DevOps Engineer

Someone who can set up production-grade AWS infrastructure, make sure our early-stage decisions are sound, and leave behind infrastructure that another engineer can confidently maintain without the original author.

The core requirements for the job include the following:

Must Have:

• 5+ years of AWS infrastructure experience.
• Terraform depth: remote state, locking, modules, staging/prod isolation, drift detection.
• AWS networking from scratch: VPC, subnets, NAT, security groups, IAM, and least privilege.
• ECS experience, Fargate preferred.
• RDS PostgreSQL: provisioning, backup configuration, and connection management.
• Docker: container images for JVM services.
• CI/CD with GitHub Actions, including OIDC-based AWS auth.
• Backup/restore operational maturity.
• Has delivered infrastructure for at least two production AWS applications and handed them off to another engineer.
• Has experience right-sizing infrastructure for early-stage products.
• Comfortable working independently from design documents.

Tech Stack:

• Backend: Java / Spring Boot.
• Database: PostgreSQL (RDS).
• Compute: ECS Fargate.
• IaC: Terraform.
• CI/CD: GitHub Actions.
• Cloud: AWS.

High-level scope:

• AWS infrastructure from scratch (VPC, compute, database, load balancing, security).
• CI/CD pipeline with secure deployment practices.
• Monitoring and alerting foundation.
• Database provisioning with migration tooling.
• Review of our current infrastructure decisions, confirm what's right, flag what should change, and document the growth path.
• Clean handoff with documentation.

Nice to Have:

• Java/Spring Boot project setup (Maven, Dockerfile conventions).
• Flyway for database migrations.
• Sentry integration.
• WAF rule configuration.
• CloudWatch alarm design beyond defaults.
• Experience with financial/fintech systems.
• Has evolved infrastructure from startup to growth stage without a full rebuild.