Own the AWS infrastructure for all platform environments (dev, staging, production and DR) through Terraform, with every change going through PR review and a pipeline plan.
Operate and upgrade the EKS clusters, including Auto Mode node pools for CPU and GPU sandboxes, Gateway API routing, add-ons and capacity limits.
Maintain the Bitbucket Pipelines and Helm GitOps flow that builds application images and promotes releases across environments.
Run and test the disaster recovery setup: cross-region RDS replication, S3 and ECR replication, Step Functions failover, and fail-back. Keep RPO/RTO targets documented and verified.
Keep the security baseline green: WAF rules, Security Hub (FSBP, CIS), GuardDuty, Inspector and IAM least privilege. Triage findings and remediate HIGH and CRITICAL ones.
Run observability and alerting with Prometheus (AMP), Grafana, Loki and CloudWatch. Route alerts to the team's on-call channels, not a single mailbox.
Onboard new white-label tenants: network, buckets, DNS, certificates and partner IP allowlists.
Handle incidents and changes using the client's change process, and write short post-incident reports.
Control AWS cost: right-size workloads, scale sandbox pools to zero when idle, and report monthly spend trends to the client.
Keep runbooks, architecture pages and handover docs current in Confluence.
Join client meetings, explain technical trade-offs in plain English, and respond to client request.
Use AI-assisted engineering tools (e.g. Claude Code) responsibly to speed up IaC and pipeline work, with human review on every change.

5+ years in DevOps, SRE or platform engineering, with at least 3 years running production workloads on AWS
Hands-on Amazon EKS in production: upgrades, node scaling (Karpenter or Auto Mode), ingress or Gateway API, IRSA or Pod Identity, troubleshooting
Strong Terraform: multi-environment layout, reusable modules, remote state and locking, safe plan and apply in CI
CI/CD with Bitbucket Pipelines or GitHub Actions, plus Helm and a GitOps workflow (ArgoCD, Flux or a Helm deploy repo)
AWS networking and security: VPC design, NAT, VPC endpoints, peering, WAF, IAM, KMS, Secrets Manager, OIDC federation
Disaster recovery on AWS: cross-region replication for RDS and S3, failover runbooks and DR drills
Observability: Prometheus, Grafana, Loki or ELK/EFK, and alerting design
Linux and scripting in Bash and Python
Has worked in a regulated or security-sensitive domain (fintech, banking, payments) with ISO 27001 or SOC 2 style controls
Can own a client environment end to end: clear written English and confident in client calls
Can handle 2 or more projects at once and prioritise without close supervision

Own the AWS infrastructure for all platform environments (dev, staging, production and DR) through Terraform, with every change going through PR review and a pipeline plan.
Operate and upgrade the EKS clusters, including Auto Mode node pools for CPU and GPU sandboxes, Gateway API routing, add-ons and capacity limits.
Maintain the Bitbucket Pipelines and Helm GitOps flow that builds application images and promotes releases across environments.
Run and test the disaster recovery setup: cross-region RDS replication, S3 and ECR replication, Step Functions failover, and fail-back. Keep RPO/RTO targets documented and verified.
Keep the security baseline green: WAF rules, Security Hub (FSBP, CIS), GuardDuty, Inspector and IAM least privilege. Triage findings and remediate HIGH and CRITICAL ones.
Run observability and alerting with Prometheus (AMP), Grafana, Loki and CloudWatch. Route alerts to the team's on-call channels, not a single mailbox.
Onboard new white-label tenants: network, buckets, DNS, certificates and partner IP allowlists.
Handle incidents and changes using the client's change process, and write short post-incident reports.
Control AWS cost: right-size workloads, scale sandbox pools to zero when idle, and report monthly spend trends to the client.
Keep runbooks, architecture pages and handover docs current in Confluence.
Join client meetings, explain technical trade-offs in plain English, and respond to client request.
Use AI-assisted engineering tools (e.g. Claude Code) responsibly to speed up IaC and pipeline work, with human review on every change.

5+ years in DevOps, SRE or platform engineering, with at least 3 years running production workloads on AWS
Hands-on Amazon EKS in production: upgrades, node scaling (Karpenter or Auto Mode), ingress or Gateway API, IRSA or Pod Identity, troubleshooting
Strong Terraform: multi-environment layout, reusable modules, remote state and locking, safe plan and apply in CI
CI/CD with Bitbucket Pipelines or GitHub Actions, plus Helm and a GitOps workflow (ArgoCD, Flux or a Helm deploy repo)
AWS networking and security: VPC design, NAT, VPC endpoints, peering, WAF, IAM, KMS, Secrets Manager, OIDC federation
Disaster recovery on AWS: cross-region replication for RDS and S3, failover runbooks and DR drills
Observability: Prometheus, Grafana, Loki or ELK/EFK, and alerting design
Linux and scripting in Bash and Python
Has worked in a regulated or security-sensitive domain (fintech, banking, payments) with ISO 27001 or SOC 2 style controls
Can own a client environment end to end: clear written English and confident in client calls
Can handle 2 or more projects at once and prioritise without close supervision

Middle DevOps Engineer

Skills

Nice to have

Full description

Middle DevOps Engineer

Skills

Nice to have

Full description

NICE TO HAVE

Benefits