Responsibilities
What This Team Runs
This is the developer platform and delivery layer that sits on top of the AWS landing zone: the systems Engineering uses to build, ship, and operate services every day. The team owns the platform for application and service delivery, not the landing zone underneath it, which the DevOps Infrastructure team owns. The team owns:
Delivery Pipelines & Build: the CI/CD build and deploy pipelines, and the shared pipeline templates that Engineering teams across the org use to ship every day.
Service-Layer IaC: the infrastructure-as-code that defines each service's cloud resources, versioned and deployed through Terraform.
Kubernetes & Container Platform: the Kubernetes container platform and the self-service golden path that lets a new service onboard with no bespoke infrastructure work.
Application Connectivity: the application-facing API gateways, service DNS, and certificates that make services reachable and secure.
Service Data & Configuration: the application data stores, configuration, and secrets that each service depends on.
Environment Promotion: the promotion path that moves a change safely from lower environments to production.
AI & Internal Tooling: the AI tooling across the development lifecycle that speeds service onboarding, pipeline authoring, and day-to-day delivery.
Key Responsibilities
Developer Platform & Service Onboarding
Onboards new services and greenfield projects through the team's self-service golden path, from repository scaffolding and infrastructure provisioning through pipelines, configuration, secrets, DNS, and alerting, taking each service from “we are building a service” to “it deploys to production on its own pipeline.”
Supports high-velocity delivery for new product initiatives, including AI projects, by enabling Day-1 deployment from initial repo creation through infrastructure provisioning, application deployment, observability, and production readiness.
Applies the team's naming and structural standards for repositories, container images, pipelines, configuration, and secrets, and flags gaps where a standard is missing or unclear.
Supports cost efficiency by right-sizing service infrastructure, applying image and artifact retention policies, and cleaning up idle or unused resources.
Pipelines, Build & Release
Builds, maintains, and troubleshoots CI/CD build and deploy pipelines (build, test, scan, containerize, publish, deploy, and the environment gates between them) using the team's shared pipeline templates.
Contributes changes to shared pipeline templates in a backward-compatible way, so new options carry safe defaults and existing consumers never break.
Maintains container image discipline, including immutable versioning, registry management, and retention policies, so a redeploy always runs exactly the image that was tested.
Executes promotions from lower environments to production through gated, repeatable pipelines, with roll-forward as the default recovery path.
Supports the Release team in operating the pipelines DevOps builds, helping them read a failure, retry or approve a stage, and know when to escalate back to DevOps versus the service owner.
Investigates flaky and intermittent pipeline failures to their root cause rather than retrying past them.
Manages change requests and work items within defined SLAs, including change-advisory and release coordination for production promotions.
Service IaC & Container Platform
Authors and maintains infrastructure as code in Terraform for each service's cloud resources, including compute, serverless functions, API gateways, load balancers, storage, configuration, alarms, and workload IAM roles, with every change versioned, peer-reviewed, and deployed through automation.
Treats manual changes as exceptions to be codified promptly, using plan output and state analysis to detect and resolve configuration drift.
Deploys and operates containerized and serverless workloads on Kubernetes and managed container services, including Helm-based releases, namespaces, workload identity, and network policies.
Configures application connectivity, including API gateways, request authorizers, service DNS records, and TLS certificates, and debugs request-path failures end to end.
Provisions the data stores, configuration, and secrets that belong to a service, including managed relational databases with automated schema-migration pipelines, handing ongoing database operations to the Database team.
AI-Augmented DevOps
Uses AI development tools in daily work for infrastructure code, pipeline authoring, automation scripting, troubleshooting, and documentation, while reviewing, testing, and owning everything AI produces.
Contributes to the team's internal AI tooling across the software development lifecycle and shares effective prompts, patterns, and workflows with the team.
Service Observability & Incident Response
Wires services into logging, metrics, and tracing as part of each service's infrastructure code, including retention and log-volume controls, and confirms a new or promoted service emits telemetry before it is handed to SRE.
Identifies, diagnoses, and resolves delivery and service issues in production and pre-production, including failed deploys, connectivity faults, container and runtime configuration problems, and configuration drift, using observability platforms, cluster tooling, pipeline logs, and infrastructure state.
Recognizes quickly when an issue belongs to another team and hands it off with evidence.
Security, Compliance & Access
Implements the security controls the team owns within the delivery path, including least-privilege workload roles scoped to a single service, secrets management, container and pipeline security scanning, and network-policy enforcement, operating within the guardrails DevOps Infrastructure sets.
Keeps pipeline and platform access least-privilege, including service connections, federated cloud credentials, and repository and pipeline permissions, and supports audit evidence collection for SOC 2, ISO/IEC 27001, and NIST 800-53.
