About the role
Overview
A great platform team is defined not by how many tickets it closes, but by how little friction stands between an engineer's idea and a running service, because the team built the pipelines, golden paths, and AI-augmented workflows that make delivery self-service. The DevOps Manager, Platform is the people leader and hands-on technical operator who makes that true at Origami Risk.
This manager leads the team that builds, runs, and continuously improves the developer platform and delivery automation that Engineering teams depend on to ship every day, spanning CI/CD pipelines and shared templates, service-layer Terraform, the EKS container platform and capabilities golden path, application connectivity and service data stores, environment promotion, and the AI tooling layered on top. Everything runs in AWS, on top of the landing zone the Cloud Infrastructure team owns. This is a hands-on technical leader who coaches Engineers on platform-engineering craft, sets a high bar for delivery reliability and operational discipline, drives AI adoption into daily DevOps workflows, and partners with Engineering, Release, SRE, and Cloud Infrastructure so that the path to production is a source of competitive advantage and not a constraint on what Engineering can deliver. On this team, manual work is a problem to be solved, automation is the default, and every Engineer is expected to use AI to work faster and diagnose more accurately.
Starting base pay for this role is between $145,000 and $185,000. The actual base pay is dependent upon many factors, such as transferable skills, work experience, business needs, training, location, and market demands. The base pay range is subject to change and may be modified in the future. This role will be eligible for a bonus as well as competitive medical, dental, and vision benefits, wellness reimbursement, life insurance, and a 401(k) with company match. We offer vacation and sick leave benefits (under a flexible time off policy in most states).
Responsibilities
What this team runs
This is the developer platform and delivery layer that sits on top of the AWS landing zone — the systems Engineering uses to build, ship, and operate services every day. The team owns the platform for application and service delivery, not the landing zone underneath it. The team owns:
Delivery Pipelines & Build
the CI/CD build and deploy pipelines, and the shared pipeline templates that Engineering teams across the org use to ship every day.
Service-Layer IaC
the infrastructure-as-code that defines each service's cloud resources, versioned and deployed through Terraform.
Kubernetes & Container Platform
the EKS container platform and the self-service golden path that lets a new service onboard with no bespoke infrastructure work.
Application Connectivity
the application-facing API gateways, service DNS, and certificates that make services reachable and secure.
Service Data & Configuration
the application data stores, configuration, and secrets that each service depends on.
Environment Promotion
the promotion path that moves a change safely from lower environments to production.
AI & Internal Tooling
the AI tooling across the development lifecycle that speeds service onboarding, pipeline authoring, and day-to-day delivery.
Key responsibilities
People Leadership & Team Development
Leads, develops, and retains a team of DevOps Engineers building the developer platform, cultivating a high-performance culture defined by technical excellence, an automation mindset, and operational ownership.
Sets clear goals, role expectations, and success criteria for each engineer; conducts regular 1:1s and gives direct, constructive feedback with a visible path for growth.
Conducts structured performance reviews that recognize strong delivery contributions, address quality or reliability gaps specifically, and grow both AI fluency and platform-engineering depth.
Identifies capability gaps across the team, encompassing CI/CD, service-layer Terraform, container orchestration and EKS, API and connectivity patterns, and AI-assisted operations, while building targeted hiring, upskilling, and cross-training plans.
Fosters a culture where every manual process is a temporary state, automation is the permanent solution, and AI tooling is an expected part of how each engineer works.
Supports Engineering hiring across the organization by participating in technical interviews and helping calibrate the platform-engineering bar.
Developer Platform & Delivery Operations
Owns the end-to-end path from “we are building a service” to “it deploys to production on its own pipeline”, repository scaffolding, ECR, Terraform workspace, pipeline, variable groups, secrets paths, hostname, gateway wiring, and alarms, reducing the elapsed time and ownership ambiguity in new-service onboarding.
Leads the team's service-layer infrastructure-as-code practice, ensuring IaC stacks are defined, versioned, peer-reviewed, and deployed through Terraform on S3 and DynamoDB backends, with manual changes treated as exceptions to be immediately codified.
Oversees the shared pipeline templates consumed org-wide, enforcing the additive-only change policy so new parameters carry safe defaults and template changes never break existing consumers.
Sets and enforces the naming and structural standards the delivery path depends on, ECR repositories, variable groups, Kubernetes ServiceAccounts, secret paths, and private hostnames, because they are what make onboarding repeatable.
Drives service-level cost efficiency as a continuous discipline, right-sizing service stacks, OpenSearch Serverless OCU caps, ECR lifecycle policies, and idle-stack cleanup.
Operates within the Cloud Infrastructure team's landing zone, guardrails, and shared platforms rather than owning them, keeping clean boundaries between service delivery and the estate.
Pipelines, Build & Release Support
Owns the per-service Azure DevOps build and deploy pipelines, build, test, scan, containerize, push, deploy, and the environment gates between them, as the team's highest-volume recurring duty.
Holds the team accountable for container image discipline, immutable tags and distinct hotfix tags, ECR repository definitions, and lifecycle policies, so a redeploy can never silently pull a different image.
Owns the environment promotion model, feature branch to main, one pipeline per repository gated per environment, and immutable-tag promotion with roll-forward by default, across the full environment ladder.
Builds the CI/CD pipelines the Release team runs, and trains and supports that team to operate them, how a promotion is gated, how to approve or retry a stage, how to read a failure, and when to escalate back to DevOps versus the service owner.
Coaches Engineers to diagnose and eliminate the root causes of flaky, intermittent delivery failures rather than treating them as acceptable operational noise.
Service IaC & Container Platform
Oversees the EKS platform layer, add-ons, workload identity through Pod Identity and IRSA, namespaces, NetworkPolicies, and the golden-path add-ons, and multi-environment service onboarding.
Owns the golden path, the zero-touch onboarding path for services, the shared token-gateway authorizer, and Helm support, so a new feature/capability needs no bespoke infrastructure work.
Oversees deployment automation for containerized services, Lambda functions, ECS tasks, and EKS workloads, ensuring patterns are consistent, traceable, and recoverable across environments.
Owns application connectivity, API Gateway in REST and HTTP forms and public and private, Lambda authorizers, per-service DNS records and ACM certificates inside delegated zones, and ExternalDNS, along with end-to-end debugging of gateway-path failures.
Provisions the service data stores that belong to a stack, application S3, SSM configuration, Secrets Manager entries, and Au