Senior DevOps Engineer (Remote, Contract)

We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way., * Design, build and run secure AWS infrastructure (EC2 with Docker Compose, EKS) with Terraform and Ansible; move suitable workloads from EC2 to EKS

• Build and maintain CI/CD in GitHub Actions; move remaining Jenkins jobs to GitHub Actions
• Keep new and existing services at our security baseline: Cloudflare proxy with WAF and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root
• Own monitoring, alerting and logs on our standard stack (Grafana, OpenTelemetry, Sentry); on-call, incident response, post-incident reviews
• Own backups and regular restore tests
• Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects
• Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket
• Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards
• Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review
• Work with internal teams and contractors; set and enforce standards; mentor other engineers., * Application Ecosystem Familiarity: Experience supporting Node.js and Python microservices paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare

• 5+ Years in DevOps / SRE: Proven background operating mission-critical production environments, including 3+ years of hands-on experience running AWS at scale
• IaC & CI/CD Mastery: Expert with Terraform, highly proficient with Ansible, and experienced in designing production workflows with GitHub Actions
• Containerization & Kubernetes: Strong production experience with Docker and Kubernetes (specifically managed AWS EKS and Helm)
• Production Security & Incident Management: Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and Cloudflare WAF/proxy configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills
• English proficiency at B2 level or higher., * Modern Observability: Practical setup and maintenance of Grafana, Prometheus, and OpenTelemetry pipelines
• Core Scripting & Systems: Deep fluency in Linux administration, Bash, and Python scripting.
• Collaborative Leadership: Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.
• AI-Augmented Workflow: Daily experience leveraging modern AI developer tools and agents (Claude Code preferred) to accelerate engineering output.
• Proactive & Autonomous Mindset: A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table., * Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications.

• Schedule: Monday-Friday, 2 PM - 11 PM Eastern European Time (including 1 hour break)
• A collaborative, innovation-first environment that values initiative and experimentation
• Paid time off and sick leave
• Reduced working hours on Fridays during the summer
• Days off on US national holidays and your birthday.