Senior DevOps / Cloud Infrastructure Engineer
Role details
Job location
Tech stack
Job description
- Maintain, refactor, and extend our Terraform codebase. You will work with modules, workspaces, and state management to provision resources like VPCs, EC2 instances, RDS databases, and ALBs.
- Manage a multi-account AWS strategy, including a central "Master" account for shared services (Vault, Monitoring) and satellite accounts for specific applications.
- Oversee the integration of HashiCorp Vault for secrets management (KV secrets, database credentials) and manage IAM roles/policies to ensure least-privilege access.
- Improve developer workflows using Makefiles, Shell scripts, and Python automation (e.g., certificate renewal).
- Maintain and enhance our monitoring stack, primarily based on NewRelic, Zabbix, and Sentry ensuring high availability and proactive alerting.
- Collaborate with development teams to ensure smooth deployment pipelines through GitHub actions, where code pushes automatically trigger infrastructure updates or application deployments.
- Prioritize documentation and standardized processes to keep the infrastructure predictable and reliable.
Requirements
Do you have experience in Terraform?, Do you have a Master's degree?, * Deep understanding of Terraform, including custom modules, state locking, workspaces, and best practices for production environments.
- Strong hands-on experience with core AWS services:
- Networking: VPC, Subnets, NAT Gateways, Route53 (Internal/External DNS), VPNs.
- Compute: EC2, Auto Scaling Groups, ALBs.
- Storage/Database: RDS, Aurora, S3.
- Security & Access Control: Security Groups, NACLs, IAM roles/policies, Secrets Manager.
- Proficiency in Bash and Python for glue code and automation tasks. Experience with Makefiles is a plus.
- Experience with HashiCorp Vault, SSH certificate management, and AWS IAM.
- Comfortable managing Bastion hosts and debugging Linux-based systems.
- Git-based reviews, documentation-first mindset, ability to partner with app teams on database migrations, secrets, and release hygiene.
Benefits & conditions
- You take pride in your work and own the lifecycle of a feature from design to deployment.
- You enjoy tackling complex architectural challenges in a distributed system.
- You write readable, maintainable, and well-documented code.
- You use AI to move faster, never at the cost of quality.
- Short iterations, small PRs, and frequent deployments.
What we require
This is a full-time position based on a 40-hour work week, with flexibility to accommodate the company's operational needs. Annual PTO will align with local regulations in your region. We are seeking individuals who are comfortable traveling to support our global operations when required. In return, we offer a dynamic, fast-paced work environment, opportunities for professional growth, and a benefits package including medical and other location-specific benefits based on your home location. If you require alternative methods of application or screening, you must approach the employer directly to request this as Indeed is not responsible for the employer's application process.