The Position

• Join the infrastructure team behind MDaaS — a real-time malware scanning platform handling 30M+ requests/day, built on AWS, Kubernetes, and event streaming.

• You'll work in an agile scrum team, owning infrastructure-as-code, CI/CD pipelines, and observability. Security and compliance are first-class requirements, not afterthoughts.

What You Will be Doing

• Deploy and maintain workloads on EKS via ArgoCD — review GitOps PRs, handle sync failures, approve image updates

• Write and update Helm charts / Kustomize overlays across dev / staging / prod

• Triage alerts from Prometheus / Grafana / Coralogix — root cause analysis, resolve or escalate

• Review and apply Terraform changes — plan, validate, and merge infra PRs (EKS, MSK, ALB, IAM)

• Maintain CI/CD pipelines on Bitbucket Pipelines and GitHub Actions — fix broken builds, integrate security scans

• Configure and tune KEDA ScaledObjects for Kafka / RabbitMQ consumers

• Triage CVEs from Blackduck / Trivy reports — prioritize CVSS ≥ 7.0, coordinate patches with dev team

• Rotate secrets, verify External Secrets Operator sync, enforce no-hardcoded-credentials policy

• Document infrastructure and application changes for engineers and QA

• Participate in on-call rotation — incident response, post-mortems, runbook updates

• Research new tools and technologies to address current pain points and improve system reliability, scalability, and security — evaluate, prototype, and propose adoption when appropriate

What We Need From You

Education & Background

• BA/BS in Computer Science, Engineering, or equivalent hands-on experience

Soft Skills

• Strong verbal and written communication in English

• Self-motivated; works well in a fast-paced, collaborative team

• Eager to learn new tools and apply them quickly

• Passionate about solving problems in a principled, elegant way

• Comfortable both teaching and learning from teammates

Cloud & Infra

• AWS hands-on: EKS, ECR, IAM/IRSA, MSK, S3, ALB, VPC, Security Groups

• Terraform: write modules, manage remote state, integrate with CI

• Kubernetes: RBAC, ingress, network policies, HPA, resource tuning — cluster management via Rancher or K9s

• Helm + Ansible: author charts and playbooks, manage versioning

• Docker: multi-stage builds, image optimization

• Linux/Windows systems administration

CI/CD & GitOps

• Bitbucket Pipelines, GitHub Actions, or TeamCity — write and maintain, not just use

• ArgoCD: sync policy, health checks, rollback

• PR-based deployments; no direct commits to main/prod

Observability

• Prometheus, Grafana, CloudWatch, Elasticsearch — setup and maintain

• Structured logging, alert routing, dashboard authoring

Security

• Least privilege: IAM, IRSA, K8s RBAC — no wildcard permissions

• Secret management: External Secrets / AWS Secrets Manager, zero hardcoded credentials

• Supply chain: dependency scanning (Blackduck / Snyk / Trivy), CVE triage by CVSS score

• Network segmentation: private subnets, Security Groups, ingress/egress control

• Working knowledge of ISO/IEC 27001 and SOC 2 Type II — access control, audit trail, change management

• Familiar with CIS Benchmarks for Kubernetes and Linux hardening

Development

• Python and/or Go — scripting, tooling, automation

• Able to read Node.js/TypeScript code to debug service issues independently

AI & Tooling

• Actively uses AI coding tools (GitHub Copilot, Cursor, Claude) in daily workflow — writing scripts, Terraform modules, Helm templates, and debugging

• Knows how to prompt effectively, verify AI output, and not blindly trust generated infrastructure code

Nice-to-have

• Experience in the cybersecurity industry

• Knowledge of compliance frameworks: NIST CSF, HIPAA, GDPR — applied to real infrastructure

• Istio: mTLS, VirtualService/DestinationRule, traffic management

• KEDA advanced: custom metrics, scale-to-zero, cooldown tuning

• Kafka (MSK) operations: topic management, consumer lag, AKHQ

• Policy-as-code: OPA/Gatekeeper or Kyverno

• OWASP container and API security principles

• Coralogix / Datadog with OpenTelemetry — custom pipelines, alert routing

• Kubecost cost analysis, Kubeshark traffic capture

• Experience with large-scale systems: 30M+ requests/day

• Azure exposure (secondary to AWS)

• Has used AI to generate, review, or optimize infrastructure-as-code (Terraform, Helm, bash scripts) and understands its limitations: hallucinations, outdated API references, security blind spots

• Experimented with AI APIs (OpenAI, Anthropic) to build internal automation or tooling

Technologists at WorldQuant research, design, code, test and deploy firmwide platforms and tooling while working collaboratively with researchers. Our environment is relaxed yet intellectually driven. We seek people who think in code and are motivated by being around like-minded people.

