About the Role

iCapital is looking to hire a DevOps Database Engineer to join the Platform Infrastructure team. This role is responsible for owning the performance, reliability, security, and operation of the company’s SQL and NoSQL database platforms.  The role operates within a database team who partners with application engineering, platform, and security teams to ensure databases are scalable, resilient, secure, and observable across all environments.

Responsibilities

• Own end to end performance of SQL and NoSQL databases across environments, including query optimization, indexing strategies, execution plan analysis, and tuning of database runtime parameters (i.e. PostgreSQL query plans, MongoDB indexes, DynamoDB access patterns).
• Prevent performance regressions proactively through representative load testing, performance analysis tooling, and CI or CD validation gates.
• Partner with application teams on schema design, data modeling, and workload driven performance improvements, including relational schemas, document models, and NoSQL access patterns.
• Design, operate, and harden production grade SQL, NoSQL, and document database systems with strong replication, failover, backup or restore, and security controls.
• Define, implement, and validate backup and disaster recovery strategies, including routine restore testing and compliance with RPO and RTO objectives.
• Establish SLIs and SLOs for database health, including latency, error rates, contention, replication lag, storage growth, and cache efficiency across SQL and NoSQL databases.
• Deliver actionable dashboards and alerts and maintain operational runbooks alongside up to date documentation.
• Lead or participate in production incident response and post incident reviews related to database platforms.
• Enforce database security best practices in partnership with InfoSec, including least privilege access, RBAC, auditing, encryption, secure secret handling, access reviews, and secure service to database authentication across SQL and NoSQL data stores.
• Codify database infrastructure and operations using Infrastructure as Code such as Terraform and CI or CD pipelines.
• Standardize baseline configurations, schema migration practices, and operational guardrails across relational, document, and NoSQL databases.

Qualifications

• Hands‑on experience operating production‑scale SQL and NoSQL databases, with strong troubleshooting skills under pressure
• Experience with managed cloud database services, including SQL and NoSQL databases (i.e. AWS RDS and Aurora PostgreSQL, MongoDB Atlas, DocumentDB, DynamoDB)
• Deep expertise across the following areas like performance tuning, indexing, query optimization, vacuum/auto vacuum, bloat management, data modeling, backup/restore, capacity planning, scalability design, and cost and performance tradeoffs
• Experience with observability, alerting, and operational metrics for data platforms
• Automation‑first mindset with hands‑on experience in Infrastructure as Code, Gitlab CI/CD pipelines, and repeatable operational runbooks
• Experience with IAM‑based access controls, KMS and encryption, secrets management, and compliance‑driven governance controls
• Proven experience developing and maintaining Terraform modules
• Strong Linux fundamentals and scripting experience such as Bash or Python
• Experience with Docker and Kubernetes for database‑adjacent workloads

Benefits

The base salary range for this role is $110,000 to $135,000 depending on level.  iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.

For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us  Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/

iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

THE ROLE

As a Security Operations Engineer in the Global Information Security Office (GISO), you will lead the mission to reduce our global attack surface across cloud, endpoint, and SaaS environments. You will report to the Senior Security Operations Manager and work closely with Cloud Platform, Network Engineering, and DevOps teams to connect Zero Trust connectivity and vulnerability management into a coherent program. This role differentiates itself by moving beyond simple task execution to architecting automated, risk-based outcomes that enable the business to scale safely while protecting our most critical assets.

WHAT YOU’LL DO

• Own the Vulnerability & Asset Lifecycle: Drive risk-based remediation across cloud, container, and endpoint environments. You will shift the needle from volume-based reporting to exploitability-led prioritization (EPSS), utilizing asset intelligence to ensure remediation meets SLAs that tangibly reduce organizational risk.
• Engineer Zero Trust & Connectivity: Lead the operational excellence of Zscaler (ZIA/ZPA). You will manage complex SSL/TLS inspection strategies and policy enforcement to provide seamless, secure access while maintaining deep visibility into encrypted traffic flows.
• Eliminate Credential & Secret Risk: Act as the primary architect for secrets detection within CI/CD pipelines. You will partner with DevOps to automate the identification and remediation of exposed credentials, moving security "left" from code to cloud.
• Architect Detection, Deception, & Automation: Build advanced detection queries in Splunk and deploy enterprise-wide deception strategies aligned with the MITRE ATT&CK framework. You will automate manual triage via Python or SOAR workflows to turn raw security data into high-fidelity alerts.
• Validate & Simulate Defenses: Execute targeted adversary simulations and controls validation (e.g., Atomic Red Team) to verify that detections perform as expected, providing risk-rated findings to technical leaders.
• Translate Risk for Stakeholders: Serve as the technical authority who can pivot from deep-packet inspection troubleshooting to delivering "Fix Impact Reports" for executive leadership, quantifying how remediation efforts have eliminated critical threats.

