Job description

Key Responsibilities

1. Infrastructure Management (AWS)

• Own and manage the entire AWS infrastructure — EC2, RDS, S3, ECS/EKS, VPC, IAM, CloudFront, Route

53, and related services.

• Design for high availability and fault tolerance; ensure infra can handle payment-grade uptime requirements.

• Right-size and optimise infrastructure for cost without compromising reliability.

• Maintain environment parity across dev, staging, and production.

2. CI/CD Pipelines

• Build, maintain, and continuously improve CI/CD pipelines across all services supporting a daily release

cadence.

• Manage deployment triggering across multiple AWS availability zones; handle traffic routing between zones

including manual intervention when required.

• Ensure fast, reliable, and safe deployments with rollback capabilities and pre/post-release health checks.

• Work closely with the engineering team to reduce deployment friction and maintain release velocity.

• Manage branching strategies, environment promotion, and deployment gates.

3. Monitoring, Alerting & Incident Response

• Own site monitoring end-to-end — set up and maintain CloudWatch and Site24x7 (or equivalent) for uptime

checks, dashboards, log aggregation, and alerting.

SENIOR DEVOPS ENGINEER

Shopse | Full-Time | Own the Infra. Keep Us Running.

• Configure intelligent alerting rules that surface real issues without creating noise; maintain runbooks for

common alert scenarios.

• Be the first responder for production alerts — acknowledge, triage, and resolve or escalate within defined

SLAs. Proactive action on alerts is a core expectation of this role.

• Conduct root cause analysis (RCA) for all production incidents and drive fixes to prevent recurrence.

• Maintain an on-call schedule; this role requires availability outside business hours for critical alerts.

4. System Automation

• Automate repetitive operational tasks — provisioning, scaling, patching, backups, and configuration

management.

• Manage infrastructure-as-code using Terraform or equivalent; no manual console changes in production.

• Automate monitoring setup, alerting thresholds, and runbook execution wherever possible.

5. Security & Compliance

• Implement and maintain security rules, firewall policies, network ACLs, and IAM roles with least-privilege

principles.

• Manage VPN setup and access controls for internal teams and vendors.

• Manage access provisioning and deprovisioning for all team members across AWS and related services.

• Ensure infrastructure compliance with PCI DSS and ISO 27001 requirements — work closely with the InfoSec

Lead on audit evidence and remediation.

• Manage SSL/TLS certificates, key rotation, secrets management (AWS Secrets Manager / Vault), and

encryption at rest and in transit.

6. Releases & Server Operations

• Coordinate and execute daily production releases — validate pre-release checklists, trigger deployments

across zones, manage traffic routing, and monitor post-release health.

• Handle server maintenance, OS upgrades, dependency patching, and scheduled downtime windows.

• Manage database backups, restoration drills, and disaster recovery procedures.

• Maintain up-to-date infrastructure documentation and runbooks.

7. AI-Augmented Development Infrastructure

• Design and manage infrastructure for AI-assisted development workflows — including on-demand

provisioning and teardown of ephemeral EC2 or container instances used by AI dev tools such as Claude

Code.

• Integrate AI dev tooling into CI/CD pipelines — enabling automated code generation, review, and testing

stages that spin up isolated compute, execute tasks, and clean up on completion.

• Implement IAM policies, network boundaries, and cost guardrails for ephemeral AI development instances.

• Build monitoring and observability into AI-augmented pipelines — tracking instance lifecycle, run times, failure

rates, and compute costs.

Requirements

Essential Experience

• 5–8 years of hands-on DevOps or infrastructure engineering experience.

• Deep, practical AWS expertise — EC2, RDS, ECS/EKS, VPC, IAM, ALB, Route 53, CloudWatch. Ability to

architect, troubleshoot, and optimise independently.

• Proven experience building and maintaining CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, or

equivalent) including multi-zone deployments.

What we really mean by 'reliable and dependable'

In a payments business, infrastructure failures have real, immediate consequences for merchants and

customers. We need someone who treats a production alert at 11 PM the same way they would at 11 AM —

someone who does not need to be chased, who over-communicates during incidents, and who takes pride in a

green dashboard. If that describes you, we want to talk.

• Hands-on experience with monitoring stacks — CloudWatch, Site24x7, Grafana, Prometheus, Datadog, or

equivalent.

• Infrastructure-as-code using Terraform, CloudFormation, or Pulumi.

• Strong scripting skills — Python, Bash, or equivalent.

• Container experience — Docker and Kubernetes (EKS or self-managed).

• Experience managing VPN solutions (OpenVPN, AWS Client VPN, WireGuard, or equivalent).

• Access management experience — provisioning, deprovisioning, and periodic reviews across cloud and

tooling.

Nice to Have

• Experience integrating AI dev tools (Claude Code, GitHub Copilot, Cursor, or similar) into CI/CD pipelines.

• Familiarity with ephemeral environment patterns for automated testing or AI-assisted workflows.

• AWS certifications — Solutions Architect, DevOps Engineer Professional, or Security Specialty.

• Familiarity with PCI DSS infrastructure requirements and ISO 27001 technical controls.

• Experience in a fintech, payments, or BFSI environment.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

Someone shared one job with you. ASAI keeps finding the rest.