DevOps Engineer

Staff DevOps Engineer

Action1 is a cloud-native autonomous endpoint management platform that helps organizations automate operating system and third-party patching, assess vulnerabilities, and secure endpoints at scale. Trusted by thousands of organizations managing millions of endpoints globally, we are building the infrastructure that supports our continued growth.

Working hours

- Working hours close to the CET time zone are preferred to support regular collaboration with your manager and coordination of the team’s workload.

- Flexibility to adjust working hours for team coordination, planned production changes, and critical incidents. This includes working US time-zone hours for a couple of days when needed to attend team meetings, participate in cross-training, or support handovers.

Job Scope

- We are looking for a Senior / Staff DevOps Engineer to build and operate Action1’s AWS infrastructure, improve deployment automation, and strengthen production reliability and security.

- This is a hands-on individual contributor role. You will identify problems, make technical decisions, and carry improvements through implementation and validation, with support and input from your manager and peers.

- You will join a small, collaborative DevOps team where your ideas help shape how we work. There is room to try new approaches, learn from experienced colleagues, and see your work make a difference in production. You will work closely with R&D and QA on releases and production needs.

• Build and evolve our AWS infrastructure. Design and operate secure, resilient infrastructure across multiple accounts and regions. Evaluate architecture decisions against production requirements, operational complexity, performance, and cost.
• Build infrastructure as code. Develop reusable components, reduce configuration drift, and make environments reproducible. Maintain infrastructure and automation in Git with peer review, testing, documentation, and clear ownership.
• Improve deployment pipelines. Build and maintain CI/CD pipelines, automated checks, deployment controls, and rollback mechanisms to make releases safer and more predictable.
• Develop reliable automation. Use programming, scripting, and APIs to simplify operations, eliminate repetitive work, and build tooling the team can maintain and support.
• Apply AI in daily DevOps work. Use approved tools such as Codex or Claude for infrastructure code, scripting, testing, troubleshooting, operational analysis, and documentation. Build reusable workflows, independently review and test outputs, protect sensitive information, and follow established review and change controls.
• Strengthen observability. Improve metrics, logs, traces, dashboards, and actionable alerts. Investigate performance and capacity constraints, connect telemetry to application behavior, and reduce unnecessary alert noise.
• Own production reliability. Participate in the on-call rotation and lead incident response when needed. Coordinate recovery, communicate clearly, investigate underlying causes, and verify that corrective changes address the problem.
• Validate resilience and recovery. Develop and test backup, recovery, failover, and maintenance procedures. Use controlled failure exercises where appropriate to identify weaknesses before they affect customers.
• Continuously assess AWS platform security. Review access, network exposure, logging, vulnerabilities, and misconfigurations across accounts and environments. Investigate security findings and suspicious activity, prioritize work by risk, and drive remediation through implementation and verification, coordinating with Security and the owners of affected systems.
• Improve AWS security controls. Evaluate and introduce practical improvements to threat detection, automated security checks, and response workflows. Strengthen least-privilege access, network controls, secrets management, encryption, hardening, and auditability. Integrate technical controls into infrastructure and delivery pipelines to meet security and compliance requirements.
• Improve cloud efficiency. Understand cost drivers, identify waste, and evaluate capacity and architecture improvements using measured workload behavior. Verify savings alongside performance and reliability.
• Share operational knowledge. Review infrastructure designs and automation code, document decisions, and maintain useful runbooks and technical documentation.

• Substantial hands-on experience in DevOps, SRE, or cloud infrastructure engineering for production SaaS environments.
• A record of independently identifying and solving problems, prioritizing work, and coordinating dependencies while keeping others informed.
• Deep AWS knowledge and experience designing, operating, and troubleshooting distributed systems across multiple environments.
• Strong AWS security operations experience, including assessments, incident investigations, and vulnerability and misconfiguration remediation.
• Hands-on observability experience using metrics, logs, and traces to investigate production issues and build actionable dashboards and alerts.
• Strong programming or scripting skills in Python, Node.js, or a comparable language for maintainable automation and API integrations.
• Strong hands-on experience with both Terraform and AWS CloudFormation, supported by Git, code review, testing, and CI/CD practices.
• Sound understanding of operating systems, networking, DNS, TLS, identity, storage, and database behavior, with the ability to troubleshoot across system boundaries.
• Experience with production incident response, root-cause analysis, and recovery planning.
• Practical experience using AI tools in DevOps, including examples of their benefits, limitations, and how you validated and corrected their output.
• Analytical thinking and sound judgment: test assumptions, distinguish symptoms from causes, weigh trade-offs, verify results, and recognize when broader review is needed.
• Flexibility to collaborate across time zones and adjust working hours for team coordination, planned production changes, and critical incidents.
• Hands-on Datadog experience for production troubleshooting and reliability improvement.
• Experience with Terramate for managing Terraform infrastructure across environments.
• Experience building operational tools or self-service workflows for provisioning, deployments, and environment management.
• Practical SRE experience, including service-level objectives, capacity planning, and reliability reviews.
• Experience supporting SOC 2, ISO 27001, or comparable requirements through technical controls and operational evidence.
• Experience developing AI agents with appropriate access boundaries, evaluation, and human oversight.
• Experience mentoring DevOps engineers and leading infrastructure or operational improvements.

• Fully remote work, with flexibility around team collaboration and production responsibilities.
• Ownership of infrastructure supporting a growing global platform.
• Challenging DevOps work and opportunities to deepen your technical expertise.
• Direct collaboration with experienced, supportive peers.

Remote; location listed as Czechia.