WHAT YOU BRING

• Security Engineering & Vulnerability Mastery: You possess deep experience in security operations and vulnerability management within enterprise environments, including hands-on experience with asset discovery and secrets detection tools such as runZero, TruffleHog, or GitLeaks.
• Zero Trust & Cloud Specialization: You have technical depth in configuring and operating Zero Trust platforms—specifically Zscaler ZIA/ZPA (including SSL inspection design and policy tuning)—and experience securing major cloud providers like AWS, GCP, or Azure.
• Analytical Automation & DevSecOps: You are proficient in SIEM detection engineering (Splunk) and scripting (Python, PowerShell, or Bash), with a proven ability to integrate secrets scanning and automated remediation workflows directly into CI/CD pipelines.
• Offensive Security & Strategic Communication: You bring practical experience with threat emulation and deception technologies mapped to MITRE ATT&CK, coupled with the ability to partner with engineering teams to prioritize remediation and translate technical risk into business-relevant language.

We are primarily an in-office environment. You will be expected to work from our Santa Clara, CA or Lehi, UT office in compliance with company policies, unless on approved PTO, work travel, or other leave.

Who We're Looking For - Systems Administrator

We are seeking an experienced and proactive Systems Administrator to join our IT team. The successful candidate will be responsible for administering a variety of systems and technologies essential to the organization’s operations. This role involves managing Linux servers, overseeing configuration management using Chef, and administering mobile device management (MDM) solutions such as Microsoft Endpoint Manager/Intune and Kandji. The candidate will also manage access to MySQL databases, handle regular patching of Linux servers, and maintain security through tools like Okta and Netskope. Additionally, the role includes participating in security audits like PCI and SOC2. Experience with cloud infrastructure, especially AWS, is a plus.

The Impact You Will Make 

• Identity and Access Management (Okta): Maintain and administer Okta for user identity management, authentication, and access control.
• Linux Server Administration & Patching: Manage and monitor Linux server environments, ensuring regular patching to maintain security and system integrity.
• Configuration Management (Chef): Manage server configuration using Chef.
• Mobile Device Management (MDM): Oversee MDM platforms like Microsoft Endpoint Manager/Intune and Kandji to deploy and manage corporate devices, ensuring security compliance.
• Access Management: Manage access to various higher level systems including RDS Mysql databases.
• Network Security (Netskope): Administer and monitor Netskope to secure cloud-based applications and protect data from security threats.
• Google Workspace Administration: Administer Google Workspace, providing secure and efficient access to applications and data for end-users.
• Cloud Infrastructure (AWS - a plus): Assist in managing AWS cloud services, including networking, storage, and compute resources.
• Audit Participation (PCI, SOC2): Work closely with security and compliance teams during PCI and SOC2 audits to ensure systems meet regulatory and security standards.
• Documentation & Compliance: Maintain thorough documentation of system configurations, patching schedules, and access management procedures. Ensure compliance with security and audit requirements.

What You Bring 

• Minimum of 3-5 years of experience in a related field
• Bachelor's degree in Computer Science, Information Technology, or equivalent experience
• Hands-on experience in systems administration with Linux servers. 
• Proven experience with configuration management tools (Chef or similar).
• Experience managing MDM solutions (Microsoft Endpoint Manager/Intune, Kandji, or similar).
• Familiarity with network security tools, preferably Netskope and Meraki.
• Experience administering identity management platforms like Okta.
• Knowledge of Google Workspace administration.
• Ability to automate tasks via scripts (ie Bash, Python, PowerShell, PHP)
• Cloud infrastructure experience (AWS preferred) is a plus.
• Excellent troubleshooting and problem-solving skills.
• Solid understanding of security best practices.
• Good communication skills (both written and verbal)
• Technical proficiency in operating systems such as Windows, macOS and Linux
• Ability to manage multiple systems and services concurrently.

