DevOps Engineer

We're looking for someone who can set up production-grade AWS infrastructure, make sure our early-stage decisions are sound, and leave behind infrastructure that another engineer can confidently maintain without the original author.

Responsibilities:

• High-level scope: AWS infrastructure from scratch (VPC, compute, database, load balancing, security).
• CI/CD pipeline with secure deployment practices.
• Monitoring and alerting foundation.
• Database provisioning with migration tooling.
• Review our current infrastructure decisions, confirm what's right, flag what should change, and document the growth path.
• Clean handoff with documentation.

Requirements:

• AWS VPC design from scratch.
• Must have created VPCs with public/private subnet separation, NAT gateways, and ALB routing.
• Not someone who deployed to VPCs someone else built.
• Terraform that survives handoff.
• Must have written Terraform that another engineer inherited and maintained without the original author.
• Modular structure, remote state, environment separation.
• Secure CI/CD and operational recovery.
• Has set up GitHub Actions with OIDC-based AWS role assumption (no stored credentials).
• Has validated that database backups actually restore.
• Must have 5+ years of AWS infrastructure experience.
• Terraform depth: remote state, locking, modules, staging/prod isolation, drift detection.
• AWS networking from scratch: VPC, subnets, NAT, security groups, IAM least privilege, ECS experience, Fargate preferred, RDS.
• PostgreSQL: Provisioning, backup configuration, and connection management.
• Docker: Container images for JVM services CI/CD with GitHub Actions, including OIDC-based AWS auth backup/restore operational maturity.
• Has delivered infrastructure for at least two production AWS applications and handed them off to another engineer.
• Has experience right-sizing infrastructure for early-stage products.
• Comfortable working independently from design documents.