DevOps Engineer

About the role:

No legacy, no bureaucracy, no corporate b**t — just you and a small but incredibly strong engineering team making the right technical decisions together.

This is payment infrastructure, so the bar for reliability, security, and operational excellence is high. You won't just "keep the lights on" — you'll help design, build, and evolve the platform.

AI-first. We're AI-first across the board, engineering included: routine operational work is automated through AI agents and AI tooling, IaC and runbooks are written and maintained with AI. We're not just "aware of AI" — we're building infrastructure that AI agents can safely operate and change.
 

What you'll do:

• Infrastructure as Code: Design and evolve Terraform modules for AWS (composite modules, accounts as code), and build a multi-environment foundation across non-prod / pre-prod / prod.
• Kubernetes: Operate and evolve EKS clusters — workloads, namespaces, resources, autoscaling, and network policies.
• CI/CD: Build, maintain, and improve GitHub Actions pipelines — faster, more reliable delivery with fewer manual steps.
• GitOps / Delivery: Manage Helm charts and ArgoCD for declarative Kubernetes deployments.
• Secrets & Access: Own secrets management, rotation, least-privilege access, and keep secrets out of code.
• Observability: Build metrics, dashboards, and alerting (Amazon Managed Prometheus + Amazon Managed Grafana), define SLOs, and improve incident response.
• Security & Networking: Manage IAM, environment separation, and secure access with Okta and Twingate.
• Databases (Operations): Operate PostgreSQL (RDS) and Redshift — configuration, backups, secret rotation, and operational reliability.
• Reliability: Drive production readiness, capacity planning, cost optimization, HA where it matters, and operational runbooks.
   

Stack:

• Cloud: AWS (EKS, RDS, IAM, VPC, etc.)
• IaC: Terraform
• Containers: Docker, Kubernetes (EKS), Helm
• GitOps: ArgoCD
• CI/CD: GitHub Actions
• Observability: Amazon Managed Prometheus (AMP), Amazon Managed Grafana (AMG)
• Database: PostgreSQL (RDS), AWS Redshift (OLAP)
• Auth / Access: Okta, Twingate
• AI: AI-first — active use of AI tools and AI agents in daily engineering work.
   

Requirements:

Must have

• 5+ years in DevOps, SRE, or Platform Engineering.
• Production AWS experience (EKS, IAM, VPC, RDS).
• Terraform — modules, remote state, multi-environment infrastructure.
• Kubernetes — production operations, Helm.
• CI/CD — building, maintaining, and improving pipelines.
• Linux, networking, scripting (Bash + Python or Go).
• Secrets management and security fundamentals (IAM, least privilege).
• Observability — metrics, logs, and alerting (Prometheus/Grafana or equivalent).
• AI fluency — actively uses AI tools (Claude Code, Cursor, Codex, or similar) in day-to-day engineering work. Not just "aware of AI" — uses them to multiply productivity while applying engineering judgment to the output.
• Proactivity — identifies problems before they surface, proposes solutions, and drives them to completion. Doesn't wait to be told what to do.
• English: confident reading and listening is a must. Good spoken English is a strong plus.
   

Nice to have

• FinTech, payments, or banking infrastructure experience.
• Experience building toward or maintaining PCI DSS compliance.
• ArgoCD / GitOps.
• Amazon Managed Prometheus / Grafana.
• AWS Redshift.
• Multi-account AWS environments with clear non-prod / pre-prod / prod separation.