DevOps Engineer (for our partner group)

About the role
No legacy, no bureaucracy, no corporate bullshit — just you and a small but incredibly strong engineering team making the right technical decisions together.
This is payment infrastructure, so the bar for reliability and security is high: we're building toward PCI DSS, with strict environment separation (non-prod / pre-prod / prod) and infrastructure-as-code across the board. You won't just "keep the lights on" — you'll design and lay the foundation.
AI-first. We're AI-first across the board, engineering included: routine and ops work is automated through AI agents and AI tooling, IaC and runbooks are written and maintained with AI. We're not just "aware of AI" — we build infrastructure so agents can safely operate and change it.
Important: we need a strong engineer with deep technical background who makes decisions independently and owns the outcome. The engineering team is top-tier, and the bar is high. We're not looking for average.

What you'll do

Infrastructure as Code: design and evolve Terraform modules for AWS (composite module, accounts as code), multi-environment layout across non-prod / pre-prod / prod
Kubernetes: operate and evolve EKS clusters — workloads, namespaces, resources, autoscaling, network policies
CI/CD: pipelines (GitHub Actions) — build, test, deliver; speeding up and stabilizing pipelines, smooth delivery of changes
GitOps / delivery: Helm charts, ArgoCD — declarative deployment of services to the cluster
Secrets & access: secrets management, rotation, no secrets in code, least privilege
Observability: metrics and alerting (Amazon Managed Prometheus + Amazon Managed Grafana), dashboards, SLOs, incident response
Security & networking: IAM, environment separation, access (Okta, Twingate)
Databases (operations): PostgreSQL (RDS), Redshift — parameters, backups, secret rotation, safeguarding scope
Reliability: cost control, capacity planning, production-readiness (HA where it matters), runbooks

Stack
Cloud: AWS (EKS, RDS, IAM, etc.)
IaC: Terraform
Containers/orchestration: Docker, Kubernetes (EKS), Helm
GitOps: ArgoCD
CI/CD: GitHub Actions
Observability: Amazon Managed Prometheus (AMP), Amazon Managed Grafana (AMG)
Database: PostgreSQL (RDS), AWS Redshift (OLAP)
Auth / access: Okta, Twingate
AI: AI-first — active use of AI tools and agents in daily work

Requirements
Must have:
5+ years in DevOps / SRE / Platform Engineering
AWS — production experience (EKS, IAM, VPC, RDS)
Terraform — modules, state, multi-environment layouts
Kubernetes — production operations, Helm
CI/CD — building and maintaining pipelines
Linux, networking, scripting (Bash + Python or Go)
Secrets management and security basics (IAM, least privilege)
Observability — metrics/logs/alerting (Prometheus/Grafana or equivalents)
AI-fluency — active integration of AI tools (Claude Code, Cursor, Codex) into daily engineering work. Not just "aware of AI" — uses it to multiply productivity, with a critical eye for generated output
Proactivity — identifies problems before they surface, proposes solutions, drives them to done. Doesn't wait to be told what to do
English: confident reading and listening is a must. Good spoken English is a strong plus

Nice to have:
Fintech / payments / banking — infrastructure experience under regulation
PCI DSS — experience building toward or passing it
ArgoCD / GitOps
Amazon Managed Prometheus / Grafana
AWS Redshift
Experience with pre-prod/prod separation and multi-account AWS