About the Role

iCapital is looking to hire a DevOps Database Engineer to join the Platform Infrastructure team. This role is responsible for owning the performance, reliability, security, and operation of the company’s SQL and NoSQL database platforms.  The role operates within a database team who partners with application engineering, platform, and security teams to ensure databases are scalable, resilient, secure, and observable across all environments.

Responsibilities

• Own end to end performance of SQL and NoSQL databases across environments, including query optimization, indexing strategies, execution plan analysis, and tuning of database runtime parameters (i.e. PostgreSQL query plans, MongoDB indexes, DynamoDB access patterns).
• Prevent performance regressions proactively through representative load testing, performance analysis tooling, and CI or CD validation gates.
• Partner with application teams on schema design, data modeling, and workload driven performance improvements, including relational schemas, document models, and NoSQL access patterns.
• Design, operate, and harden production grade SQL, NoSQL, and document database systems with strong replication, failover, backup or restore, and security controls.
• Define, implement, and validate backup and disaster recovery strategies, including routine restore testing and compliance with RPO and RTO objectives.
• Establish SLIs and SLOs for database health, including latency, error rates, contention, replication lag, storage growth, and cache efficiency across SQL and NoSQL databases.
• Deliver actionable dashboards and alerts and maintain operational runbooks alongside up to date documentation.
• Lead or participate in production incident response and post incident reviews related to database platforms.
• Enforce database security best practices in partnership with InfoSec, including least privilege access, RBAC, auditing, encryption, secure secret handling, access reviews, and secure service to database authentication across SQL and NoSQL data stores.
• Codify database infrastructure and operations using Infrastructure as Code such as Terraform and CI or CD pipelines.
• Standardize baseline configurations, schema migration practices, and operational guardrails across relational, document, and NoSQL databases.

Qualifications

• Hands‑on experience operating production‑scale SQL and NoSQL databases, with strong troubleshooting skills under pressure
• Experience with managed cloud database services, including SQL and NoSQL databases (i.e. AWS RDS and Aurora PostgreSQL, MongoDB Atlas, DocumentDB, DynamoDB)
• Deep expertise across the following areas like performance tuning, indexing, query optimization, vacuum/auto vacuum, bloat management, data modeling, backup/restore, capacity planning, scalability design, and cost and performance tradeoffs
• Experience with observability, alerting, and operational metrics for data platforms
• Automation‑first mindset with hands‑on experience in Infrastructure as Code, Gitlab CI/CD pipelines, and repeatable operational runbooks
• Experience with IAM‑based access controls, KMS and encryption, secrets management, and compliance‑driven governance controls
• Proven experience developing and maintaining Terraform modules
• Strong Linux fundamentals and scripting experience such as Bash or Python
• Experience with Docker and Kubernetes for database‑adjacent workloads

Benefits

The base salary range for this role is $110,000 to $135,000 depending on level.  iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.

For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us  Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/

iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

THE ROLE

As a Security Operations Engineer in the Global Information Security Office (GISO), you will lead the mission to reduce our global attack surface across cloud, endpoint, and SaaS environments. You will report to the Senior Security Operations Manager and work closely with Cloud Platform, Network Engineering, and DevOps teams to connect Zero Trust connectivity and vulnerability management into a coherent program. This role differentiates itself by moving beyond simple task execution to architecting automated, risk-based outcomes that enable the business to scale safely while protecting our most critical assets.

WHAT YOU’LL DO

• Own the Vulnerability & Asset Lifecycle: Drive risk-based remediation across cloud, container, and endpoint environments. You will shift the needle from volume-based reporting to exploitability-led prioritization (EPSS), utilizing asset intelligence to ensure remediation meets SLAs that tangibly reduce organizational risk.
• Engineer Zero Trust & Connectivity: Lead the operational excellence of Zscaler (ZIA/ZPA). You will manage complex SSL/TLS inspection strategies and policy enforcement to provide seamless, secure access while maintaining deep visibility into encrypted traffic flows.
• Eliminate Credential & Secret Risk: Act as the primary architect for secrets detection within CI/CD pipelines. You will partner with DevOps to automate the identification and remediation of exposed credentials, moving security "left" from code to cloud.
• Architect Detection, Deception, & Automation: Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to turn raw security data into high-fidelity alerts.
• Validate & Simulate Defenses: Execute targeted adversary simulations and controls validation (e.g., Atomic Red Team) to verify that detections perform as expected, providing risk-rated findings to technical leaders.
• Translate Risk for Stakeholders: Serve as the technical authority who can pivot from deep-packet inspection troubleshooting to delivering "Fix Impact Reports" for executive leadership, quantifying how remediation efforts have eliminated critical threats.

