DevOps Engineer

The core responsibilities for the job include the following:

Infrastructure ownership (AWS):

• Own Recruiterflow's AWS infrastructure end-to-end: EC2, RDS (MySQL), Elastic Load Balancing, VPC/networking, IAM, S3, EFS, Route 53, and related services.
• Design and optimize EC2 fleet sizing, auto scaling, and application load balancer configuration for availability and cost efficiency.
• Tune Amazon RDS for MySQL: instance sizing, parameter groups, read replicas and replica lag, backups, snapshots, and point-in-time recovery.
• Drive AWS cost optimization through right-sizing, reserved instances/savings plans, storage lifecycle policies, and regular cost reviews.
• Codify infrastructure as code so environments are reproducible, reviewable, and version-controlled.

CI/CD and release engineering:

• Own and improve our CI/CD pipelines on Bitbucket Pipelines: faster builds, reliable test stages, PR checks, and safe, repeatable deployments.
• Introduce zero-downtime deployment strategies (rolling, blue/green) and clean rollback paths.
• Manage build artifacts, environment configuration, and secrets across development, staging, and production.

Developer tooling and secure access:

• Build a secure, streamlined way for engineers to connect to EC2 and RDS—e. g., AWS Systems Manager Session Manager, bastion-less access, port forwarding, and SSO-based short-lived credentials—replacing shared keys and ad-hoc access.
• Implement least-privilege IAM roles and policies, with access that is auditable and easy to grant or revoke.
• Provide self-serve tooling and documentation so developers can spin up, debug, and access environments without waiting on DevOps.

Reliability, observability, and security:

• Set up monitoring, logging, and alerting (e. g., CloudWatch and/or Prometheus/Grafana) with clear dashboards for application and database health.
• Participate in production incident response, lead root-cause analysis, and write runbooks to prevent repeat issues.
• Own backup, disaster recovery, and data-retention practices for a multi-tenant SaaS platform holding customer data.
• Harden infrastructure security: patching, network segmentation, security groups, encryption at rest and in transit, and secret management.

Collaboration:

• Work closely with backend, frontend, and QA engineers and the product support team to remove infrastructure bottlenecks.
• Document architecture, runbooks, and standards, and share DevOps best practices across the team.

Requirements:

• 4-6 years of hands-on experience in DevOps, SRE, or cloud infrastructure roles, ideally supporting a production SaaS product.
• Strong AWS expertise: EC2, RDS, ELB/ALB, Auto Scaling, VPC, IAM, S3, CloudWatch, and Systems Manager.
• Database operations: experience running MySQL on Amazon RDS in production—performance tuning, read replicas, backups, and recovery.
• CI/CD: proven experience building and maintaining pipelines (Bitbucket Pipelines preferred; GitHub Actions, GitLab CI, or Jenkins is also fine) and Git-based workflows.
• Infrastructure as Code: hands-on with Terraform, CloudFormation, or AWS CDK.
• Linux administration: strong Ubuntu/Linux skills, including networking, SSH, Nginx/web servers, and process management.
• Scripting: solid Bash and Python skills for automation and tooling.
• Security: practical experience with IAM least-privilege design, secret management, and secure access patterns for servers and databases.
• Observability: experience setting up monitoring, logging, and alerting, and handling on-call incidents.
• Strong problem-solving, clear communication, and comfort working as the owner of a function.

Preferred Qualifications:

• Experience running Python/Flask (or Django) applications in production, including WSGI servers such as Gunicorn/uWSGI and background workers.
• Experience with multi-tenant SaaS architectures and their isolation, scaling, and data-safety concerns.
• Familiarity with Docker and container orchestration (ECS, EKS, or Kubernetes).
• Experience with caching and queueing systems such as Redis, Celery, SQS, or RabbitMQ.
• Exposure to zero-trust/secure access tools (AWS SSM, Tailscale, Teleport, AWS IAM Identity Center).
• Familiarity with supporting AI/LLM workloads on AWS (e. g., Amazon Bedrock).
• AWS certifications (Solutions Architect Associate/Professional, SysOps Administrator, or DevOps Engineer Professional).
• Experience with SFTP/EFS-based file integrations and data migration infrastructure.