Staff Operations Engineer

Why Mozilla?
Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering brands like Firefox, the privacy-minded web browser, and Pocket, a service for keeping up with the best content online. Now, with more than 225 million people around the world using our products each month, we’re shaping the next 25 years of technology. Our work focuses on diverse areas including AI, social media, security and more. And we’re doing this while never losing our focus on our core mission – to make the internet better for everyone. 
The Mozilla Corporation is wholly owned by the non-profit 501(c) Mozilla Foundation. This means we aren’t beholden to any shareholders — only to our mission. Along with 60,000+ volunteer contributors and collaborators all over the world, Mozillians design, build and distribute open-source software that enables people to enjoy the internet on their terms. 

The Role:

Mozilla is seeking a Staff Operations Engineer who will be responsible for maintaining and improving critical systems vital to the everyday operations of the enterprise! The person in this role will succeed in contributing to others’ success and seeking opportunities to collaborate for the collective benefit. Expectations of work for this position will vary from performing a task to being more involved by mentoring skills. This will be someone who enjoys working with a wide range of technologies, solutions, and experiences, passionately solutions to the immediate needs of the day while keeping an eye on the bigger picture.

What you’ll do:

• Be responsible for a comprehensive Identity Access Management (IAM) system which includes:
• Manage an Auth0 (Okta CIC) IdP Platform
• Support team members with integrations of various third-party OIDC/SAML connections
• Coordinate deployment, configuration, and lifecycle management of various resources and services in GCP and AWS
• Handle issuance of SSL/TLS certificates
• Administrate DNS and IPAM
• Be responsible for backup processes and disaster recovery strategies
• Contribute to all aspects of a project, including but not limited to leading, planning, testing, implementation, monitoring, and maintenance
• Lead multi-functional groups to identify, evaluate, and propose solutions for business problems.
• Function with a customer service mentality, addressing their needs in perspective of the macro outcome
• Roadmap and plan opportunities for continuous improvement
• Document status, process, procedures, etc., transparently, whereas anyone else can see who/what/when/where/why/how something was/should be done
• Lead independently in a dynamic environment

What you’ll bring:

• 6+ years of:
• Experience in DevOps, SRE, or CloudOps
• Proficiency in Python and JavaScript (NodeJS) programming languages
• Proficiency in Terraform, Serverless, Cloudformation and/or other IaC tools
• Experience with cloud computing such as AWS and GCP, including GCP Functions and/or Lambda
• 3+ years experience in Identity Access Management products and frameworks such as Auth0, OIDC, SAML, OAuth 2.0, and LDAP
• Experience in the following is a bonus but not a requirement:
• Rust programming language
• Platforms such as GKE, Kubernetes, and Cloud Run
• CI/CD pipelines such as Github Actions, AWS Codebuild, GCP Cloud Build, and Jenkins
• RDS and NoSQL database schemas and administration, such as DynamoDB and MySQL
• Monitoring and logging with services such as CloudWatch, Splunk, Stackdriver
• Infoblox DNS/IPAM appliance
• LDAP server administration
• Commitment to our values:
• Welcoming differences
• Being relationship-minded
• Practicing responsible participation
• Having grit

What you’ll get:

• Generous performance-based bonus plans to all eligible employees - we share in our success as one team
• Rich medical, dental, and vision coverage
• Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute)
• Quarterly all-company wellness days where everyone takes a pause to