About PFF

PFF is a leading sports analytics company that transforms complex football data into powerful insights. Our exclusive player grades, advanced metrics, and tools fuel winning decisions for NFL and college teams, broadcasters, fantasy players, bettors, and fans alike.

PFF is searching for a seasoned DevOps Engineer to join our dynamic team. If you have experience enhancing software delivery pipelines, optimizing continuous integration/continuous delivery (CI/CD) processes, and embedding robust security practices throughout the development lifecycle, we want to hear from you. You'll play a crucial role in building, maintaining, and securing our automated systems, ensuring efficient and reliable software deployments.

Role Requirements

• CI/CD Pipeline Optimization: Design, implement, and optimize highly efficient and automated CI/CD pipelines, reducing build times, improving deployment frequency, and enhancing overall release predictability.
• DevOps Culture & Practices: Promote and implement DevOps best practices across engineering teams, fostering a culture of collaboration, shared ownership, and continuous improvement.
• Security Integration: Embed security into every stage of the CI/CD pipeline, implementing automated security testing (SAST, DAST, SCA), vulnerability scanning, and secure configuration management.
• Infrastructure as Code (IaC): Develop and maintain infrastructure as code using tools like Terraform, CloudFormation, or Pulumi to ensure repeatable, scalable, and secure environment provisioning.
• Containerization & Orchestration: Manage and secure containerized applications using Docker and orchestrators like Kubernetes, ensuring optimal performance and reliability.
• Monitoring & Alerting: Implement comprehensive monitoring, logging, and alerting solutions for CI/CD pipelines and production environments to proactively identify and resolve issues.
• Tooling & Automation: Select, implement, and manage a wide range of DevOps and security tools to automate repetitive tasks and improve efficiency.
• Troubleshooting & Support: Provide expert-level support for CI/CD issues, infrastructure problems, and security incidents, ensuring minimal disruption to development and operations.
• Collaboration & Mentorship: Work closely with development, operations, and security teams to align on strategies, share knowledge, and mentor junior engineers on DevOps and security best practices.
• Documentation: Create and maintain thorough documentation for CI/CD processes, infrastructure configurations, and security procedures.

Skills & Experience

• 5+ years of hands-on experience in DevOps, with a strong focus on CI/CD pipeline development and optimization.
• Proven experience with leading CI/CD platforms (e.g., Jenkins, GitLab CI/CD, Azure DevOps, CircleCI, GitHub Actions).
• Demonstrated expertise in integrating security into CI/CD pipelines, including experience with static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and secrets management.
• Proficiency in scripting languages such as Python, Go, Bash, or PowerShell.
• Extensive experience with Infrastructure as Code (IaC) tools like Terraform or CloudFormation.
• Strong understanding of cloud platforms (AWS, Azure, or GCP) and their native services.
• Solid experience with containerization technologies (Docker) and orchestration platforms (Kubernetes).
• Familiarity with configuration management tools (Ansible, Chef, Puppet) is a plus.
• Knowledge of networking, databases, and operating systems (Linux/Windows).
• Excellent problem-solving skills and the ability to diagnose and resolve complex technical issues.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with diverse teams.
• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Nice to Have

• Relevant certifications (e.g., AWS Certified DevOps Engineer, Azure DevOps Engineer Expert, Kubernetes certifications, security certifications like CompTIA Security+ or CISSP).
• Experience with specific security tools or frameworks (e.g., OWASP Top 10, NIST).
• Active participation in the open-source community or security conferences.