Perks That Set Us Apart

• 🩺 Healthcare: We offer low-cost, competitive health coverage (domestic partners included!) with employer-paid counseling services.
• 💰 Invest in the Future: Enjoy 401(k) matching after just two months of employment, with employer matching starting at ~3%.
• 🧘‍♀️ Lifestyle Spending Stipends: Access an employer-paid spending account for physical, financial, and emotional wellbeing expenses.
• 🏝️ Flexible Time Off: We offer competitive time-off balances that accrue weekly, just like your paycheck. (Yes, we’re paid weekly too!)
• 👶🏻 Parental Leave: We provide 2 weeks of paid parental leave during the first year and up to 9 weeks after one year of employment.
• ✈️ Generous Paid Holidays: Celebrate cultural diversity with additional flex holidays in addition to our company paid holidays.
• 🧑‍💻 Flex Schedule: This is a hybrid role. Expect in-office collaboration on Tuesdays and Thursdays, with Wednesdays designated as a flex day based on team and manager needs. Remaining workdays are remote, depending on role requirements.
• 🛟 Comprehensive Life Insurance: Ensure peace of mind with coverage that extends beyond the workplace with employer paid life insurance (including coverage for dependents and spouses).
• 🤝 Employee Resource Groups (ERGs): Join us in fostering connections, celebrating diversity, and providing a supportive community for all.

At Clearlink, we go beyond the basics, ensuring your experience with us is not just professionally fulfilling but personally enriching too.

Interviewing at Clearlink

We know interviews can be stressful. Here are some stages you can expect from a typical interview with Clearlink. 

• Once your application is submitted, we will review it and be in touch
• 30-min phone call with the Recruiting Team
• 30-min - 1 hour interview with the Hiring Manager
• 30-min - 1 hour interview with a Clearlink Panel

Some interview processes can vary, depending on the role. Your recruiter will give you a role-specific interview process during your first phone call.

#LI-Hybrid
#LI-AC3

What You’ll Do 

As a Staff Cloud Engineer, you will be responsible for managing and optimizing our AWS infrastructure, ensuring high availability, security, and performance. Your responsibilities will encompass managing Virtual Private Clouds (VPCs), handling infrastructure components such as Route53, CDN, Firewall, WAF, load balancers, etc. You will work to Write and maintain IaC and automation systems. You will be instrumental in building and implementing Disaster Recovery (DR) and resiliency automation strategies across Availability Zones (AZs).      

This role reports to the Senior Manager, Cloud Engineering. 

You will: 

AWS Infrastructure Management: 

• Operate and optimize AWS Virtual Private Clouds (VPCs), Route53, Content Delivery Networks (CDNs), load balancers, and EC2 instances. 
• Ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements. 
• Monitor and troubleshoot infrastructure issues, proactively identifying and resolving potential bottlenecks or vulnerabilities. 

Disaster Recovery and Resiliency: 

• Design and implement robust disaster recovery and resiliency automation solutions spanning across AWS Availability Zones. 
• Conduct regular testing and validation of the disaster recovery plan to ensure its effectiveness and reliability. 
• Collaborate with cross-functional teams to identify and mitigate risks, ensuring business continuity in the event of a disaster. 

Incident Response: 

• Collaborate with the team to provide operational support during incidents, utilizing your deep understanding of AWS infrastructure. 
• Participate in incident response activities, including troubleshooting, root cause analysis, and implementing corrective actions. 
• Contribute to the development and improvement of incident response processes and procedures. 

Infrastructure Monitoring: 

• Implement and maintain effective monitoring solutions, including log management, metrics, collection, and alerting 
• Analyze monitoring data to identify performance trends, capacity needs, and potential areas for optimization 
• Use Observability best practices with AWS CloudWatch and DataDog 

Infrastructure Optimization: 

• Continuously evaluate and optimize the AWS infrastructure to improve performance, scalability, and cost efficiency. 
• Implement automation and orchestration tools to streamline infrastructure provisioning, configuration, and management processes. 
• Stay updated with the latest AWS services, features, and best practices, incorporating them into the infrastructure architecture as appropriate. 

Documentation and Collaboration: 

• Maintain accurate and up-to-date documentation of the infrastructure architecture, configurations, and operational procedures. 
• Collaborate with cross-functional teams, including developers, system administrators, and security teams, to ensure effective communication and alignment of infrastructure requirements. 

