DevOps Manager, Platform

Overview

A great platform team is defined not by how many tickets it closes, but by how little friction stands between an engineer's idea and a running service, because the team built the pipelines, golden paths, and AI-augmented workflows that make delivery self-service. The DevOps Manager, Platform is the people leader and hands-on technical operator who makes that true at Origami Risk.

This manager leads the team that builds, runs, and continuously improves the developer platform and delivery automation that Engineering teams depend on to ship every day, spanning CI/CD pipelines and shared templates, service-layer Terraform, the EKS container platform and capabilities golden path, application connectivity and service data stores, environment promotion, and the AI tooling layered on top. Everything runs in AWS, on top of the landing zone the Cloud Infrastructure team owns. This is a hands-on technical leader who coaches Engineers on platform-engineering craft, sets a high bar for delivery reliability and operational discipline, drives AI adoption into daily DevOps workflows, and partners with Engineering, Release, SRE, and Cloud Infrastructure so that the path to production is a source of competitive advantage and not a constraint on what Engineering can deliver. On this team, manual work is a problem to be solved, automation is the default, and every Engineer is expected to use AI to work faster and diagnose more accurately.

Starting base pay for this role is between $145,000 and $185,000. The actual base pay is dependent upon many factors, such as transferable skills, work experience, business needs, training, location, and market demands. The base pay range is subject to change and may be modified in the future. This role will be eligible for a bonus as well as competitive medical, dental, and vision benefits, wellness reimbursement, life insurance, and a 401(k) with company match. We offer vacation and sick leave benefits (under a flexible time off policy in most states).

Responsibilities

What this team runs:

This is the developer platform and delivery layer that sits on top of the AWS landing zone — the systems Engineering uses to build, ship, and operate services every day. The team owns the platform for application and service delivery, not the landing zone underneath it. The team owns:

• Delivery Pipelines & Build: the CI/CD build and deploy pipelines, and the shared pipeline templates that Engineering teams across the org use to ship every day.

• Service-Layer IaC: the infrastructure-as-code that defines each service's cloud resources, versioned and deployed through Terraform.

• Kubernetes & Container Platform: the EKS container platform and the self-service golden path that lets a new service onboard with no bespoke infrastructure work.

• Application Connectivity: the application-facing API gateways, service DNS, and certificates that make services reachable and secure.

• Service Data & Configuration: the application data stores, configuration, and secrets that each service depends on.

• Environment Promotion: the promotion path that moves a change safely from lower environments to production.

• AI & Internal Tooling: the AI tooling across the development lifecycle that speeds service onboarding, pipeline authoring, and day-to-day delivery.

Key responsibilities:

People Leadership & Team Development

• Leads, develops, and retains a team of DevOps Engineers building the developer platform, cultivating a high-performance culture defined by technical excellence, an automation mindset, and operational ownership.

• Sets clear goals, role expectations, and success criteria for each engineer; conducts regular 1:1s and gives direct, constructive feedback with a visible path for growth.

• Conducts structured performance reviews that recognize strong delivery contributions, address quality or reliability gaps specifically, and grow both AI fluency and platform-engineering depth.

• Identifies capability gaps across the team, encompassing CI/CD, service-layer Terraform, container orchestration and EKS, API and connectivity patterns, and AI-assisted operations, while building targeted hiring, upskilling, and cross-training plans.

• Fosters a culture where every manual process is a temporary state, automation is the permanent solution, and AI tooling is an expected part of how each engineer works.

• Supports Engineering hiring across the organization by participating in technical interviews and helping calibrate the platform-engineering bar.

Developer Platform & Delivery Operations

• Owns the end-to-end path from “we are building a service” to “it deploys to production on its own pipeline”, repository scaffolding, ECR, Terraform workspace, pipeline, variable groups, secrets paths, hostname, gateway wiring, and alarms, reducing the elapsed time and ownership ambiguity in new-service onboarding.

• Leads the team's service-layer infrastructure-as-code practice, ensuring IaC stacks are defined, versioned, peer-reviewed, and deployed through Terraform on S3 and DynamoDB backends, with manual changes treated as exceptions to be immediately codified.

• Oversees the shared pipeline templates consumed org-wide, enforcing the additive-only change policy so new parameters carry safe defaults and template changes never break existing consumers.

• Sets and enforces the naming and structural standards the delivery path depends on, ECR repositories, variable groups, Kubernetes ServiceAccounts, secret paths, and private hostnames, because they are what make onboarding repeatable.

• Drives service-level cost efficiency as a continuous discipline, right-sizing service stacks, OpenSearch Serverless OCU caps, ECR lifecycle policies, and idle-stack cleanup.

• Operates within the Cloud Infrastructure team's landing zone, guardrails, and shared platforms rather than owning them, keeping clean boundaries between service delivery and the estate.

Pipelines, Build & Release Support

• Owns the per-service Azure DevOps build and deploy pipelines, build, test, scan, containerize, push, deploy, and the environment gates between them, as the team's highest-volume recurring duty.

