Lead Dev Ops Engineer: PGIM Ireland

## Responsibilities - Build out scalable applications to support Portfolio Management, Compliance, Finance, Data Governance, Operational Risk, and Human Resources teams. - Have in-depth technical knowledge of Java or Python together with strong SQL and feel comfortable working within large internal and external data sets. - Focus on CI/CD, platform engineering, and operational excellence across on-prem, AWS, and Azure. - Work closely with development teams to understand their design/challenges, propose technical solutions, and assist with implementation of systems. - Standardize CI/CD on GitHub Actions by building reusable workflows/composite actions, defining runner strategy, and enforcing environment protections/approvals and required quality gates. - Automate build, test, security checks, and progressive delivery (blue/green, canary) to enable developer self-service. - Develop automated infrastructure provisioning, configuration management, source code management and new ways to operate and collaborate. - Implement Infrastructure as Code using CloudFormation and Terraform. - Use role-relevant languages and frameworks such as Python, Shell/PowerShell, Groovy/JavaScript as needed for pipeline automation. - Implement GitOps-based deployment patterns and environment promotion workflows. - Establish guardrails for configuration, secrets, and change management across environments. - Partner with engineering and leadership on FinOps practices: cost allocation/tagging standards, budget alerts, showback/chargeback reporting, rightsizing and scheduling, and optimization of compute/storage/network spend. - Drive DevSecOps and Security Operations alignment by partnering with security teams on detection and response (triage, containment, postmortems), improving platform hardening and access controls, and ensuring audit-ready logging and monitoring. - Define and operationalize SRE practices: SLIs/SLOs, error budgets, on-call readiness, runbooks, automated remediation, and service health dashboards leveraging modern observability tooling. - Bring excellent problem solving, communication and teamwork skills, along with agile ways of working, strong desire to new tools and technology and an inclusive attitude. ## Requirements - 10+ years of proven experience in DevOps or Platform Engineering. - Strong experience with deploying, managing and monitoring services in AWS/Azure. - Hands-on experience using source control (Git, GitHub) and feature branching strategies. - Experience designing and operating CI/CD platforms with GitHub Actions as the primary automation layer (workflow-as-code, reusable workflows/actions, runners, environment protections), plus familiarity integrating or migrating from legacy tooling (e.g., Jenkins) as needed. - Understands networking, DNS, routing and messaging, especially between services. - Experience with microservices and designing observability (metrics, logs, traces) for production services. - Working knowledge of cloud security and SecOps processes (IAM, key management, logging/monitoring, vulnerability remediation, incident response) and ability to embed security controls into workflows. - Experience applying FinOps concepts in AWS/Azure (cost visibility, tagging, budgeting, forecasting, rightsizing, reserved capacity/savings plans) and communicating cost drivers to engineering stakeholders. - Ability to speak to SDLC best practices and industry trends. - Familiarity with various Software Engineering domains: Software development processes (Java, Python, JavaScript, SQL, Shell, Infrastructure-as-Code, Configuration-as-Code), Issue tracking and versioning (Jira), Package managers (pip, npm) and Build tools (Gradle, Maven), Containers (Docker, Kubernetes), Infrastructure/config deployment tooling (Terraform, CloudFormation, Ansible), Artifact repositories (e.g., Artifactory, Nexus, GitHub Packages), CI/CD platform: Jenkins & GitHub Actions, GitHub Actions patterns: workflow-as-code (YAML), reusable workflows/actions, runner strategy, environment protections/approvals, secrets + OIDC cloud auth, and artifacts/caching, Cloud container platforms: Amazon EKS/ECS and ECR; Azure AKS and ACR (including image scanning/signing where available), Continuous delivery & GitOps tooling (e.g., Argo CD, Flux) and Helm/Kustomize-based configuration management, Cloud-native identity, secrets, and configuration: AWS IAM/KMS/SSM Parameter Store/Secrets Manager; Azure Entra ID, Key Vault, and App Configuration, Cloud monitoring/logging: AWS CloudWatch/CloudTrail; Azure Monitor, Log Analytics, and Application Insights (plus integrations with Splunk/Dynatrace/Datadog as applicable), Policy-as-code and compliance automation (e.g., OPA/Gatekeeper, Terraform policy frameworks) and secrets management practices, Experience with monitoring and observability tools such as with Splunk, Dynatrace, Datadog, Prometheus, Grafana, OpenTelemetry etc., Strong verbal communication skills to address both the development community and business leaders, Strong documentation skills to publish user guides, defects, feature requests, and architecture designs. ## Nice to Have - AWS and Azure Cloud Certifications. - Experience in application development (Python, Groovy, JavaScript). - Experience in SRE principles in developing metrics to measure the Web apps, Data analytics and ETL processes. - Establish SLO/SLA, Performance measurements and failure mitigation for such processes. - Familiarity with application security domains (static code analysis, SAST, DAST, SCA, xSPM). ## Benefits - Dynamic, fast-paced environment with exciting changes on the horizon under new senior leadership. - Opportunity to work with a senior leadership team and contribute to significant changes in the Technology Solutions Group. - Collaborative and inclusive work culture with a focus on innovation and continuous improvement.