Who we are: BAL is a team of brilliant people who change lives through elite immigration work and collaborative innovation. We pursue the exceptional in all that we do, but never at the expense of our values. There’s no denying our work is demanding, both in volume and pace, but we’re up for the challenge. We love the balance of hard work and fun – so, you’ll see us in jeans as we shatter glass ceilings and conventional stereotypes. BAL employees feel valued, rewarded, and respected. We seek opportunities to be of service to others and our communities. We are committed to your growth and development, and want to set you up for success here at BAL and beyond.
Who you are: You are looking for work that has a purpose. You aren’t afraid to roll up your sleeves and get stuff done. You learn quickly. You move fast. You embrace challenge and detail as well as creative thinking. You believe you have something unique to contribute and you aren’t afraid to raise your hand. You understand that powering human achievement is ultimately about impacting a real person. You are looking for a place to grow and an environment where everyone has a spot and is genuinely welcome.
We’re better together: A bright, driven person like you and an industry-leading powerhouse like BAL? It’s a perfect combination! We truly want to see you succeed here and become an integral part of our mission to provide an experience that makes a positive difference in people’s lives. Come be a part of something special, where you can have an impact and be valued just for being you!
In addition to competitive pay, a discretionary annual bonus, and a supportive, team oriented culture, we offer an outstanding benefits package that includes medical, dental, vision, disability, and life insurance, sick time, unlimited vacation, and 401(k) with company match.
About the Role
BAL is looking for a technical leader to own the firm's cloud infrastructure, platform engineering, DevOps, and AI initiatives. This role leads a team of engineers and sets the direction for how BAL builds, deploys, secures, and operates its applications on AWS. Because BAL is a global immigration law firm, you'll be expected to balance speed of delivery with strong security, compliance, and governance practices.
Key Responsibilities
Leadership and Strategy
• Lead, mentor, and grow a team of cloud, DevOps, and platform engineers, including hiring, performance management, and career development.
• Own the cloud and platform roadmap and communicate progress, risks, and trade-offs to the senior leadership.
• Partner with application development, security, data, and business teams to align infrastructure with firm priorities.
• Manage vendor relationships, tooling budgets, and third-party integration reviews.
Cloud Infrastructure and Networking
• Architect and operate a secure, multi-account AWS environment (EKS, EC2, RDS, Lambda, Step Functions, S3, IAM, CloudWatch, Bedrock).
• Design and manage cloud networking, including hub-and-spoke topologies, Transit Gateway, VPC design, private connectivity, DNS, firewalls, and hybrid/multi-cloud links (Azure, GCP).
• Enforce Infrastructure as Code (Terraform/Terragrunt) and GitOps practices across all environments.
• Drive reliability, observability, cost optimization, and incident response.
Platform Engineering and Microservices
• Run production Kubernetes (Amazon EKS) platforms that support microservices-based applications.
• Operate event-driven and streaming platforms built on Apache Kafka (Amazon MSK or Confluent).
• Support workflow and orchestration platforms, including Temporal and Flowable.
• Build internal developer platforms, CI/CD pipelines, and self-service tooling that improve developer experience.
AI and Agentic Systems
• Lead the design and rollout of AI agents and LLM-powered applications (Amazon Bedrock, RAG, knowledge bases, multi-agent orchestration).
• Set guardrails for AI use, including data redaction, access entitlements, auditability, and responsible AI governance.
• Evaluate and pilot emerging AI tools for engineering productivity, such as AI coding assistants.
Enterprise Application Platforms
• Support DevOps for Salesforce, including GitOps-based release management using Gearset.
• Integrate and support business platforms such as Formstack, Flowable, and Salesforce with AWS-hosted services.
Required Qualifications
• 10+ years in infrastructure, cloud, or DevOps engineering, with 4+ years managing technical teams.
• Deep hands-on expertise with AWS services and multi-account architecture.
• Production experience with Kubernetes (EKS preferred) and container-based microservices.
• Experience with Kafka or comparable event-streaming platforms.
• Strong cloud networking background (VPC design, routing, private connectivity, firewalls, hybrid connectivity).
• Proficiency with Terraform/Terragrunt, GitHub, CI/CD, and GitOps workflows.
• Hands-on experience building or deploying AI agents or LLM-based solutions.
• Experience working in regulated or compliance-sensitive environments.
• Excellent communication skills, with the ability to present to executive audiences.
Preferred Qualifications
• Salesforce platform experience, including Salesforce DevOps and release management with Gearset.
• Experience with workflow engines such as Temporal and Flowable.
• Familiarity with Formstack or similar form and document automation platforms.
• Multi-cloud experience across Azure and/or GCP.
• AWS certifications (Solutions Architect Professional, DevOps Engineer Professional, or Security Specialty) and/or CKA/CKAD.
• Experience in legal, professional services, or financial services.
Note: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required and are not intended to be an exhaustive list of all duties, responsibilities or qualifications associated with this job.
Berry Appleman & Leiden is an Equal Opportunity Employer . It is the policy of BAL to ensure an equal employment opportunity without discrimination or harassment on the basis of race, color, national origin, religion, gender, gender identity or expression, age, disability, alienage or citizenship status, marital status, creed, genetic predisposition or carrier status, sexual orientation or any other characteristic protected by law. BAL prohibits and will not tolerate any such discrimination or harassment.
BAL does not accept unsolicited resumes from recruiters or employment agencies. BAL is under no obligation to pay any referral compensation or recruiter fee in the absence of a current executed Recruitment Services Agreement. In the event a recruiter or agency submits an unsolicited resume or candidate without an agreement, BAL reserves the right to pursue and hire said candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, shall be deemed the property of BAL. If your agency would like to be considered as a potential recruiting partner, please forward your contact information to Recruitment@BAL.com.