Collaboration & Documentation
Partners with Engineering teams during onboarding and system design so that services are operationally sound and reliably deployable.
Coordinates with cross-functional teams on shared boundaries so that requests do not stall between teams.
Works intake and sprint commitments in the team's work-tracking system, keeping work items current, estimated, and visible.
Creates and maintains technical documentation, including infrastructure READMEs, deployment runbooks, service onboarding guides, troubleshooting notes, and project status updates.
Qualifications
Bachelor's Degree in Computer Science or related field, or commensurate on-the-job experience
3+ years of experience in a DevOps, platform, infrastructure, or software engineering role supporting production systems in AWS
Hands-on experience with AWS services for application delivery, such as container and serverless compute, API gateways, load balancers, object storage, managed databases, IAM, DNS, and secrets and configuration management
Experience writing and maintaining Terraform in a team setting, including modules, remote state, plan review, and drift resolution
Experience building and troubleshooting CI/CD pipelines in a platform such as Azure DevOps, GitHub Actions, or GitLab CI, including reusable templates and environment-gated deployments
Experience with Docker, container registries, and running containers on Kubernetes or managed container services
Ability to code and script in Python, PowerShell, or Bash with an emphasis on testing, automation, and reliable deployments; familiarity with configuration management tools
Working knowledge of building and deploying backend services and modern web front ends (e.g., .NET, Java, Node.js, React)
Experience instrumenting services with logs, metrics, and traces in an observability or APM platform, and using that telemetry to troubleshoot
Working knowledge of the networking that application delivery depends on, including DNS, TLS certificates, load balancers, and API gateways
Strong understanding of Git, pull-request review, continuous integration, continuous deployment, environment promotion, and release automation
Experience supporting both Windows and Linux workloads
Regular use of AI development tools and coding assistants, with the judgment to verify and explain what the AI produces
Familiarity with software engineering practices such as test-driven design, dependency injection, DRY principles, rapid prototyping, and service-oriented architecture
Strong problem-solving skills, troubleshooting ability, and attention to detail, with clear written and verbal communication
Preferred Qualifications
AWS certification at the associate level
Kubernetes experience with Helm and workload identity patterns
Experience with GitOps deployment tooling
Experience with database schema-migration tooling and relational databases
Experience with log search and analytics platforms
Experience with web servers and reverse proxies
Prior experience supporting client product implementations and production rollouts
Familiarity with SOC 2, NIST 800-53, or ISO/IEC 27001 control evidence
Benefits
Medical and Dental coverage available for employees, dependents, domestic partners, and spouses
Paid Time Off – Flexible options plus 10 paid company holidays where available**
All full-time positions are hybrid, with many eligible to be completely remote
Fully Paid by Origami Risk – Vision insurance, Short & Long-Term Disability Insurance, and Basic Life Insurance
Generous family leave options—including adoption and foster care placements
Pre-Tax Savings Accounts – Flexible Spending Account, Health Savings Account, Commuter Benefits, Dependent Care Savings Account
Retirement Savings – 401(k) with company match up to 4%
Employee Assistance Program (EAP) – Confidential & Free support offered to colleagues facing personal or work-related complications
Education Assistance Program – to help colleagues pursue industry/role-specific certifications
Wellness Benefits – reimbursement program to invest in healthy habits as well as support better colleague productivity and stress management
Additional coverages available – Pet Insurance, Critical Illness Insurance, and Voluntary Life & AD&D coverage
Flexible PTO not available in California or the UK
Who We Are
Origami Risk delivers single-platform SaaS solutions that help organizations best navigate the complexities of risk, insurance, compliance, and safety management.
Founded by industry veterans who recognized the need for risk management technology that was more configurable, intuitive, and scalable, Origami continues to add to its innovative product offerings for managing both insurable and uninsurable risk; facilitating compliance; improving safety; and helping insurers, MGAs, TPAs, and brokers provide enhanced services that drive results.
A singular focus on client success underlies Origami’s approach to developing, implementing, and supporting our award-winning software solutions.
Origami Risk is proud to be an equal opportunity employer. We thrive and benefit from diversity and are committed to creating an inclusive and equitable environment for all employees. We do not discriminate against any individual based upon race, religion, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, color, sex, national origin, age, marital status, military or veteran status, disability, or any other characteristic protected by applicable law.
Caution: Be alert to recruiting scams. We have received reports of individuals impersonating Origami Risk recruiters to deceive candidates into disclosing personal information. These impostors use fake Origami Risk domain names and email addresses. Please double-check that any email address from an Origami Risk recruiter ends with origamirisk.com or talent.icims.com. And to confirm the legitimacy of any recruiting communication, feel free to email transparencycheck@origamirisk.com.
