Senior DevOps Engineer

This is a fully remote position, open to applicants in Asia.

📋 Description

• Take ownership and enhance Hupo's AWS infrastructure, including ECS Fargate, VPCs, IAM, RDS, PrivateLink, API Gateway, and more.

• Design and implement a strategy for AWS account organization, focusing on multi-account structures, AWS Organizations, SCPs, and landing zone patterns.

• Create and sustain multi-tenant deployment pipelines utilizing a TACOS system (Terraform Automation and Collaboration), ensuring workspace and state isolation for each client.

• Spearhead the design of AWS networking, focusing on VPC architecture, Transit Gateway, PrivateLink, NLB, and Private API Gateway to facilitate enterprise client integrations.

• Enhance the security and compliance posture for BFSI clients, adhering to standards such as SOC 2, ISO 27001, and conducting thorough enterprise security due diligence.

• Design and manage IAM Identity Center, cross-account role strategies, and external ID patterns for customer-deployed stacks.

• Oversee GitHub Actions workflows for CI/CD processes across various environments and services.

• Direct infrastructure design choices and produce Architecture Decision Records (ADRs), runbooks, and documentation.

• Provide mentorship to mid and junior engineers within the team.

⛳️ Requirements

• Minimum of 5 years of experience in a DevOps / Cloud / Platform Engineering role.

• Extensive AWS expertise, particularly in multi-account architecture, VPC networking, IAM, ECS, and Terraform.

• Knowledge of AWS account organization, including AWS Organizations, SCPs, Control Tower, or similar landing zone patterns.

• Proficient in advanced networking concepts such as Transit Gateway, PrivateLink, VPC Endpoint Services, NLB, and Route 53 private zones.

• Experience with IaC orchestration (TACOS), utilizing tools like Spacelift, Terraform Cloud, Atlantis, or comparable solutions.

• Strong skills in designing and troubleshooting GitHub Actions CI/CD workflows.

• Background in security engineering, encompassing IAM policies, least-privilege principles, audit trails, and secrets management.

• Ability to work comfortably in asynchronous settings across various time zones.

🏝️ Benefits

• Competitive salary.

• Flexible working hours.

• Opportunities for professional development.