• Holds the team accountable for container image discipline, immutable tags and distinct hotfix tags, ECR repository definitions, and lifecycle policies, so a redeploy can never silently pull a different image.

• Owns the environment promotion model, feature branch to main, one pipeline per repository gated per environment, and immutable-tag promotion with roll-forward by default, across the full environment ladder.

• Builds the CI/CD pipelines the Release team runs, and trains and supports that team to operate them, how a promotion is gated, how to approve or retry a stage, how to read a failure, and when to escalate back to DevOps versus the service owner.

• Coaches Engineers to diagnose and eliminate the root causes of flaky, intermittent delivery failures rather than treating them as acceptable operational noise.

Service IaC & Container Platform

• Oversees the EKS platform layer, add-ons, workload identity through Pod Identity and IRSA, namespaces, NetworkPolicies, and the golden-path add-ons, and multi-environment service onboarding.

• Owns the golden path, the zero-touch onboarding path for services, the shared token-gateway authorizer, and Helm support, so a new feature/capability needs no bespoke infrastructure work.

• Oversees deployment automation for containerized services, Lambda functions, ECS tasks, and EKS workloads, ensuring patterns are consistent, traceable, and recoverable across environments.

• Owns application connectivity, API Gateway in REST and HTTP forms and public and private, Lambda authorizers, per-service DNS records and ACM certificates inside delegated zones, and ExternalDNS, along with end-to-end debugging of gateway-path failures.

• Provisions the service data stores that belong to a stack, application S3, SSM configuration, Secrets Manager entries, and Aurora/RDS with DDL and Flyway pipelines, handing ongoing database operations to the Database team.

AI-Augmented DevOps Operations

• Drives adoption of AI development tools, including Claude Code and Cursor, across the team's daily workflow, establishing norms for AI-assisted IaC authoring, pipeline authoring, automation scripting, and operational documentation.

• Builds and operates internal AI tooling across the software development lifecycle, intake, design, implementation, review, CI/CD, and operations, so product and engineering teams can move faster.

• Champions AI-assisted operations as a management discipline, integrating AI-powered log analysis, anomaly detection, runbook generation, and LLM-augmented incident analysis into workflows that reduce mean time to diagnosis.

• Uses AI to accelerate the team's most demanding work, service onboarding, Terraform scaffolding, pipeline authoring, and operational diagnosis, and shares effective patterns with engineering leadership.

• Holds team members accountable for AI tool adoption and proficiency, incorporating AI fluency into performance conversations, development plans, and hiring criteria.

Service Observability & Incident Response

• Leads the team's ownership of service observability wiring, CloudWatch log groups, metrics, and traces defined in each service's Terraform, with retention and high-volume log control at the service level, and confirms a new or promoted service emits telemetry before it is handed to SRE.

• Keeps clean boundaries with the observability platforms themselves, New Relic, Datadog, Sumo Logic, and Langfuse, which Cloud Infrastructure operates, and with monitor, alert, and dashboard design, which SRE owns, positioning the team as the integration point rather than the on-call owner of those views.

• Owns the team's response to delivery-path and service-stack incidents, failed deploys, gateway and connectivity faults, image and task-definition problems, and environment configuration drift, and establishes quickly when an incident is not the team's and hands off with evidence.

• Leads blameless post-incident reviews, produces structured root cause analyses, and owns follow-through on corrective actions that prevent recurrence.

• Tracks delivery reliability metrics, deployment frequency, change failure rate, lead time, and mean time to recovery for the delivery path, reporting trends and improvement actions to the Director of DevOps.

Security, Compliance & Access Management

• Holds the team accountable for the security controls it owns within the delivery path, workload IAM roles scoped to a single service stack, secret paths, container image scanning, and network-policy enforcement, operating within the guardrails, SCPs, and permission boundaries Cloud Infrastructure sets.

• Partners with Application Security Engineers to integrate infrastructure-level controls, container scanning, secrets management, and network-policy enforcement, into the automation workflows the team owns.

• Ensures pipeline and platform access is timely, least-privilege, regularly reviewed, and audit-ready, service connections, OIDC role mappings, and repository and pipeline permissions.

• Supports audit readiness and evidence collection for SOC 2, ISO/IEC 27001, and NIST 800-53, maintaining accurate records of pipeline configurations, access grants, and change history for the systems the team owns.

Cross-Functional Collaboration & Stakeholder Management

• Serves as the primary delivery partner to Engineering and capability teams, providing platform consultation during system design and ensuring services are operationally sound and reliably deployable.

• Collaborates with the Release and Engineering Systems teams on pipeline governance, release planning, and deployment coordination, ensuring the delivery path is validated and ready before promotion.

• Partners with the Cloud Infrastructure team on the shared boundaries between service delivery and the landing zone, the delivery toolchain, EKS placement, IAM roles, and application DNS and secrets, keeping ownership explicit so requests do not stall between teams.

• Represents the DevOps team in Engineering leadership forums, communicating delivery health, operational risk, team capacity, and improvement roadmap with data-backed specificity.

