DevOps Engineer

We're hiring for judgment and AWS depth, not typing speed. Stack: Backend: Java / Spring Boot Database: PostgreSQL (RDS) Compute: ECS Fargate IaC: Terraform CI/CD: GitHub Actions Cloud: AWS.

Responsibilities:

• Someone who can set up production-grade AWS infrastructure, make sure our early-stage decisions are sound, and leave behind infrastructure that another engineer can confidently maintain without the original author.
• High-level scope: AWS infrastructure from scratch (VPC, compute, database, load balancing, security); CI/CD pipeline with secure deployment practices.
• Monitoring and alerting foundation.
• Database provisioning with migration tooling.
• Review of our current infrastructure decisions, confirm what's right, flag what should change, document the growth path.
• Clean handoff with documentation.

Requirements:

• Critical Skills to Screen For: AWS VPC design from scratch.
• Must have created VPCs with public/private subnet separation, NAT gateways, and ALB routing.
• Not someone who deployed to VPCs someone else built.
• Terraform that survives handoff.
• Must have written Terraform that another engineer inherited and maintained without the original author.
• Modular structure, remote state, environment separation.
• Secure CI/CD and operational recovery.
• Has set up GitHub Actions with OIDC-based AWS role assumption (no stored credentials).
• Has validated that database backups actually restore.
• Must have 5+ years AWS infrastructure experience; Terraform depth: remote state, locking, modules, staging/prod isolation, drift detection; AWS networking from scratch: VPC, subnets, NAT, security groups, IAM least privilege; ECS experience, Fargate preferred; RDS PostgreSQL: provisioning, backup configuration, connection management; Docker: container images for JVM services; CI/CD with GitHub Actions, including OIDC-based AWS auth Backup/restore operational maturity.
• Has delivered infrastructure for at least two production AWS applications and handed off to another engineer.
• Has experience right-sizing infrastructure for early-stage products.
• Comfortable working independently from design documents.
• Nice to Have: Java/Spring Boot project setup (Maven, Dockerfile conventions), Flyway for database migrations, Sentry integration, WAF rule configuration, CloudWatch alarm design beyond defaults.
• Experience with financial/fintech systems; has evolved infrastructure from startup to growth stage without a full rebuild.