Senior DevOps Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Take ownership of the internal cloud infrastructure and serve as the main point of contact for cloud operations and infrastructure-related requests.

• Manage and continuously enhance the multi-account cloud ecosystem.

• Ensure adherence to security, governance, and compliance best practices.

• Support and maintain compliance with SOC 2 Type II and ISO 27001, ensuring audit evidence is consistently prepared.

• Operate and enhance identity and access management, which includes SSO, MFA, permissions, and joiner/mover/leaver processes.

• Maintain and oversee self-hosted internal services, guaranteeing service levels and efficient vulnerability resolution.

• Monitor cloud security and health through continuous posture management and proactive risk identification.

• Manage infrastructure costs and assist teams in identifying cost or reliability risks.

• Collaborate with engineering teams to enhance cloud-platform reliability, scalability, and operational excellence.

⛳️ Requirements

• Extensive expertise at the organizational level in AWS, including Organizations, Control Tower, multi-account landing zones, IAM/SCPs, Security Hub/GuardDuty, VPC, and multi-AZ networking.

• Infrastructure as code should be the sole method for infrastructure creation; experience with module design, state management, review, and promotion across environments is required.

• Proficient in at least one of Terraform/OpenTofu, CDK, or Pulumi.

• Capability to evolve existing systems towards SOC 2 and ISO 27001 compliance.

• Experience with IdP-backed SSO/MFA, centralized access management, and automated joiner/mover/leaver processes.

• Experience in self-hosting and managing shared internal tools, including deployment, upgrades, backups, and uptime ownership.

• Knowledge in observability and alerting design, plus availability for on-call duties for a distributed team.

• Understanding of cloud cost management / FinOps fundamentals.

• Proficient in Bash, Python, and/or Go for tooling development.

• Familiarity with Azure is a plus, but not mandatory.

• Comfortable navigating ambiguity in a remote-first setting and being the first hire in this function.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work opportunities.

• Professional development and training programs.

• Generous paid time off policy and holidays.

• Opportunity to work with a dynamic and innovative team.