid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS.
A security mindset: least privilege, WAF and rate limiting, and incident response.
Scripting in Python or Bash.
Clear written and verbal communication: change notices, runbooks and Jira write-ups others can act on.
A track record of delivering on commitments in an environment with frequent interruptions.
What Will Make You Stand Out:
AWS Certification (Solutions Architect, SysOps or Security).
SRE or platform engineering experience, including SLOs, observability and on-call practice.
Experience with TeamCity, Site24x7 or Opsgenie.
Containers and orchestration (Docker, ECS).
Experience with CrushFTP or other managed file-transfer platforms.
Cloudflare experience (WAF, Turnstile, access rules).
Building AI tooling for operations, such as Claude skills or agents for runbooks and audits.
Experience with CrowdStrike and Active Directory.
Leading a multi-account AWS migration from start to finish.
Experience in financial data or fintech.
What Success Looks Like:
First 90 days: Every certificate is on auto-renewal or alerting. The AWS network diagram for all accounts is published. Runbooks exist for account provisioning and read-only access requests. No ticket you own goes more than 14 days without an update.
First year: Every production deployment follows a documented release plan, and scheduled workflow failures are trending down month over month. Workloads are off the main account. All new infrastructure is in Terraform with code review. Tag compliance is above 95%. Legacy CrushFTP is retired. Junior engineers handle routine requests from your runbooks.
What We Offer:
A collaborative environment where everyone’s input makes a difference.
Paid time off: Vacation, Personal, Sick days, and Holidays.
Pre-tax commuter benefits (NJT, MTA, etc.) and 401k plan offered.
Full medical and dental insurance coverage.
Legal
OptionMetrics is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Further, OptionMetrics will not discriminate against applicants for inquiring about, discussing or disclosing their pay or, in certain circumstances, the pay of their co‐worker, Pay Transparency Nondiscrimination .