Infrastructure Automation and DevOps: 

• Develop and maintain infrastructure-as-code (IaC) using tools like Terraform or CloudFormation. 
• Implement and enhance CI/CD pipelines for efficient and automated application deployments. Experience with Harness, ADO Pipelines, or GitHub Actions. 
• Drive the adoption of DevOps practices, including configuration management, continuous integration, and automated testing.  
• Deep knowledge and proficiency in automation scripting best practices using tools like Python, and/or PowerShell   

What You’ll Need to be Successful 

• Bachelor’s degree in computer science, Engineering, or a related field, or equivalent practical experience.  
• 10+ years with hands-on experience in AWS. 
• AWS Certification required. 
• Advanced AWS Certifications are a plus.  
• Ability to independently deliver features following story descriptions and acceptance criteria.  
• Proficiency in engaging in technical discussions with senior engineers and architects, requiring minimal supervision for individual tasks.  
• Proficiency in automation tools such as Terraform, GitHub Actions; and scripting in Python, Bash or PowerShell. 
• Ability to offer guidance to other Cloud Engineers and work collaboratively within the team. 

What You’ll Love About NetDocuments  

• The People!  
• 90% healthcare premiums company covered  
• HSA company contribution  
• 401K match at 4%  
• Flexible PTO (typically 3 to 4 weeks a year)  
• 10 paid holidays  
• Monthly contributions for life activities & wellness  
• Access to LinkedIn learning with monthly dedicated time to explore 

Compensation Transparency 

The compensation range for this position is: $160,000 - $180,000

The posted cash compensation for this position includes on target earnings. Some roles may qualify for overtime pay. Individual compensation packages are determined based on various factors specific to each candidate, such as career level, skills, experience, geographic location, qualifications, and other job-related considerations. 

Job ID #7190
JOB TITLE: Sr. DevOps Engineer I
LOCATION: 3300 N. Triumph Blvd., Suite 800, Lehi, UT 84043
(With Telecommuting Benefits)

RESPONSIBILITIES:
Automate reproducible infrastructure to maintain predictably and security. Support infrastructure for
both production and development systems. Provide Continuous Integration and Deployment
Infrastructure, utilizing Git, and CI tools like Github Actions, Jenkins to maintain continuous builds &
deployments. Ability to maintain hundreds of servers through predictable and repeatable automation
with provisioning and configuration management tools like SaltStack, Terraform, Packer. Strong
knowledge in Linux/Unix administration. Maintain enterprise grade backups, well tested restore and
understanding of data encryption. Work with networking tools like DNS, NAT, Internet Gateways, stateless
applications to maintain an effective microservices architecture. Work with RESTful architecture design
and HTTP protocol. Be able to respond and troubleshoot Production outages 24/7 for a global SaaS
platform. Manage NOC responsibilities and delegate and communicate with teams to reduce MTTR.
Automate 24/7 monitors and checks to provide real-time insight into Production systems. Be proficient in
load balancers, microservices architecture, and designing and maintaining highly available systems.
Automate disaster recovery systems. Manage and identify cost-optimization managing FinOps. Develop
new ways of optimizing recyclable and scalable infrastructure including but not limited to containers,
Kubernetes, serverless technologies. Innovate and improve infrastructure and automation as the DevOps
space continues to evolve. Display creativity in finding ways to increase security while maintaining agility.
Lead in innovation and new and relevant technologies help the business continue to scale. Collaborate in
making system-wide architecture improvements with system architects. Work with Saltstack,
GlusterFS/FsX, AWS, ELK or other centralized logging, Load-Balancers: HAProxy or f5, Bash / Python 2.7+,
Docker, MongoDB & SQL, NewRelic.

JOB REQUIREMENTS:
Minimum Education: Bachelor’s Degree in Computer Science, Mechanical Engineering or related field.

Minimum Experience: 5 years of experience in troubleshooting modern container and networking
technologies (Docker, Kubernetes, HAProxy, ELB); monitoring performance of entire networking stack,
using distribute tracing, profile and other networking tools; profiling tools for measuring CPU, Memory,
I/O, Disk, and process threads dumps; managing and integrating and automating for alerting and
escalation (PagerDuty, Teams, Slack); and monitoring RESTful microservices architecture design basic
HTTP protocols.

Apply online at Careers Listing | Avetta. Must include job ID #7190 on the resume.

#LI-DNI