DevOps Engineer

JOB PURPOSE Enterprise Technologies is a central IT unit at Stanford University, responsible for delivering foundational computing and communication infrastructure that supports the University's academic, research, and administrative functions. We are seeking a Senior DevOps Engineer with proven expertise in API development, as well as administration and integration experience across Google Workspace, AWS, and Microsoft Azure. In this role, you will design and automate cloud infrastructure, optimize CI/CD pipelines, develop and maintain internal APIs, and manage cloud-based configurations, identity services, and security policies—leveraging scripting and API-driven automation across multi-cloud and enterprise collaboration platforms. RESPONSIBILITIES The DevOps Engineer will serve as a key member of the team, leading the design, development, planning, support, and security of Stanford’s infrastructure with a focus on Google Cloud technologies. This role is critical in optimizing software delivery pipelines, enabling collaboration across teams, and ensuring the reliability, performance, and scalability of systems running in Google Cloud. The ideal candidate will have deep experience with infrastructure automation, cloud-native tooling, and API integrations within the Google ecosystem—including GCP and Google Workspace. Strong leadership, scripting, and communication skills are essential. Key responsibilities include: CORE DUTIES: Design, implement, and maintain scalable CI/CD pipelines (e.g., GitHub Actions, Jenkins, GitLab CI). Automate infrastructure provisioning using tools like Terraform, CloudFormation, or Pulumi. Build, deploy, and manage containerized applications using Docker and orchestration platforms (Kubernetes, ECS, etc.). Develop and maintain RESTful and/or GraphQL APIs using Python, Go, or Node.js. Manage and integrate Google Workspace with internal systems, including API access, identity provisioning (via Directory API), and service automation. Monitor system health and performance using observability tools (e.g., Prometheus, Grafana, ELK, Datadog). Implement security best practices, including IAM, secrets management, and compliance enforcement. Collaborate with engineering, security, and IT teams to maintain a secure and efficient development environment. Support incident response, root cause analysis, and disaster recovery procedures. Document infrastructure, processes, and API endpoints thoroughly. Participating in 24x7 on-call support rotation. Qualifications: MINIMUM REQUIREMENTS: Education & Experience Bachelor's degree and eight years of relevant experience, or a combination of education and relevant experience. Knowledge, Skills and Abilities: Bachelor’s degree in Computer Science, Engineering, or equivalent work experience. 5+ years in DevOps, SRE, or Platform Engineering roles. Hands-on experience with public cloud platforms (AWS, Azure, or GCP—GCP preferred). Strong programming skills in one or more languages for API development (e.g., Python, Go, Node.js). Proficiency with CI/CD tools and IaC frameworks (e.g., Terraform, Ansible, CloudFormation). Experience with Docker and container orchestration tools such as Kubernetes or ECS. Demonstrated experience managing and integrating Google Workspace in enterprise environments, including APIs, security settings, and automation. Solid knowledge of Linux administration, networking, and cloud security principles. Strong troubleshooting and debugging skills across the stack. Excellent communication, documentation, and collaboration abilities. Should demonstrate a willingness to learn and adapt to new technologies and industry trends. Preferred Qualifications (Nice to Have): Experience building and maintaining internal developer platforms or shared infrastructure. Experience with API management platforms (e.g., Apigee, AWS API Gateway, Kong). Hands-on experience with Proofpoint administration, including email security configuration and policy management. Experience with Microsoft 365 administration, including Exchange Online, SharePoint, Teams, and security/compliance controls. Google Workspace Administrator or GCP-related certifications. Experience with Entra ID or other Identity Providers for SSO and federated authentication flows. The expected pay range for this position is $150,289 to $171,000 per annum. Stanford University provides pay ranges representing its good faith estimate of what the university reasonably expects to pay for a position. The pay offered to a selected candidate will be determined based on factors such as (but not limited to) the scope and responsibilities of the position, the qualifications of the selected candidate, departmental budget availability, internal equity, geographic location and external market pay for comparable jobs. At Stanford University, base pay represents only one aspect of the comprehensive rewards package. The Cardinal at Work website ( https://cardinalatwork.stanford.edu/benefits-rewards ) provides detailed information on Stanford’s extensive range of benefits and rewards offered to employees. Specifics about the rewards package for this position may be discussed during the hiring process. The job duties listed are typical examples of work performed by positions in this job classification and are not designed to contain or be interpreted as a comprehensive inventory of all duties, tasks, and responsibilities. Specific duties and responsibilities may vary depending on department or program needs without changing the general nature and scope of the job or level of responsibility. Employees may also perform other duties as assigned. Consistent with its obligations under the law, the University will provide reasonable accommodations to applicants and employees with disabilities. Applicants requiring a reasonable accommodation for any part of the application or hiring process should contact Stanford University Human Resources by submitting a contact form . Stanford is an equal employment opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.