DevOps Engineer

About the role

You will join a small DevOps team that owns the AWS platform end‑to‑end, handling infrastructure as code, CI/CD, databases, observability, security compliance and cloud cost. The role is hands‑on: you will triage production incidents, ship Terraform changes and work with developers to improve performance and reduce spend.

Key responsibilities

• Build and maintain multi‑account AWS infrastructure with Terraform/OpenTofu, including ECS Fargate workloads, ALB, CloudFront, WAF, VPC networking and backup.
• Maintain GitHub Actions pipelines for building, scanning and deploying services, adding security gates such as image scanning and license compliance.
• Operate Aurora PostgreSQL, MongoDB Atlas, TimescaleDB, Redis and Amazon MQ, handling alerts, capacity planning and data archival.
• Own CloudWatch alarms, dashboards, Logs Insights and New Relic APM, participate in on‑call rotation and write post‑incident reports.
• Track AWS spend with Cost Explorer and CUR, right‑size resources, manage Savings Plans and Reserved Instances, and present cost‑saving opportunities.
• Support SOC 1 and SOC 2 audits, manage IAM Identity Center, least‑privilege roles and vulnerability remediation with Inspector, GuardDuty and Trivy.

Required profile

• 3+ years of hands‑on production AWS experience (ECS/EKS, RDS, VPC, IAM, CloudWatch, S3).
• Strong Terraform skills, including modules, remote state and safe code changes.
• Experience building CI/CD pipelines, preferably with GitHub Actions.
• Solid Linux and Docker fundamentals; scripting in Bash and Python.
• Working knowledge of PostgreSQL query plans and blocking sessions.
• Proven experience debugging production incidents under pressure.
• Clear written English for incident notes, pull requests and reports.

Required skills

• AWS (ECS Fargate, RDS, VPC, IAM, CloudWatch, S3)
• Terraform / OpenTofu
• GitHub Actions
• Linux, Docker, Bash, Python
• PostgreSQL, Aurora
• MongoDB Atlas, TimescaleDB, Redis, Amazon MQ
• CloudWatch, New Relic, Logs Insights
• IAM Identity Center, least‑privilege access management

What we offer

• Paid time off and holidays.
• Learning budget and paid AWS certification exams.
• Opportunity to work on a high‑traffic, multi‑region SaaS platform.