Lead Devops Engineer

ABOUT US Small businesses are the backbone of the US economy, comprising almost half of the GDP and the private workforce. Yet, big banks don’t provide the access, assistance and modern tools that owners need to successfully grow their business.   We started Novo to challenge the status quo—we’re on a mission to increase the GDP of the modern entrepreneur by creating the go-to banking platform for small businesses (SMBs). Novo is flipping the script of the banking world, and we’re excited to lead the small business banking revolution.   At Novo, we’re here to help entrepreneurs, freelancers, startups and SMBs achieve their financial goals by empowering them with an operating system that makes business banking as easy as iOS. We developed modern bank accounts and tools to help to save time and increase cash flow. Our unique product integrations enable easy access to tracking payments, transferring money internationally, managing business transactions and more. We’ve made a big impact in a short amount of time, helping thousands of organizations access powerfully simple business banking.   Why Novo? - Novo is a rapidly growing series B fintech startup with a mission-driven team that’s passionate about helping every small business in America - Positive, inclusive, supportive culture cheering you on your journey - We work with very new technologies and architecture patterns - Offices in NYC and India. About the role: Collaborate & Influence. Drive technical direction and maintain high code quality through design reviews and code reviews. Partner with Engineering Managers to plan, scope, and deliver infrastructure projects on time. Contribute to the DevOps hiring process — including technical assessments and interview panels. Build strong, trust-based relationships across engineering, product, and security teams.   Build & Automate: Design, build, and own Novo's cloud infrastructure on AWS using infrastructure-as-code (Terraform / Terragrunt). Automate everything — scaling, patching, incident response, secrets rotation, and day-2 operations. Deploy and maintain self-service tooling so both the DevOps team and all of Novo's engineering teams can move faster without bottlenecks. Implement and evolve Novo's CI/CD pipelines (Jenkins, GitHub Actions) for speed, safety, and observability. Partner with developers to build services aligned with modern design patterns (12-Factor, GitOps).   Secure & Observe: Develop, document, and enforce security policies, protocols, and procedures across all environments (dev, QA, staging, prod). Implement and manage secure networking connectivity to private resources with a Zero-Trust approach. Automated TLS certificate lifecycle management. Monitor and troubleshoot services using Prometheus/Grafana, ELK, and CloudWatch — and proactively identify gaps in observability coverage. Design and maintain Nginx configurations, load balancing, and reverse proxy patterns.   Automation, AIOps & Modern Tooling: Use AI-assisted tools (Google Gemini, LLM-based runbook generation, intelligent alerting) to accelerate infrastructure delivery and reduce toil. Evaluate and adopt emerging AI DevOps tooling — from AIOps anomaly detection to AI-assisted incident triage. Build internal AI-augmented automations: auto-remediation scripts, policy-as-code evaluators, and intelligent capacity recommendations. Champion a culture of "automate before you delegate" — if you're doing something manually twice, it should become a script or workflow.     Requirements for the role: 8+ years in cloud infrastructure, with 3+ years hands-on AWS - owning complex systems end-to-end and driving technical decisions across engineering teams   Cloud & Infrastructure: Deep expertise in AWS services, such as: EC2, EKS, ECS, RDS, Elasticache, S3, IAM, VPC, Route 53, CloudFront. Expert-level Terraform (Terragrunt a strong plus), able to define custom internal modules to bootstrap complete solutions. Confident managing multi-account AWS environments. Strong Linux systems knowledge — kernel, networking, performance tuning, package management. Container expertise: Docker, Kubernetes, and Helm chart authoring. Kubernetes Topology: leverage Taints and tolerations, Affinities, Topology Spreads to build reliable systems.   Automation & CI/CD: Strong scripting skills in Bash and at least one general-purpose language (Python preferred). Experience with CI/CD platforms: Jenkins, GitHub Actions, or CircleCI. Source control mastery: Git (GitHub), branching strategies, code review workflows, GitOps. Experience authoring reliable automation pipelines: from regular scripting to orchestration workflows using tools such as GitHub Actions or Step Function.   Observability & Security: Hands-on experience with configuring monitoring/logging stacks: Prometheus/Grafana, ELK, and CloudWatch. Nginx configuration, SSL/TLS management, and certificate lifecycle automation. VPN implementation: OpenVPN. Zero Trust Implementation: Cloudflare Tunnels. Familiarity with cloud security best practices: IAM least-privilege, secrets management (Vault / AWS Secrets Manager), network segmentation. Experience with Containers and Kubernetes security: Network Policies, RBAC, Logs and events auditing, containers hardening, Seccomp.   Data & Middleware: Experience supporting relational databases (PostgreSQL), caches (Redis, Memcache), and message buses (Kafka/RedPanda, RabbitMQ), NoSQL Databases (MongoDB, DynamoDB). Working knowledge of networking fundamentals: DNS, TCP/IP, load balancing, CDN.   AI Fluency: You actively use AI coding assistants (Copilot, Cursor, Claude, ChatGPT) as part of your daily workflow - not occasionally. You have applied LLMs or AI tooling to infrastructure problems: incident summarization, code generation, IaC linting, runbook drafting. You understand the limitations of AI-generated infrastructure code and apply critical review before shipping to production. Curiosity about where AIOps, LLMOps, and platform engineering are heading — and excitement to help Novo get there first. Novo values diversity as a core tenant of the work we do and the businesses we serve. We are an equal opportunity employer, indiscriminate of race, religion, ethnicity, national origin, citizenship, gender, gender identity, sexual orientation, age, veteran status, disability, genetic information, role-specific, or any other protected characteristic.