GTM DevOps Engineer

CI/CD & Release Engineering

• Design, build, and maintain CI/CD pipelines for Salesforce (SFDX/Salesforce CLI), NetSuite (SuiteScript/SuiteBundler), MuleSoft (Anypoint Platform), and Workato
• Establish branching strategies, environment promotion standards, and release gating processes across all GTM platforms
• Extend CI/CD practices to cover AI agent workloads deployed on GCP Cloud Run and AWS Bedrock AgentCore — including containerized builds, deployment pipelines, and automated validation gates
• Implement safe rollout patterns — including feature toggles, phased launches, automated validation, smoke tests, and rollback procedures

Platform Reliability & Observability

• Own SLA/SLO definitions for core GTM systems; standardize monitoring, alerting, and runbook patterns across quote-to-cash and GTM integrations
• Extend observability coverage to GCP Cloud Run workloads and AWS-hosted agent infrastructure
• Conduct root cause analysis (RCA) for platform incidents and drive post-incident reviews

Cloud Infrastructure & Environment Management

• Manage sandbox, staging, and production environment lifecycles across GTM platforms
• Own cloud infrastructure for Business Systems-operated workloads on GCP (Cloud Run, Cloud Scheduler, Cloud Secret Manager, GCS, Artifact Registry) and AWS (Lambda, S3, EventBridge, Secrets Manager, Bedrock AgentCore)
• Apply IaC practices to make provisioning repeatable and auditable
• Establish base image pinning, dependency vulnerability scanning, and supply chain security practices for containerized workloads

Secrets, Access & Security Posture

• Establish and enforce a consistent secrets management standard across all Business Systems workloads
• Define and maintain API key rotation policies
• Partner with Security and IT on IAM scoping, least-privilege service accounts, VPC configuration, and public/private endpoint governance
• Maintain a centralized registry of deployed workloads

Automation & Tooling

• Build internal tooling, automation scripts, and automated testing frameworks (unit, integration, regression)
• Develop or enforce GitHub repository templates for Cloud Run deployments

Governance, Standards & Collaboration

• Define where self-service deployment and administration are appropriate versus where stronger change control and operational guardrails are required
• Document and maintain operational runbooks, architecture decision records (ADRs), and deployment standards
• Collaborate with IT, Data Engineering, Security, and business stakeholders

Qualifications

Experience

• 4+ years in a DevOps, Site Reliability Engineering (SRE), or Platform Engineering role
• 2+ years of hands-on experience deploying and managing Salesforce environments (SFDX, Salesforce CLI, scratch orgs, sandboxes, change sets, or pipeline-based deployments)
• Experience with at least one additional GTM/ERP platform, such as NetSuite, MuleSoft, or Workato
• Demonstrated experience building and maintaining CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, or Copado
• Hands-on experience with GCP services — Cloud Run, Cloud Scheduler, Cloud Secret Manager, Artifact Registry, GCS
• Experience with AWS services — Lambda, S3, SQS, Secrets Manager, CloudWatch; familiarity with Bedrock AgentCore is a strong plus
• Experience managing containerized workloads, including image lifecycle, dependency scanning, and supply chain security practices
• Experience with incident management, on-call processes, and writing post-incident reviews

Skills & Competencies

• Strong scripting skills in Python, Bash, or Node.js
• Proficiency with Git, branching strategies, and version control best practices
• Understanding of API-based integration patterns (REST, SOAP, event-driven)
• Hands-on familiarity with secrets management across GCP Secret Manager and AWS Secrets Manager
• Monitoring and observability tooling experience (Datadog, Splunk, Google Cloud Monitoring, CloudWatch, or similar)
• Infrastructure-as-code proficiency — Terraform or CloudFormation
• Familiarity with container security practices: base image pinning, vulnerability scanning (e.g., Artifact Registry, Trivy), and dependency management