DevOps Engineer - Cloud Platform/ SRE

We build analytics software for some of the world’s largest financial institutions. Our clients historically ran our products on-premises; today a growing share of them run on our cloud SaaS platform, in dedicated single-tenant environments on AWS and GCP. Our DevOps team runs that platform end to end: dozens of Kubernetes environments across many cloud accounts, deployed through GitLab CI/CD, OpenTofu and Ansible. We are looking for a DevOps engineer to help us scale and harden it, with a strong focus on platform security, disaster recovery and production readiness. You will join a small, experienced team where knowledge sharing and open communication matter as much as technical depth. You will support both client-facing and internal environments, and you will grow into owning key areas of the platform, with senior engineers to learn from.

What you’ll do

• Operate and improve our fleet of Kubernetes (EKS) environments: upgrades, scaling, and rolling out releases across client environments.
• Contribute to platform security: secrets management, IAM, network exposure, WAF, and fixing cloud security posture findings.
• Help implement disaster recovery for client environments: backups and regular restore drills.
• Build alerting and dashboards on our self-hosted Grafana/OpenTelemetry stack, and take part in incident response.
• Write and review infrastructure as code (OpenTofu, Ansible, Helm) and improve our GitLab CI/CD pipelines.
• Support internal teams and client environments, and document what you build.

Our Technical stack:

• DevOps: GitLab, GitLab CI/CD, Docker, Kubernetes, Helm, Terraform, Grafana, OpenTelemetry
• Cloud: AWS, Azure, GCP
• Security: HashiCorp Boundary, Vault, Keycloak, AWS WAF&Shield, Cloud Armor
• Coding & Scripts: Python, Bash, Go

• 3+ years in DevOps or SRE, including hands-on work on production cloud environments.
• Hands-on AWS experience: IAM, networking, and EKS or another managed Kubernetes service.
• Kubernetes in production: deploying with Helm and troubleshooting workloads.
• Infrastructure as code with Terraform or OpenTofu.
• Ansible, or a similar automation tool and the willingness to learn Ansible.
• Scripting in Bash and Python.
• Security awareness: secrets management, least privilege and network exposure.
• Good written and spoken English.

Nice to have

• Go, for building internal tooling or Kubernetes controllers.
• Experience operating a SaaS product for a commercial software company.
• AWS multi-account setups and IRSA.
• A Grafana / OpenTelemetry observability stack (Mimir, Loki, Tempo).
• Cilium, Karpenter or other advanced Kubernetes networking and autoscaling tools.