Senior DevOps Engineer

Key Responsibilities 1. Infrastructure Management (AWS) • Own and manage the entire AWS infrastructure — EC2, RDS, S3, ECS/EKS, VPC, IAM, CloudFront, Route 53, and related services. • Design for high availability and fault tolerance; ensure infra can handle payment-grade uptime requirements. • Right-size and optimise infrastructure for cost without compromising reliability. • Maintain environment parity across dev, staging, and production. 2. CI/CD Pipelines • Build, maintain, and continuously improve CI/CD pipelines across all services supporting a daily release cadence. • Manage deployment triggering across multiple AWS availability zones; handle traffic routing between zones including manual intervention when required. • Ensure fast, reliable, and safe deployments with rollback capabilities and pre/post-release health checks. • Work closely with the engineering team to reduce deployment friction and maintain release velocity. • Manage branching strategies, environment promotion, and deployment gates. 3. Monitoring, Alerting & Incident Response • Own site monitoring end-to-end — set up and maintain CloudWatch and Site24x7 (or equivalent) for uptime checks, dashboards, log aggregation, and alerting.
SENIOR DEVOPS ENGINEER Shopse | Full-Time | Own the Infra. Keep Us Running.
• Configure intelligent alerting rules that surface real issues without creating noise; maintain runbooks for common alert scenarios. • Be the first responder for production alerts — acknowledge, triage, and resolve or escalate within defined SLAs. Proactive action on alerts is a core expectation of this role. • Conduct root cause analysis (RCA) for all production incidents and drive fixes to prevent recurrence. • Maintain an on-call schedule; this role requires availability outside business hours for critical alerts. 4. System Automation • Automate repetitive operational tasks — provisioning, scaling, patching, backups, and configuration management. • Manage infrastructure-as-code using Terraform or equivalent; no manual console changes in production. • Automate monitoring setup, alerting thresholds, and runbook execution wherever possible. 5. Security & Compliance • Implement and maintain security rules, firewall policies, network ACLs, and IAM roles with least-privilege principles. • Manage VPN setup and access controls for internal teams and vendors. • Manage access provisioning and deprovisioning for all team members across AWS and related services. • Ensure infrastructure compliance with PCI DSS and ISO 27001 requirements — work closely with the InfoSec Lead on audit evidence and remediation. • Manage SSL/TLS certificates, key rotation, secrets management (AWS Secrets Manager / Vault), and encryption at rest and in transit. 6. Releases & Server Operations • Coordinate and execute daily production releases — validate pre-release checklists, trigger deployments across zones, manage traffic routing, and monitor post-release health. • Handle server maintenance, OS upgrades, dependency patching, and scheduled downtime windows. • Manage database backups, restoration drills, and disaster recovery procedures. • Maintain up-to-date infrastructure documentation and runbooks. 7. AI-Augmented Development Infrastructure • Design and manage infrastructure for AI-assisted development workflows — including on-demand provisioning and teardown of ephemeral EC2 or container instances used by AI dev tools such as Claude Code. • Integrate AI dev tooling into CI/CD pipelines — enabling automated code generation, review, and testing stages that spin up isolated compute, execute tasks, and clean up on completion. • Implement IAM policies, network boundaries, and cost guardrails for ephemeral AI development instances. • Build monitoring and observability into AI-augmented pipelines — tracking instance lifecycle, run times, failure rates, and compute costs.
Requirements Essential Experience • 5–8 years of hands-on DevOps or infrastructure engineering experience. • Deep, practical AWS expertise — EC2, RDS, ECS/EKS, VPC, IAM, ALB, Route 53, CloudWatch. Ability to architect, troubleshoot, and optimise independently. • Proven experience building and maintaining CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, or equivalent) including multi-zone deployments.
What we really mean by 'reliable and dependable' In a payments business, infrastructure failures have real, immediate consequences for merchants and customers. We need someone who treats a production alert at 11 PM the same way they would at 11 AM — someone who does not need to be chased, who over-communicates during incidents, and who takes pride in a green dashboard. If that describes you, we want to talk. • Hands-on experience with monitoring stacks — CloudWatch, Site24x7, Grafana, Prometheus, Datadog, or equivalent. • Infrastructure-as-code using Terraform, CloudFormation, or Pulumi. • Strong scripting skills — Python, Bash, or equivalent. • Container experience — Docker and Kubernetes (EKS or self-managed). • Experience managing VPN solutions (OpenVPN, AWS Client VPN, WireGuard, or equivalent). • Access management experience — provisioning, deprovisioning, and periodic reviews across cloud and tooling. Nice to Have • Experience integrating AI dev tools (Claude Code, GitHub Copilot, Cursor, or similar) into CI/CD pipelines. • Familiarity with ephemeral environment patterns for automated testing or AI-assisted workflows. • AWS certifications — Solutions Architect, DevOps Engineer Professional, or Security Specialty. • Familiarity with PCI DSS infrastructure requirements and ISO 27001 technical controls. • Experience in a fintech, payments, or BFSI environment.