• Manages vendor and tooling relationships relevant to the delivery domain, CI/CD and source-control platforms, container registry and Kubernetes tooling, and AI development tools, ensuring SLAs are met and escalations are handled with urgency.

Qualifications

• Bachelor's Degree in Computer Science, Software Engineering, Information Systems, or a related field.

• 6+ years of DevOps, platform, or cloud infrastructure engineering experience, including 2+ years in a management role with direct people-leadership accountability for a DevOps or platform engineering team.

• Demonstrated track record of leading and developing technical teams, hiring, coaching, performance management, and building a high-performance culture.

• Deep hands-on proficiency with AWS services for application delivery, ECS, Fargate, EKS, Lambda, API Gateway, ALB/NLB, S3, RDS, IAM, and Route 53, operating production environments at scale.

• Proficiency with infrastructure-as-code tooling, Terraform required, with the ability to review, guide, and hold the team accountable for service-layer IaC quality and consistency.

• Deep experience with CI/CD pipelines, Azure DevOps Pipelines and/or GitHub Actions, including reusable template design and environment-gated promotion.

• Experience with container technologies including Docker, ECS, and EKS, image build pipelines, registry management, and Kubernetes workload identity through Pod Identity or IRSA.

• Experience with API Gateway, Lambda authorizers, and service-to-service connectivity patterns in AWS.

• Proficiency with configuration management and automation, Ansible, and scripting in Python, PowerShell, and Bash, with the depth to coach on and review automation code.

• Experience wiring services into observability platforms such as New Relic, Datadog, or CloudWatch, at a depth sufficient to set team standards for service-stack telemetry.

• Demonstrated experience driving AI tool adoption within a DevOps or platform engineering team, AI-assisted IaC authoring, AI-augmented log analysis, or intelligent alerting and automation.

• Strong troubleshooting, incident management, and on-call leadership skills, able to lead the team through high-pressure delivery incidents with structure, calm, and effective coordination.

Preferred Qualifications

• AWS certification at the associate or professional level (e.g., AWS Solutions Architect, AWS DevOps Engineer – Professional).

• Experience building a self-service developer platform or golden path for service onboarding.

• Experience with Kubernetes platform engineering, Helm chart libraries, ExternalDNS, and gateway/authorizer patterns.

• Experience with Terraform Cloud / HCP and migrating workspaces to S3 and DynamoDB backends.

• Experience implementing SRE practices, SLOs and error budgets, in partnership with an SRE team.

• Familiarity with Temporal or AWS Step Functions for workflow orchestration in deployment pipelines.

• Experience supporting compliance frameworks, SOC 2, NIST 800-53, or ISO/IEC 27001, including control evidence and audit readiness for delivery systems.

• Experience evaluating and adopting AI-native developer-productivity or deployment-intelligence tools, AI-assisted deployment risk scoring or LLM-powered operational runbook generation.

Benefits

• Medical and Dental coverage available for employees, dependents, domestic partners, and spouses

• Paid Time Off – Flexible options plus 10 paid company holidays where available**

• All full-time positions are hybrid, with many eligible to be completely remote

• Fully Paid by Origami Risk – Vision insurance, Short & Long-Term Disability Insurance, and Basic Life Insurance

• Generous family leave options—including adoption and foster care placements

• Pre-Tax Savings Accounts – Flexible Spending Account, Health Savings Account, Commuter Benefits, Dependent Care Savings Account

• Retirement Savings – 401(k) with company match up to 4%

• Employee Assistance Program (EAP) – Confidential & Free support offered to colleagues facing personal or work-related complications

• Education Assistance Program – to help colleagues pursue industry/role-specific certifications

• Wellness Benefits – reimbursement program to invest in healthy habits as well as support better colleague productivity and stress management

• Additional coverages available – Pet Insurance, Critical Illness Insurance, and Voluntary Life & AD&D coverage

**Flexible PTO not available in California or the UK Who We Are

Origami Risk delivers single-platform SaaS solutions that help organizations best navigate the complexities of risk, insurance, compliance, and safety management.

Founded by industry veterans who recognized the need for risk management technology that was more configurable, intuitive, and scalable, Origami continues to add to its innovative product offerings for managing both insurable and uninsurable risk; facilitating compliance; improving safety; and helping insurers, MGAs, TPAs, and brokers provide enhanced services that drive results.

A singular focus on client success underlies Origami’s approach to developing, implementing, and supporting our award-winning software solutions.

Origami Risk is proud to be an equal opportunity employer. We thrive and benefit from diversity and are committed to creating an inclusive and equitable environment for all employees. We do not discriminate against any individual based upon race, religion, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, color, sex, national origin, age, marital status, military or veteran status, disability, or any other characteristic protected by applicable law.

Caution: Be alert to recruiting scams. We have received reports of individuals impersonating Origami Risk recruiters to deceive candidates into disclosing personal information. These impostors use fake Origami Risk domain names and email addresses. Please double-check that any email address from an Origami Risk recruiter ends with origamirisk.com or talent.icims.com. And to confirm the legitimacy of any recruiting communication, feel free to email transparencycheck@origamirisk.com.