IT / DevOps Engineer

We are hiring an IT & DevOps Engineer to be the person our Austin team and our globally distributed colleagues rely on for IT and infrastructure, and to build the automation that keeps the same work from coming back around. Most of your time goes to running Enthought's internal systems and the identity and access operations behind our customer project work. You are the primary US-hours point of contact when self-service and first-line support cannot resolve something. The rest of your time goes to internal DevOps at your manager's direction, building the shared infrastructure and tooling that consulting project teams use to provision and run their own project environments, with customer-facing deployment work as assignments require. Our IT and DevOps functions are deliberately blended: the same tooling, automation, and access models serve both, and you will work across the two. The work is hands-on, and the function is still taking shape, so the scope grows with what you make possible.

• Own the day-to-day operation of Enthought's internal infrastructure and IT systems, applying deep knowledge of Linux, cloud infrastructure, and identity and access design to translate what our engineers and consultants need into systems that stay available, stay secure, and stay easy to work in.
• Serve as the primary US-hours point of contact for IT and infrastructure requests that self-service and first-line support cannot resolve, so colleagues get unblocked quickly.
• Run identity and access operations, including entitlement provisioning, onboarding, and offboarding across GitHub, JumpCloud, Keycloak, Quay, AWS, and Google Workspace, and verify that every departure closes out cleanly in all of them.
• Operate and maintain infrastructure across AWS, containers, and virtualization, covering monitoring, patching, backup, and recovery.
• Build and maintain the shared infrastructure-as-code modules, project scaffolding, and CI/CD patterns that consulting project teams use to provision and operate their own project environments. Review their infrastructure code, unblock them, and improve the shared tooling when it does not meet their needs.
• Diagnose and resolve failures in the company's automation and integrations, and take ownership of integration reliability, including credential and service-account hygiene so that no automation depends on an individual's personal account.
• Work agent-first, using AI tools as your default way to take on recurring operational work, and document what you build so that others can run and maintain it.
• Manage endpoint and hardware lifecycle, asset tracking, and software licensing for the Austin office, and keep improving self-service so that routine requests resolve without engineering time.
• Implement and operate the security standards and access architecture set by our InfoSec lead: secrets management, least-privilege configuration, container and runtime hardening, and infrastructure-as-code review. Our security work is practical and hands-on rather than compliance-led.
• Evaluate software, libraries, and tooling against license, privacy, and vulnerability criteria, and give the approver a clear recommendation.
• Conduct periodic access reviews and audits, remediate what they turn up, and respond hands-on to incidents through investigation, containment, and remediation. Security decisions that amount to accepting risk get escalated rather than made alone.
• Take on customer-facing deployment, infrastructure, and support work as assigned, coordinating with our InfoSec lead on Japan-based engagements.
• Monitor and help optimize cloud spend across the infrastructure in your care.