DevOps Engineer

BBR Partners is a premiere, boutique wealth management firm providing customized investment strategies and bespoke advice to high-net-worth individuals and families. The firm was founded in early 2000 and for over 25 years, we have nurtured our culture with talented people from diverse backgrounds who care about each other, our clients, and our collective communities. In our quest for continuous improvement, we strive to develop not only world class talent but world class humans!

Job Description:

BBR partners is seeking a DevOps Engineer, to play an integral role as a member of its IT department, working closely with Software Development \& Data Engineering teams. This person is responsible for designing, implementing, and managing the systems, tools, and automation that support continuous integration, continuous delivery (CI/CD), and scalable infrastructure. We are looking for a highly motivated self-starter with a strong work ethic who enjoys contributing to a small-firm environment.

This is a full-time position that requires a minimum of 8 years of experience and the ability to work on premises from our New York City headquarters three days per week.

Responsibilities:

Cloud Infrastructure \& Automation

• Design, build, and maintain secure, scalable cloud environments (preferably Azure) using Infrastructure as Code (Terraform).

• Build and maintain standardized, hardened machine images using HashiCorp Packer to support immutable infrastructure, security baselines, and rapid recovery

• Implement network segmentation, private endpoints, and secrets management (e.g., Azure Key Vault, AWS Secrets Manager).

CI/CD Engineering

• Own architecture and standards for CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI/CD, Jenkins/Octopus) with:

Automated testing and quality gates

Security scanning (SAST, DAST, dependency scanning)

Artifact management and controlled deployment strategies.

• Enable development teams through reusable templates, modules, and golden pipelines.

• Own and enforce version control best practices across application code, infrastructure-as-code, and CI/CD pipelines, including branching strategies, peer review, and controlled releases.

• Automate change management controls through CI/CD workflows, approvals, and versioned deployments to support audit and regulatory requirements

Containerization \& Orchestration

• Build and optimize containerized workloads (e.g., Docker, Kubernetes) including GitOps and service mesh integrations.

Security, Compliance \& Governance

• Embed security-by-design principles into all layers of the platform.

• Implement guardrails, policy-as-code, and automated evidence collection aligned with SEC expectations and NIST/ISO frameworks.

Observability \& Reliability

• Deploy and maintain observability stacks (metrics, logs, traces) using tools like Datadog and/or Logic Monitor.

• Define SLOs, SLIs, and error budgets; lead incident response and postmortems.

Data Platform \& Integrations

• Own platform infrastructure for data pipelines (Airflow, dbt), support the enforcement of data quality and lineage, and protection of PII through encryption and masking.

• Support secure integrations with custodians, trading systems, CRMs, market data providers, and internal APIs.

Developer Experience \& Enablement

• Enable engineering teams to self-service with platform tooling, best practices, and documentation (confluence).

• Promote cloud-native architecture, reliable delivery patterns, and cost-conscious design.

Ideal Qualifications:

Hands on experience with cloud platforms (Azure preferred, AWS/GCP acceptable).

Strong proficiency with Infrastructure as Code, especially Terraform.

Experience building and maintaining CI/CD pipelines

Strong knowledge of Linux/Windows systems and scripting skills.

Experience with containers and orchestration platforms.

Experience with configuration management tools (Ansible, Puppet, Chef).

Security mindset: key management, secrets management, compliance.

Knowledge of SDLC and Agile methodologies.

Understanding of networking fundamentals (DNS, load balancing, firewalls).

Familiarity with site reliability engineering (SRE) practices.

An undergraduate degree in Information Technology or a related field with a strong academic track record is preferred

Must have strong communication skills (written and verbal) and critical thinking skills

Must be successful working in a team-based environment

Must be highly motivated, proactive, ethical, and professional

Solid organizational skills including attention to detail and multi-tasking skills

Experience driving DevOps adoption in organizations with established IT operations.

Demonstrated ability to influence stakeholders and drive cultural change.

Financial Services experiences a plus

What We Offer:

Competitive base salary and incentive compensation.

Company subsidized medical/Rx, dental and vision insurance for employee, partner, and dependents.

401K plan, Life insurance, and short \& long-term disability coverage.

One Medical membership (covered for employee and dependents), Employee assistance program (EAP), Gym reimbursement and other wellness offerings.

Pre-tax transit and parking programs, Health Savings Account (HSA) and flexible spending programs for medical and dependent care.

Personalized development and career growth opportunities.

Volunteerism opportunities and matching gift program.

Flexible time off, paid parental leave, and Sabbatical with company tenure.

Hybrid remote work environment, "Work from Anywhere" weeks, and business casual dress.

New office space with a variety of perks and amenities including catered lunches and stocked pantry.

Additional Information:

Base salary for this position will be determined during the interview process and will vary based on multiple reasons, including but not limited to prior experience, relevant expertise, current business needs, and market factors. The expected base salary for the role will generally be between $150,000 and $200,000 per year at the commencement of employment, but the final salary offered may be outside this range based on these reasons and individual circumstances. Additionally, base salary is only part of the total compensation package, which, depending on the position, may also include discretionary bonuses, alternative incentive packages and Company-sponsored benefit programs. This position is at-will, and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.