Senior DevOps Engineer

FreshUp is a Hong Kong-based operator of vending machines and self-service retail solutions. We supply drinks, snacks and automated retail services to offices, schools, hospitals and other institutions across Hong Kong, and we serve both local and multinational clients.

Our work covers machine leasing, daily operations and after-sales service. As the business grows, we continue to invest in the systems that support our operations and are expanding our technology team.

The Role

You will own the foundations the rest of the technology team builds on: environments, release process, monitoring and recovery. The work covers the services we run in the cloud, and a large part of it is making sure deployment and recovery do not depend on any single person or partner.

Key Responsibilities:

Environments and deployment

• Set up development, staging and production environments, with simulated or de-identified data outside production;

• Define branching practice and a repeatable release process covering build, test, release and roll back, and introduce automated deployment progressively.

Cloud and servers

• Manage assets across DigitalOcean, GCP and Alibaba Cloud: containers, networking, firewalls, DNS and TLS;

• Handle network access with address planning, firewall rules and controlled remote access, and assess capacity and cost for new services;

• Manage accounts, SSH keys, API keys and certificates, and give vendors least-privilege access that is withdrawn when the engagement ends.

Monitoring, backup and recovery

• Build service and host monitoring, and set alert thresholds and escalation paths so problems surface before users report them;

• Set backup policy for databases and configuration, run restore drills, and write incident and recovery procedures.

Delivery handover

• Reproduce the build and deployment of existing systems in our own environment, and confirm they run and recover independently;

• Take over or rebuild the CI pipeline and put every technical arrangement in writing.

Requirements:

Essential

• Five or more years in DevOps, SRE or system administration;

• Linux administration, Docker, Git, and at least one CI/CD tool (GitLab CI, GitHub Actions or Jenkins);

• Able to script routine work in Python, Bash or Node.js.;

• Hands-on public cloud experience (DigitalOcean, GCP, AWS or Alibaba Cloud), including VPC, firewall rules, DNS and TLS;

• Day-to-day operation and backup or restore of a relational database (MySQL or PostgreSQL);

• Experience with monitoring and logging tools (Prometheus, Grafana, cloud monitoring or equivalent);

• Able to read existing source code and build scripts to find what a deployment needs. You do not need to be the main developer;

• Cantonese communication and English technical reading.

Advantageous:

• Mandarin for technical liaison with vendors;

• Having built a CI/CD and environment practice from scratch;

• Having taken over a system and made it maintainable in-house;

• Terraform or another infrastructure-as-code tool.

How We Work:

You will set your own priorities: address what affects availability and recovery first, then extend coverage to the remaining systems. Judgement has to be written down as documents and procedures that other people can run, not kept in one person’s head.

Benefits:

• 5-day work week
• Bank holidays
• Performance bonus
• Annual leave
• Medical insurance
• Birthday leave
• Maternity leave
• Funeral leave
• Promotion opportunities

員工福利 Benefits

• 五天工作 5-Day Work
• 醫療津貼 Medical Insurance
• 表現獎金/ 勤工獎 Performance Bonus
• 銀行假期 Bank Holiday
• 晉升機會 Promotion
• 生日假期 Birthday Leave

行業 Industry

• 批發及零售業 Wholesale & Retail

工作種類 Job Category

• 工程 (法律及法律顧問) Engineering (Legal & Compliance)
• 專業服務 (--) Professional Services (--)

工作地點 Location

• 葵芳 Kwai Fong

學歷要求 Education

• 證書 Certificate