Senior DevOps / Platform Automation Engineer (DevSecOps)

About Trio:

trio is redefining endpoint management, device security, compliance automation, and hybrid deployments—running across AWS, Azure, GCP, DigitalOcean, and on-prem environments.

• Build automation-first deployment frameworks for cloud, hybrid, and on-prem (incl. restricted / air-gapped) environments.
• Develop and maintain Ansible roles/playbooks for provisioning, hardening, upgrades, rollback, and lifecycle operations.
• Own CI/CD using GitHub Actions (plus GitOps with ArgoCD) with strong release governance (blue/green, canary, staged rollout).
• Implement DevSecOps controls: SAST/DAST/SCA, secrets management, signed artifacts, least-privilege IAM, secure networking, and TLS.
• Operate production-grade observability: Prometheus, Grafana, and centralized logging (ELK / Loki), plus reliability practices (SLO/SLI, runbooks, postmortems).
• Build and secure container platforms: Docker + Kubernetes (including lightweight options like K3s).
• Collaborate with engineering on AI/ML-enabled automations (e.g., intelligent alerting, anomaly detection, automated remediation, compliance scoring).

• 8+ years in DevOps / SRE / Platform Engineering (Senior level)
• Strong experience in Ansible automation (roles, inventories, hardening, upgrades)
• Strong Kubernetes + Docker experience in production
• CI/CD & GitOps: GitHub Actions, ArgoCD
• Cloud: AWS & GCP (Azure/DigitalOcean plus)
• Monitoring & Logging: Prometheus/Grafana, ELK/Loki
• Programming/Scripting: Go (required) + Bash/Python
• Security-minded: IAM, TLS, network segmentation, supply chain security basics
• Strong English + documentation

• Air-gapped deployments & artifact mirroring
• Vault / PKI automation
• SBOM + signing (cosign, provenance, SLSA concepts)
• Policy-as-code (OPA/Gatekeeper) and K8s security tooling