WHAT YOU BRING

• Security Engineering & Vulnerability Mastery: You possess deep experience in security operations and vulnerability management within enterprise environments, including hands-on experience with asset discovery and secrets detection tools such as runZero, TruffleHog, or GitLeaks.
• Zero Trust & Cloud Specialization: You have technical depth in configuring and operating Zero Trust platforms—specifically Zscaler ZIA/ZPA (including SSL inspection design and policy tuning)—and experience securing major cloud providers like AWS, GCP, or Azure.
• Analytical Automation & DevSecOps: You are proficient in SIEM detection engineering (Splunk) and scripting (Python, PowerShell, or Bash), with a proven ability to integrate secrets scanning and automated remediation workflows directly into CI/CD pipelines.
• Offensive Security & Strategic Communication: You bring practical experience with threat emulation and deception technologies mapped to MITRE ATT&CK, coupled with the ability to partner with engineering teams to prioritize remediation and translate technical risk into business-relevant language.

We are primarily an in-office environment. You will be expected to work from our Santa Clara, CA or Lehi, UT office in compliance with company policies, unless on approved PTO, work travel, or other leave.

What You’ll Do 

As a Staff Cloud Engineer, you will be responsible for managing and optimizing our AWS infrastructure, ensuring high availability, security, and performance. Your responsibilities will encompass managing Virtual Private Clouds (VPCs), handling infrastructure components such as Route53, CDN, Firewall, WAF, load balancers, etc. You will work to Write and maintain IaC and automation systems. You will be instrumental in building and implementing Disaster Recovery (DR) and resiliency automation strategies across Availability Zones (AZs).      

This role reports to the Senior Manager, Cloud Engineering. 

You will: 

AWS Infrastructure Management: 

• Operate and optimize AWS Virtual Private Clouds (VPCs), Route53, Content Delivery Networks (CDNs), load balancers, and EC2 instances. 
• Ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements. 
• Monitor and troubleshoot infrastructure issues, proactively identifying and resolving potential bottlenecks or vulnerabilities. 

Disaster Recovery and Resiliency: 

• Design and implement robust disaster recovery and resiliency automation solutions spanning across AWS Availability Zones. 
• Conduct regular testing and validation of the disaster recovery plan to ensure its effectiveness and reliability. 
• Collaborate with cross-functional teams to identify and mitigate risks, ensuring business continuity in the event of a disaster. 

Incident Response: 

• Collaborate with the team to provide operational support during incidents, utilizing your deep understanding of AWS infrastructure. 
• Participate in incident response activities, including troubleshooting, root cause analysis, and implementing corrective actions. 
• Contribute to the development and improvement of incident response processes and procedures. 

Infrastructure Monitoring: 

• Implement and maintain effective monitoring solutions, including log management, metrics, collection, and alerting 
• Analyze monitoring data to identify performance trends, capacity needs, and potential areas for optimization 
• Use Observability best practices with AWS CloudWatch and DataDog 

Infrastructure Optimization: 

• Continuously evaluate and optimize the AWS infrastructure to improve performance, scalability, and cost efficiency. 
• Implement automation and orchestration tools to streamline infrastructure provisioning, configuration, and management processes. 
• Stay updated with the latest AWS services, features, and best practices, incorporating them into the infrastructure architecture as appropriate. 

Documentation and Collaboration: 

• Maintain accurate and up-to-date documentation of the infrastructure architecture, configurations, and operational procedures. 
• Collaborate with cross-functional teams, including developers, system administrators, and security teams, to ensure effective communication and alignment of infrastructure requirements. 

