Principal DevOps Engineer

About Morningstar

Morningstar unites problem solvers with a clear goal: helping investors achieve their financial objectives. As a leading investment research and data company, we stand out by how we apply our insights to serve a broad range of users. Our independent investment research, powered by cutting-edge technology and design, provides tailored solutions that meet users' needs. With a strong foundation in data and innovation, we deliver comprehensive services to investors worldwide — empowering better decisions for individuals and those managing money for millions.

The Role

We are seeking a Senior / Principal DevOps Engineer to own the infrastructure, deployment, reliability, and operational excellence of Morningstar’s Corporate Marketing technology platform. In this role, you will serve as the primary DevOps authority for a modern AWS-based ecosystem, supporting high-traffic web applications, serverless APIs, and global delivery through CloudFront and edge services.

You will work hands-on across infrastructure, CI/CD, security, performance, and cost optimization — partnering closely with software engineers to ensure systems are reliable, secure, scalable, and efficient in production.

This position is based in Mumbai and collaborates closely with globally distributed engineering teams.

Job Responsibilities

• Own the deployment, operation, and reliability of production-grade web applications and Node.js APIs across AWS infrastructure ensuring security, scalability, and high availability.
• Implement and monitor serverless and container-based architectures using AWS SAM, the Serverless Framework, and Docker backed by reviewed infrastructure-as-code (CloudFormation and/or Terraform).
• Build, maintain, and evolve CI/CD pipelines using AWS-native tooling and Harness to support safe, repeatable deployments and roll-back strategies across multiple environments.
• Lead infrastructure migrations and lifecycle management, including Node.js runtime upgrades, API endpoint migrations, and backward-compatible rollout strategies.
• Own AWS networking, security, and access control, including VPC architecture, IAM permissions, DNS routing (Route 53), and vanity domain configuration.
• Build and operate edge and CDN infrastructure using CloudFront, including cache behaviors, Lambda@Edge / CloudFront Functions, origin protection, and performance optimization.
• Design and deploy infrastructure supporting AI-powered services, including agent runtimes, MCP servers, and supporting APIs.
• Implement and maintain web security controls, including AWS WAF, Bot Control, rate limiting, CORS, and CSP policies, balancing protection with legitimate traffic and analytics integrity.
• Own system reliability and operational readiness, including monitoring, alerting, incident response, disaster recovery planning, and recovery testing.
• Drive AWS cost optimization through architectural decisions, performance tuning, and ongoing analysis of usage and spend.
• Troubleshoot and resolve complex infrastructure, networking, and deployment issues across the full stack, from edge to application runtime.
• Document infrastructure architecture, deployment processes, and operational runbooks, enabling consistency, transparency, and long-term maintainability.

Qualifications

• 10+ years of experience in DevOps, Site Reliability Engineering, or cloud infrastructure roles supporting production systems.
• Experience supporting high-traffic public-facing web platforms and/or globally distributed applications.
• Deep hands-on experience operating AWS environments, including services such as Lambda, CloudFront, API Gateway, S3, EC2, IAM, Route 53, and VPC.
• Strong experience deploying and operating serverless systems using AWS SAM, the Serverless Framework, or equivalent tooling.
• Proven experience building and maintaining CI/CD pipelines using AWS tooling and/or platforms such as Harness.
• Strong working knowledge of Docker containers and container-based deployment models.
• Advanced understanding of AWS networking, DNS, IAM permissions, and cloud security best practices.
• Hands-on experience configuring and debugging AWS WAF, Bot Control, and traffic filtering rules in production environments.
• Experience designing and operating CDN and edge-layer solutions, including caching strategies and performance optimization.
• Demonstrated ability to debug complex infrastructure, networking, and deployment-related issues to root cause.
• Experience designing or supporting disaster recovery and business continuity strategies.
• Strong understanding of AWS cost optimization techniques and architectural tradeoffs.
• Excellent communication skills, with the ability to collaborate effectively with software engineers and explain infrastructure decisions clearly.
• Proven ability to take end-to-end ownership of infrastructure, reliability, and operational outcomes.
• Motivated, with excellent self-study skills

Nice to have

• Hands-on experience building and deploying AI agent systems, MCP servers, or similar AI service infrastructure in production environments.
• Familiarity with Nuxt/Next applications or headless CMS-driven web architectures.
• Experience supporting distributed engineering teams across multiple time zones.

Morningstar is an equal opportunity employer.

Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.