Site Reliability Engineer

ezTaxReturn is looking for a SRE/AWS Cloud Engineer to administer, monitor and secure our AWS infrastructure, ensuring overall system health and security. This is a fully-remote role, only open to those physically present in the US, and is a great opportunity for system admins looking to escape the back to the office trend. You’ll be working closely with our development team and DevOps engineers in a fast-paced, and regulated environment. This role requires excellent planning, documenting, and automating (via AWS CLI, and scripting languages like Python) and experience with setting up and managing cloud-hosted environments. It also requires basic knowledge working with relational databases to monitor, perform migrations (w/ AWS DMS or similar tools), or run administrative queries (grant / revoke access, setup replication etc.).

Duties and Responsibilities

Day to day

• Monitor environment health (servers, DBs, network, security)

• Optimize cybersecurity applications e.g. antivirus, spam filtering etc.

• Manage security patches/updates, including sandbox testing

• Plan and execute projects for upgrades/updates

• Plan and execute projects for security compliance

• Manage vendor relationships to select the right tools for the environment, and ensure licenses are always and up to date

Ad-hoc

• Modify servers/services to handle changes in load

• Analyze, escalate and resolve security, vulnerability threats

• Analyze, escalate and resolve alerts from server monitoring

Periodic

• Create hardened image for servers

• Plan and execute projects to install/update servers, cloud services, applications etc.

• Review configurations for enterprise services like antivirus, VPN, MFA etc.

• Manage server and email certificates

• Fix security/vulnerability issues discovered from penetration testing

• Plan and execute projects to apply best practices to servers, end users, applications, services etc.

• Plan and execute fire drills for incidents

• Assess servers, services and applications for risk/security/regulatory compliance. Conduct reviews and tests and maintain documentation for compliance with PCI-DSS v4 and NIST.

• Create maintenance schedules for updates, upgrades, security patching etc.

Skills and qualifications

• Strong written and verbal communication skills

• Planning and organization skills

• Problem-solving skills

• The ability to work under pressure in a fast-paced environment

• Ability to self-learn administration of enterprise servers and services e.g. Git, PKI, VPN, Databases, servers etc.

• An advanced understanding of Windows operating systems and enterprise services e.g. Windows 11, Windows Server 2022, Microsoft 365, Teams, AD and domain controllers, IIS etc

• An advanced understanding of Linux operating systems and enterprise services e.g. Redhat Linux, SSH etc would be an asset.

• Strong experience writing scripts (python) and IaC (Terraform and Docker)

• An advanced understanding of AWS infrastructure automation, networking, security, monitoring, alerting etc. including experience with CloudFormation, AWS CDK, Terraform or equivalent

• An advanced understanding of enterprise networking e.g. VPN, 802.1x, nACLs, security groups etc.

• An advanced understanding of enterprise services for cyber security e.g. NGAV, IDR, EDR etc.

• An understanding of security standards e.g. NIST Cybersecurity Framework, STIG etc.

• Certifications like Microsoft Certified Solutions Expert (MCSE), Red Hat Certified System Administrator, CompTIA Server+ etc

Who We Are

The ezTaxReturn team provides fast, easy, online tax preparation and e-file services for individual taxpayers in the US. Our culture is about collaboration, transparency, ownership of correction of errors, and constant learning and evolution of self, peers, and teams.