Infrastructure Automation and DevOps: 

• Develop and maintain infrastructure-as-code (IaC) using tools like Terraform or CloudFormation. 
• Implement and enhance CI/CD pipelines for efficient and automated application deployments. Experience with Harness, ADO Pipelines, or GitHub Actions. 
• Drive the adoption of DevOps practices, including configuration management, continuous integration, and automated testing.  
• Deep knowledge and proficiency in automation scripting best practices using tools like Python, and/or PowerShell   

What You’ll Need to be Successful 

• Bachelor’s degree in computer science, Engineering, or a related field, or equivalent practical experience.  
• 10+ years with hands-on experience in AWS. 
• AWS Certification required. 
• Advanced AWS Certifications are a plus.  
• Ability to independently deliver features following story descriptions and acceptance criteria.  
• Proficiency in engaging in technical discussions with senior engineers and architects, requiring minimal supervision for individual tasks.  
• Proficiency in automation tools such as Terraform, GitHub Actions; and scripting in Python, Bash or PowerShell. 
• Ability to offer guidance to other Cloud Engineers and work collaboratively within the team. 

What You’ll Love About NetDocuments  

• The People!  
• 90% healthcare premiums company covered  
• HSA company contribution  
• 401K match at 4%  
• Flexible PTO (typically 3 to 4 weeks a year)  
• 10 paid holidays  
• Monthly contributions for life activities & wellness  
• Access to LinkedIn learning with monthly dedicated time to explore 

Compensation Transparency 

The compensation range for this position is: $160,000 - $180,000

The posted cash compensation for this position includes on target earnings. Some roles may qualify for overtime pay. Individual compensation packages are determined based on various factors specific to each candidate, such as career level, skills, experience, geographic location, qualifications, and other job-related considerations. 

Job ID #7190
JOB TITLE: Sr. DevOps Engineer I
LOCATION: 3300 N. Triumph Blvd., Suite 800, Lehi, UT 84043
(With Telecommuting Benefits)

RESPONSIBILITIES:
Automate reproducible infrastructure to maintain predictably and security. Support infrastructure for
both production and development systems. Provide Continuous Integration and Deployment
Infrastructure, utilizing Git, and CI tools like Github Actions, Jenkins to maintain continuous builds &
deployments. Ability to maintain hundreds of servers through predictable and repeatable automation
with provisioning and configuration management tools like SaltStack, Terraform, Packer. Strong
knowledge in Linux/Unix administration. Maintain enterprise grade backups, well tested restore and
understanding of data encryption. Work with networking tools like DNS, NAT, Internet Gateways, stateless
applications to maintain an effective microservices architecture. Work with RESTful architecture design
and HTTP protocol. Be able to respond and troubleshoot Production outages 24/7 for a global SaaS
platform. Manage NOC responsibilities and delegate and communicate with teams to reduce MTTR.
Automate 24/7 monitors and checks to provide real-time insight into Production systems. Be proficient in
load balancers, microservices architecture, and designing and maintaining highly available systems.
Automate disaster recovery systems. Manage and identify cost-optimization managing FinOps. Develop
new ways of optimizing recyclable and scalable infrastructure including but not limited to containers,
Kubernetes, serverless technologies. Innovate and improve infrastructure and automation as the DevOps
space continues to evolve. Display creativity in finding ways to increase security while maintaining agility.
Lead in innovation and new and relevant technologies help the business continue to scale. Collaborate in
making system-wide architecture improvements with system architects. Work with Saltstack,
GlusterFS/FsX, AWS, ELK or other centralized logging, Load-Balancers: HAProxy or f5, Bash / Python 2.7+,
Docker, MongoDB & SQL, NewRelic.

JOB REQUIREMENTS:
Minimum Education: Bachelor’s Degree in Computer Science, Mechanical Engineering or related field.

Minimum Experience: 5 years of experience in troubleshooting modern container and networking
technologies (Docker, Kubernetes, HAProxy, ELB); monitoring performance of entire networking stack,
using distribute tracing, profile and other networking tools; profiling tools for measuring CPU, Memory,
I/O, Disk, and process threads dumps; managing and integrating and automating for alerting and
escalation (PagerDuty, Teams, Slack); and monitoring RESTful microservices architecture design basic
HTTP protocols.

Apply online at Careers Listing | Avetta. Must include job ID #7190 on the resume.

#LI-DNI