Senior DevOps and Compliance Engineer to $8300
We’re looking for a Senior DevOps to join our growing team.
You’ll be responsible for building and operating a multi-cloud (AWS + GCP) infrastructure, driving observability and CI/CD governance, and owning our SOC 2 compliance automation.
This is a senior, hands-on position for someone who can combine infrastructure engineering, security, and automation — and enjoys owning systems end-to-end.
You’ll collaborate directly with our CTO and US engineering team (UTC-5 to UTC+2 overlap).
What You’ll Do:
Infrastructure & Automation
- Manage and automate AWS (EKS, EC2, IAM, S3) and GCP (GKE, Cloud Functions, BigQuery) environments.
- Maintain and expand Terraform infrastructure as code — from provisioning to drift detection.
- Migrate and optimize workloads such as Neo4j Fabric, Airbyte, Kafka, and dbt across clouds.
- Configure GPU-enabled EC2 and manage cost optimization (Spot + TCO tracking).
Observability & Monitoring
- Implement Sumo Logic + OpenTelemetry pipelines for structured logging and distributed tracing.
- Configure Slack-based alerting segmented by environment (dev, staging, prod).
- Maintain health and cost dashboards across AWS, GCP, and data platform services.
CI/CD Governance
- Own and enforce GitHub Actions pipelines (linting, coverage, schema validation).
- Integrate Codecov, SonarQube, and dbt tests into CI/CD flows.
Ensure reproducible builds and audit-ready logs (coverage.xml, results.xml).
Security & Secret Management
- Administer IAM roles and enforce MFA across AWS, GCP, GitHub, and Auth0.
- Manage secrets via 1Password CLI and scan codebases using TruffleHog and GitGuardian.
Configure Lambda/GCS malware scanning for file storage.
SOC 2 Compliance Automation
- Automate control evidence collection (logs, screenshots, IAM diffs).
- Integrate compliance checks with GitHub Actions, Slack, and Sumo Logic.
- Maintain structured audit folders (GCS/S3, Jira, Confluence).
Support quarterly access reviews and rotation monitoring.
Must-Have Qualifications:
- 5+ years experience in DevOps, SRE, or Cloud Infrastructure roles.
- Proven background in AWS and GCP operations, ideally multi-cloud.
- Proficient with Terraform, GitHub Actions, and IaC security best practices.
- Experience with Sumo Logic and OpenTelemetry SDKs (Node.js, Python, JS).
- Working knowledge of Neo4j, Airbyte, Kafka, dbt, and BigQuery.
- Comfortable implementing SOC 2 / ISO 27001 security and evidence frameworks.
Strong English communication (written and spoken).
Bonus Points:
- Experience with Prometheus/Grafana dashboards.
- Prior work with 1Password CLI, Auth0, or Salesbricks.
Familiarity with AWS Config, GCP Policy Analyzer, or compliance-as-code tooling.
What You’ll Deliver in the First 90 Days
- Migrate GKE → EKS workloads and automate environment provisioning via Terraform.
- Set up centralized logging (Sumo Logic) and distributed tracing (OpenTelemetry).
- Implement CI/CD enforcement (coverage, schema validation, secrets scanning).
Deliver a SOC 2 evidence automation framework (Slack alerts, audit exports, test reports).
Work Setup
- Full remote, flexible hours (overlap with US East Coast 3–4 hours/day).
- Direct collaboration with CTO and engineering leads.
Asynchronous-first communication via Slack, GitHub, Notion, and Jira.
What We Offer:
- We’re building a modern data & identity infrastructure powering eCommerce personalization.
- You’ll have full ownership of our infrastructure and compliance stack — no legacy baggage, no red tape.
- You’ll work with modern tools — Terraform, EKS, OTEL, dbt, Kafka — and have autonomy to improve them.
$100K budget for the role, with annual performance and bonus upside.
What else:
- 4 weeks of paid vacation per year (with flexible scheduling)
- Unlimited sick leave — we trust your judgment and care about your health
- US Bank Holidays off — following the American holiday calendar
- A chance to work in a dynamic, multicultural team of professionals driven by a
- shared passion for product innovation and real impact
- A flat structure, no micromanagement, and full ownership of your work
Remote-first culture and flexible working hours
How to Apply
Send your CV / GitHub profile and a short note describing:
- A project where you implemented observability or SOC 2 automation.
- Your favorite IaC or monitoring tool and why.
Our Interview Process Is Simple and Fast:
1. Recruitment Screening Call
General conversation about your background, English check, and Q&A from your side.
2. Initial call with CTO (30 min) in English
3. Technical deep dive Interview in English
4. Final Culture Fit Interview
General conversation in English with our CОO and Head of Delivery.
Why Join Us?
Be part of a product-first, data-driven startup reshaping martech
Work on modern tech with real ownership and creative freedom
Collaborate with senior-level professionals in a global, fast-moving environment
Ready to build the future of data-powered marketing with us?
Apply now and let’s talk!
Required languages
English | C1 - Advanced |