Senior DevOps Engineer

This is a fully remote position, open to applicants in Poland.

📋 Description

• Take ownership and enhance Mailtrap's production infrastructure, which is a multi-region AWS platform that supports high-volume email sending and testing.

• Ensure the infrastructure is reliable, secure, and cost-effective.

• Plan and implement a phased migration of specific workloads from AWS to rented bare-metal or colocation infrastructure.

• Determine which workloads will transition and which will remain on AWS.

• Design the target bare-metal platform, likely utilizing Kubernetes or a similar orchestration tool.

• Manage the migration process from start to finish, including business case development through to cutover.

• Operate and enhance AWS multi-account and multi-region infrastructure.

• Maintain Terraform modules and workspaces.

• Ensure safe infrastructure changes across network, storage, and services with zero-downtime deployments.

• Operate ECS services, manage blue/green deployments, and oversee Docker image pipelines.

• Manage reliability using CloudWatch, PagerDuty, Sentry, capacity planning, and cost tagging.

• Maintain security standards using IAM, SSM secrets, and Cloudflare edge rules.

• Collaborate with engineers on release automation and production readiness.

• Maintain AWS and rented bare-metal infrastructure as a cohesive hybrid platform.

• Develop the business and technical rationale for workloads transitioning off AWS versus remaining.

• Design the bare-metal/colocation landing zone, encompassing compute, network, storage, observability, and secrets.

• Create migration waves, dependency maps, and cutover/rollback plans.

• Establish hybrid connectivity and manage dual-run periods to shift traffic securely.

• Replace or relocate managed services when advantageous.

• Coordinate with colocation providers, vendors, timelines, and engineering teams; report on progress and risk.

⛳️ Requirements

• Over 5 years of senior DevOps/platform experience with ownership of production environments.

• Extensive AWS expertise, including VPC, ECS, IAM, RDS/ElastiCache or equivalents, and networking.

• Experience with Terraform at scale, including modules and remote state/Terraform Cloud.

• Proficient in CI/CD using GitHub Actions, including automated production deployments such as blue/green deployments.

• Familiarity with Docker containers and the ability to operate services on ECS or Kubernetes.

• Strong understanding of Linux networking principles, including DNS, TLS, load balancing, firewalls, VPN, and hybrid networking.

• Documented experience in planning and executing migrations to on-premises, colocation, or private cloud infrastructure.

• Capability to lead multi-quarter infrastructure initiatives involving TCO, design, vendors, cutover, and rollback.

• Skilled in automating operational tasks using shell and/or Python.

• Proficient in spoken and written English.

• Highly preferred: experience with colocation/bare-metal operations, IPAM/NetBox, Ansible, Packer or equivalents, and HAProxy/Nginx.

• Highly preferred: transitioning managed AWS services to self-hosted solutions such as Postgres HA, Redis/Valkey, Kafka, and OpenSearch.

• Highly preferred: expertise in email infrastructure including MTA, SMTP, IP reputation, DKIM/SPF/DMARC, with Halon or similar solutions.

• Highly preferred: familiarity with Cloudflare DNS/WAF/Access.

• Highly preferred: experience in observability beyond CloudWatch, such as Prometheus/Grafana/Loki.

• Highly preferred: background in multi-region SaaS or EU data residency.

• Highly preferred: a cost-driven architecture/FinOps mindset.

• Plus: knowledge of GCP, Ruby or Go, and AWS certifications.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible working hours and the option for remote work.

• Opportunities for professional development and continued education.

• A collaborative and innovative work environment.