Lead DevOps Engineer

About Onit We're redefining the future of legal operations through the power of AI. Our cutting-edge platform streamlines enterprise legal management, matter management, spend management and contract lifecycle processes, transforming manual workflows into intelligent, automated solutions. We’re a team of innovators using AI at the core to help legal departments become faster, smarter, and more strategic. As we continue to grow and expand the capabilities of our new AI-centric platform, we’re looking for bold thinkers and builders who are excited to shape the next chapter of legal tech. If you're energized by meaningful work, love solving complex problems, and want to help modernize how legal teams operate, we’d love to meet you. Responsibilities

• Own delivery on AWS, and on Google Cloud and Azure where products run there: Kubernetes, Terraform, Ansible, container images, and the Jenkins and GitLab pipelines that promote a service from sandbox to production.
• Shape clusters for production workloads, including compute, autoscaling, worker processes, load balancing, and shared data services such as relational databases, cache, and object and file storage.
• Automate virtual machine and host configuration with Ansible, including build agents, bastion hosts, and supporting services that sit beside Kubernetes.
• Keep configuration and secrets safe across environments and cloud accounts. Secrets stay encrypted and access stays limited to the environments that need them.
• Lead releases and production incidents. Diagnose failed deploys, capacity problems, and dependency failures with the service owner, and close them with a change in infrastructure, charts, playbooks, or the pipeline.
• Bring new services, including AI platform components, onto the same release, security, and observability bar as the core products, on whichever cloud they run.
• Own observability and cost: metrics, logs, and traces that show whether a release is healthy, and a clear view of spend by environment and cloud.
• Hold the security baseline on the platform: identity and access, policy and runtime controls, image and dependency hygiene, and patch cadence for clusters, nodes, and hosts.
• Advance disaster recovery and environment consistency so failover and drift are operating practice, not a side project.
• Set patterns other engineers can follow, and review risky changes to shared infrastructure before they land.

Requirements

• 8+ years of experience in DevOps, site reliability, or cloud platform engineering, with several of those years leading production infrastructure.
• You have led Kubernetes platforms on AWS across more than one account, including production changes you owned through the incident. You have also operated workloads on Google Cloud, Azure, or both.
• You have standardized Terraform, Helm, and Ansible that other people can apply, including environment layout and secrets handling.
• You have run a real deploy path for many services and understand how image build, configuration, secrets, and load-balancer registration fit together.
• You can diagnose an unhealthy release: scheduling, health checks, worker backlog, and a deploy that does not become ready.
• You treat IAM, network boundaries, and secrets as part of the design, and you have operated cloud key management or an equivalent.
• You have run databases, cache, and shared storage under Kubernetes, including backup and a tested restore.
• You lead by setting the pattern and reviewing the risky changes, and you can pair with an engineer shipping infrastructure for the first time.

Skills

• Cloud: AWS (EKS, ECR, VPC, ALB/NLB, RDS/Aurora, ElastiCache, S3, EFS, SQS/SNS, IAM/IRSA, KMS, CloudWatch). Working knowledge of Google Cloud and Azure for the products that run there.
• Kubernetes: EKS, Helm, workloads, autoscaling, pod disruption budgets, resource sizing, and production troubleshooting.
• Delivery: Terraform, Ansible, Docker, Jenkins, GitLab CI, and Git. Helm releases and Ansible playbooks across many environments.
• Secrets: SOPS or equivalent, with cloud key management. No plaintext credentials in configuration.
• Data: PostgreSQL, Redis or Valkey, and object and shared file storage in production, including backup and restore.
• Observability: metrics, logs, and traces (Grafana, OpenTelemetry, Fluent Bit, CloudWatch, or equivalent) and cloud cost visibility.
• Security: IAM, network controls, policy-as-code, image and dependency scanning, and node and host patching.
• Networking: load balancers, ingress, and API gateway patterns in front of Kubernetes services.

Benefits & Perks That Support You: Onit offers a comprehensive total rewards package designed to support the whole employee at work and beyond: Health Coverage: Employee and immediate family members. Time Away: Flexible paid time off and 10 company paid holidays annually. Family Support: Exceptional paid leave for birth parents, non-birth parents, and caregivers.  Onit also offers surrogacy and adoption reimbursement. Income Protection: 100% employer-paid life and disability insurance. Additional Coverage Options: Voluntary benefits including hospital indemnity, critical illness, accident. Tax-Advantaged Accounts: Flexi, NPS. Community Engagement: One paid volunteer day each year to give back to the community. Our Commitment to Applicants We know that not everyone will check every box in a job description. At Onit, we value diversity, inclusion, and authenticity. If you’re excited about this role but your experience doesn’t align perfectly with every qualification, we encourage you to apply. You may be exactly who we’re looking for. Onit Values  Customer First - Customer success is our success. We deliver value, listen, and act on customer needs.  Purposeful Innovation - Innovation fuels our growth. We harness creativity to solve problems and lead with the intentions and expertise.  Win as One - Teamwork is how we win. We are accountable, act with integrity, and communicate openly.  Intentional Growth - Our people are the difference. We create an environment with compelling work, impactful contributions, and career growth.