Want to know if this job is worth applying to?
New York, New York, United States
Onsite
OptionMetrics, headquartered in New York, NY. is a dynamic and innovative technology company, a trusted provider of financial information and research derived from the option markets. We are at the forefront of developing solutions that empower businesses. Our commitment to excellence, coupled with a collaborative, forward-thinking culture, has made us the preferred choice for top-tier talent. Our data and analytics models are utilized by over 350 investment banks, hedge funds, asset management firms, and academic institutions globally, solidifying our position as a leader in the industry.
Are you ready to own the cloud foundation behind a market-leading financial data business? At OptionMetrics, we're looking for a Senior Cloud Infrastructure & DevOps Engineer to own our multi-account AWS environment, our client-facing file-delivery platform, the deployment pipelines and scheduled workflows that ship our data, and the security controls around all of it. Our clients and internal teams depend on this infrastructure every day. You'll keep it reliable, automate how it runs, and leave it better documented than you found it.
You'll report to the Head of IT Operations and work closely with Engineering, Product, Sales and Customer Support.
Client file delivery (CrushFTP): Production, test and DMZ environments on autoscaling and S3, client and support account provisioning, and operating the legacy platform through its retirement.
AWS multi-account foundation: Organizations, SSO and IAM, the Transit Gateway hub-and-spoke network, and the migration of workloads off the main account.
TLS and certificates: A full certificate inventory, auto-renewing ACM certificates, and alerting on expiring or mismatched certificates across every domain.
Edge and application security: Cloudflare and AWS WAF rules, rate limiting, bot mitigation, and incident response for customer-facing applications.
DevOps and release engineering: CI/CD pipelines (GitHub Actions, TeamCity), deployments to production and non-production environments, and release plans for every production change.
Workflow automation and monitoring: Our scheduled data workflows (Stonebranch/OpsWise), plus monitoring, alerting and on-call (Site24x7, Opsgenie) for business-critical jobs and services.
Infrastructure as Code: Terraform and GitHub Actions with OIDC-based deployment, a sandbox account, and code-reviewed changes.
Cost and compliance: Cost reporting, tag enforcement with AWS Config, and CrowdStrike coverage and access audits.
Design, build and operate highly available AWS infrastructure across dev, test, prod and DMZ accounts.
Plan and run production changes with a published change notice covering scope, impact, rollback and confirmation.
Perform and oversee deployments to production and non-production environments, with a release plan, a rollback path and a Jira record for each.
Build, maintain and troubleshoot CI/CD pipelines, and help development teams ship safely and repeatably.
Monitor and tune business-critical scheduled workflows, troubleshoot failures, and drive failed jobs to root cause through the weekly failure review.
Build monitoring, alerting, consolidated metrics and logs that give stakeholders a clear view of system and workflow health.
Respond to infrastructure and security incidents: contain first, then find the root cause and document it in Jira.
Turn repeated manual work into automation using scripts, GitHub Actions, Infrastructure as Code and AI tooling.
Apply least privilege to every access request: expiring SSO roles, and no long-lived keys without a documented use case.
Write and maintain runbooks, architecture and network diagrams, and Confluence standards for everything you own, including legacy systems.
Keep Jira current: every ticket you own shows a status, a blocker or a next step, updated at least every two weeks.
Take ad-hoc requests from Sales, Support and Product. Clarify the need, commit to a date, and deliver.
Coach junior engineers and hand off repeatable work to them with written runbooks.
Disagree, then commit. Push back with evidence. Once a decision is made, deliver it as agreed, or agree an alternative in writing.
Respect for colleagues. Criticize the problem, not the people or teams involved, in every channel.
Stay calm when escalated. Answer with status and next steps.
Make your work visible. Post a daily written standup update (Shipped / Next / Blockers) and take part in team rituals.
Review every change. Production changes go through code review, including urgent ones.
Own the whole job. Documentation, legacy systems and request handling are part of the role, not a distraction from it.
6+ years in cloud or infrastructure engineering, including 4+ years running production AWS.
Deep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail.
Strong Linux administration skills.
Hands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments.
Experience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines.
Production experience with Terraform and CI/CD in GitHub Actions, including OIDC.
Solid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS.
A security mindset: least privilege, WAF and rate limiting, and incident response.
Scripting in Python or Bash.
Clear written and verbal communication: change notices, runbooks and Jira write-ups others can act on.
A track record of delivering on commitments in an environment with frequent interruptions.
6+ years in cloud or infrastructure engineering, including 4+ years running production AWS.
Deep AWS experience: VPC, Transit Gateway, Client VPN, IAM, SSO, Organizations, ELB/ALB/NLB, ACM, EC2 Auto Scaling, S3, AWS Config and CloudTrail.
Strong Linux administration skills.
Hands-on DevOps experience: CI/CD pipelines, release management, and supporting development teams through deployments.
Experience running a job scheduler or workflow automation platform (Stonebranch/OpsWise, Control-M, Airflow or similar) and troubleshooting failed pipelines.
Production experience with Terraform and CI/CD in GitHub Actions, including OIDC.
Solid grounding in TLS/PKI, DNS (Route53 and external providers) and file transfer over FTP, FTPS, SFTP, SSH and HTTP/HTTPS.
A security mindset: least privilege, WAF and rate limiting, and incident response.
Scripting in Python or Bash.
Clear written and verbal communication: change notices, runbooks and Jira write-ups others can act on.
A track record of delivering on commitments in an environment with frequent interruptions.
AWS Certification (Solutions Architect, SysOps or Security).
SRE or platform engineering experience, including SLOs, observability and on-call practice.
Experience with TeamCity, Site24x7 or Opsgenie.
Containers and orchestration (Docker, ECS).
Experience with CrushFTP or other managed file-transfer platforms.
Cloudflare experience (WAF, Turnstile, access rules).
Building AI tooling for operations, such as Claude skills or agents for runbooks and audits.
Experience with CrowdStrike and Active Directory.
Leading a multi-account AWS migration from start to finish.
Experience in financial data or fintech.
First 90 days: Every certificate is on auto-renewal or alerting. The AWS network diagram for all accounts is published. Runbooks exist for account provisioning and read-only access requests. No ticket you own goes more than 14 days without an update.
First year: Every production deployment follows a documented release plan, and scheduled workflow failures are trending down month over month. Workloads are off the main account. All new infrastructure is in Terraform with code review. Tag compliance is above 95%. Legacy CrushFTP is retired. Junior engineers handle routine requests from your runbooks.
A collaborative environment where everyone's input makes a difference.
Paid time off: Vacation, Personal, Sick days, and Holidays.
Pre-tax commuter benefits (NJT, MTA, etc.) and 401k plan offered.
Full medical and dental insurance coverage.
OptionMetrics is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Further, OptionMetrics will not discriminate against applicants for inquiring about, discussing or disclosing their pay or, in certain circumstances, the pay of their co‐worker, Pay Transparency Nondiscrimination .
