About the role
Overview
A great infrastructure team is defined not by how fast it responds to incidents, but by how rarely incidents occur, because the team built the systems, automation, and AI-augmented operations that prevent them. The DevOps Manager, Infrastructure is the people leader and hands-on technical operator who makes that true at Origami Risk.
This manager leads the team that builds, runs, and continuously improves the cloud infrastructure that Engineering teams and clients depend on every day that spans AWS, self-hosted Windows and Active Directory, network and web-tier appliances, identity and secrets, and the automation platform that ties it all together. This is a hands-on technical leader who coaches Engineers on infrastructure engineering craft, sets a high bar for reliability and operational discipline, drives AI adoption into daily DevOps workflows, and partners with Engineering, Security, and Product so that infrastructure is a source of competitive advantage and not a constraint on what Engineering can deliver. On this team, manual work is a problem to be solved, automation is the default, and every Engineer is expected to use AI to work faster and diagnose more accurately.
Starting base pay for this role is between $145,000 and $185,000. The actual base pay is dependent upon many factors, such as transferable skills, work experience, business needs, training, location, and market demands. The base pay range is subject to change and may be modified in the future. This role will be eligible for a bonus as well as competitive medical, dental, and vision benefits, wellness reimbursement, life insurance, and a 401(k) with company match. We offer vacation and sick leave benefits (under a flexible time off policy in most states).
Responsibilities
What this team runs
This is a broad estate spanning cloud-native and traditional infrastructure, operated to one modern standard. The successful candidate is energized by that breadth, not surprised by it. The team owns:
Cloud (AWS)
the core AWS estate — compute, container platforms, networking, and the supporting services Engineering and clients depend on, provisioned as code.
Windows & Active Directory
the self-hosted Active Directory environment and Windows Server fleet, including the application servers that host the platform.
Network & Web Tier
the firewall estate and web-tier proxy and load-balancing layer that route, secure, and front application traffic.
Automation Platform
the automation and configuration-management platform that drives consistent, repeatable change across the estate.
Identity & Secrets
the shared secrets-management platform, consumed self-service by teams across Engineering.
DNS, Domains & Certificates
the DNS, domain, and certificate lifecycle that keeps services reachable and trusted.
Storage, File & Access Services
the storage, file, backup, and remote-access services that support the business.
Key responsibilities
People Leadership & Team Development
Leads, develops, and retains a team of Cloud Infrastructure Engineers building a high-performance culture defined by technical excellence, an automation mindset, and operational ownership.
Sets clear goals, role expectations, and success criteria for each engineer; conducts regular 1:1s and gives direct, constructive feedback with a visible path for growth.
Conducts structured performance reviews that recognize strong operational contributions, address delivery or quality gaps specifically, and grow both AI fluency and foundational infrastructure depth.
Identifies capability gaps across the team encompassing IaC, Windows/AD administration, networking, container orchestration, security controls, and AI-assisted operations, while building targeted hiring, upskilling, and cross-training plans.
Fosters a culture where every manual process is a temporary state, automation is the permanent solution, and AI tooling is an expected part of how each engineer works.
Supports Engineering hiring across the organization by participating in technical interviews and helping calibrate the infrastructure engineering bar.
Cloud Infrastructure Operations
Owns the operational health of the organization's AWS infrastructure setting team standards for provisioning, configuration management, environment consistency, patching cadences, capacity planning, and cost optimization across all environments.
Leads the team's infrastructure-as-code practice ensuring resources are defined, versioned, peer-reviewed, and deployed through Terraform, and that manual changes are treated as exceptions to be immediately codified.
Oversees the team's operation of the Ansible Automation Platform encompassing roles, inventory, and configurations as the primary configuration-management system across the estate.
Ensures reliable operation of the self-hosted Active Directory forests, Windows Server fleets, and Windows RDS, including Group Policy, OU structure, service-account and gMSA management, and identity hygiene.
Owns certificate, DNS, and domain lifecycle management across, ensuring renewals and changes are reliable and never a source of outages.
Ensures our Vault secrets service is operated to a high standard as a shared, self-service secrets platform for multiple teams.
Drives cloud cost efficiency as a continuous discipline, by right-sizing, reserved capacity, auto-scaling, and resource-cleanup automation that control spend as the platform scales.
Oversees core AWS services, EC2, ECS, EKS, Lambda, RDS, S3, VPC, Route 53, IAM, CloudFront, and Auto Scaling, while ensuring configurations are standardized, documented, and aligned with architectural and security standards.
Network, Firewall & Web-Tier Operations
Owns operation of the Fortinet firewall estate and NGINX Plus web tier encompassing IPS, routing, firewall policy, object management, SSL inspection, and VIP configuration that proxies traffic to NGINX that is deployed and configured through Terraform and Ansible.
Ensures the infrastructure architecture reflects network security controls, traffic-routing policies, and connectivity requirements — operating infrastructure that is reliable and secure at every layer.
Holds the team accountable for firmware and security-update discipline across firewalls, NGINX, FTP, and other network-facing systems.
Delivery Automation & Release Support
Ensures the infrastructure and automation the team owns integrate cleanly with the delivery pipeline — enabling automated provisioning and deployment workflows and holding the team accountable for the infrastructure reliability that automated releases depend on.
Partners with the Release Automation and Engineering Systems teams so that pipeline tooling has the environment provisioning, configuration, and deployment automation it needs — with appropriate access controls, standards alignment, and change tracking.
Oversees deployment automation for containerized services, Lambda functions, ECS tasks, and EKS workloads — ensuring patterns are consistent, traceable, and recoverable across environments.
Coaches Engineers to diagnose and eliminate the root causes of flaky, intermittent infrastructure failures rather than treating them as acceptable operational noise.
AI-Augmented DevOps Operations
Drives adoption of AI development tools — including Claude Code and Cursor — across the team's daily workflow, establishing norms for AI-assisted IaC authoring, automation scripting, and operational documentation.
Champions AI-assisted operations as a management discipline — integrating AI-powered log analysis, anomaly detection, runbook generation, and LLM-augmented incident analysis into workflows that reduce mean time to diagnosis.
Uses AI to accelerate the team's most demanding work — large-scale infrastructure audit and compliance analysis, drift detection, capacity planning, and intelligent alerting — and shares effective patterns with engineering lea