The Role: We're seeking a Senior Site Reliability Engineer to join the team. You will build and operate the infrastructure and tooling behind WorldQuant's data ingestion pipelines — systems that onboard, validate, and deliver large-scale datasets to the firm's research platform. This is a 70% build / 30% operate role. You'll spend most of your time engineering automation, observability, and developer tooling, while also participating in on-call rotations and incident response for production data pipelines. You'll partner with engineering, analyst, and research teams to ensure reliability at scale — this requires excellent analytical skills, clear communication, and the ability to collaborate across teams.

What You'll Do:

Build (70%):

• Design and develop automation, monitoring, CI/CD, and reliability features for the data onboarding pipeline
• Develop and maintain internal infrastructure and services that reduce toil and improve pipeline reliability
• Build observability solutions — dashboards, alerting, log aggregation — using Grafana, the ELK stack, and Vector
• Design and implement CI/CD pipelines, test automation, and release management workflowsWrite infrastructure-as-code for provisioning, scaling, and managing platform components: Kubernetes, bare metal hosts
• Integrate and extend tools such as Redis, Celery, MySQL

Operate (30%): Keep production data pipelines healthy and respond to incidents

• Participate in on-call rotation, respond to production incidents, and drive post-mortems
• Define and track SLOs/SLIs for pipeline reliability, latency, and data freshness
• Diagnose platform performance and reliability issues, driving them to root cause
• Create and maintain runbooks for common operational scenarios
• Plan capacity and optimize resource utilization

What You'll Bring

• 8+ years of experience in SRE, DevOps, or platform engineering roles
• Linux expertise: Power user proficiency in Linux with ability to manage infrastructure, deploy services, and troubleshoot production systems
• Python proficiency: Strong scripting and automation skills; experience building CLI tools, API clients, monitoring integrations, and operational tooling in Python
• Kubernetes & containers: Deep hands-on experience with Kubernetes — deploying, scaling, debugging, and managing production workloads. Familiarity with Helm, resource management. Solid experience with Docker
• Observability: Hands-on experience with monitoring stacks — Grafana, Prometheus, ELK (Elasticsearch, Logstash, Kibana), or similar. Experience designing dashboards, alerts, and SLO-based reliability tracking
• CI/CD & infrastructure-as-code: Experience designing and maintaining CI/CD pipelines (GitLab CI, or similar), including test automation and release management. Familiarity with Ansible or similar IaC tools
• Databases: Working knowledge of relational databases (MySQL/PostgreSQL), query tuning, and operational database management
• Message queues & streaming: Experience with Kafka, Redis pub/sub, or Celery for event-driven architectures
• Networking & APIs: Understanding of network fundamentals, DNS, load balancing, and REST/gRPC APIs
• Incident management: Experience with on-call rotations, incident response, post-mortems, and runbook-driven operations
• Leadership & management: Proven track record of leading a team — mentoring engineers, driving technical roadmaps, coordinating cross-team initiatives, and managing priorities. Comfortable owning team delivery and representing the team to stakeholders
• AI-agent readiness: Openness to working alongside AI coding agents and LLM-powered tools as part of the development and operations workflow — treating AI as a force multiplier for automation, incident analysis, and toil reduction
• Nice to Have:
  • Cloud platforms: Exposure to GCP or AWS for compute, storage, and managed services
  • Data tools: Familiarity with Apache Arrow, gRPC, or columnar data formats
  • Big data platforms: Familiarity with Hadoop or Apache Spark for large-scale data processing
  • Programming languages: C/C++, Golang, Scala, JavaScript
  • Financial services or data-intensive industry background
  • SRE culture: Familiarity with Google's SRE book principles — error budgets, toil tracking, blameless post-mortems

What We Offer:

• Competitive and attractive compensation package with clear career road-map – where you feel challenged everyday
• We offer a strong culture of learning and development: training courses, library, speakers, share and learn events
• Learn from who sits next to you! Working in WQ you are surrounded by smart and talented people
• Premium Health Insurance and Employee Assistance Program
• Generous time-off policy, re-creation sabbatical leave (based on tenure), Trade Union benefits for staff and family
• Team building activities every month: Local engagement events, Employee clubs: football, ping-pong, badminton, yoga, running, PS5, movies, etc.
• Annual company trip and occasional global conferences – opportunity to travel and connect with our global teams
• Happy-hour with tea break, snacks and meals every day in the office!

#LI-QM1