Site Reliability-DevOps Engineer - Fully remote

• Triage Aurora MySQL: Resolve our most common production bottlenecks-slow queries, lock contention, and connection pressure-by tracing faults directly back to application code or backend background queues.
• Drive GitOps & Pipelines: Own the CI/CD release lifecycle end-to-end.
• Manage On-Call Rota: Serve as primary on-call, with an external partner for escalation backup. (On-call rotation allowance and structured compensatory terms will be discussed at interview).
• Maintain SOC 2 Compliance: Act as the lead point person for security audits, running access reviews, and administering Vanta.
• Code: Write and review backend code (Python/Node.js) for internal orchestration tooling, microservices, and payment gateways.

• 5+ Years Experience: Proven seniority running live production AWS infrastructure independently.
• Production Kubernetes Ownership: Hands-on EKS cluster operations (autoscaling, HPAs, resource constraints) and debugging runtime failures under pressure (OOMKills, rollout errors). Managed PaaS-only experience is not sufficient.
• Advanced Terraform: Deep experience writing, modularising, and refactoring infrastructure definitions from scratch using Terraform and Terragrunt.
• Relational Database Competence: Ability to read slow-query logs and analyze EXPLAIN plans to fix indexing or locking issues on Aurora MySQL.
• Observability Depth: Strategic judgment to tune CloudWatch/Prometheus metrics so alarms page accurately at 3 AM rather than constantly.
• Compliance Lead: Practical experience owning a SOC 2 or ISO 27001 audit programme.
• Documentation Habit: Dedication to writing runbooks as a core engineering deliverable.

We are a London-based SaaS platform helping global enterprise brands onboard, manage, and pay their international freelance workforce. We have recently launched a global payout engine routing live multi-currency payments over international rails. We are a small, hungry team that moves fast with zero bureaucracy. The Role & Our Stack This is a high-autonomy, solo-operator role owning our infrastructure end-to-end. You inherit a working estate, backed by an external partner for secondary overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2), backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis, fronted by ALB and CloudFront/WAF. Everything is codified using Terraform and Terragrunt across multiple AWS accounts, shipped via CircleCI into AWS CodePipeline/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You’ll Do

• Run EKS Production: Own our live AWS environment, handling EKS node groups, cluster upgrades, VPC routing, and tested database restores.