Senior DevOps Engineer

Key Responsibilities Infrastructure Management (AWS) Own and manage the entire AWS infrastructure — EC2, RDS, S3, ECS/EKS, VPC, IAM, CloudFront, Route 53, and related services. Design for high availability and fault tolerance; ensure infra can handle payment-grade uptime requirements. Right-size and optimise infrastructure for cost without compromising reliability. Maintain environment parity across dev, staging, and production. CI/CD Pipelines Build, maintain, and continuously improve CI/CD pipelines across all services supporting a daily release cadence. Manage deployment triggering across multiple AWS availability zones; handle traffic routing between zones including manual intervention when required. Ensure fast, reliable, and safe deployments with rollback capabilities and pre/post-release health checks. Work closely with the engineering team to reduce deployment friction and maintain release velocity. Manage branching strategies, environment promotion, and deployment gates. Monitoring, Alerting & Incident Response Own site monitoring end-to-end — set up and maintain CloudWatch and Site24x7 (or equivalent) for uptime checks, dashboards, log aggregation, and alerting. SENIOR DEVOPS ENGINEER Shopse | Full-Time | Own the Infra. Keep Us Running. Configure intelligent alerting rules that surface real issues without creating noise; maintain runbooks for common alert scenarios. Be the first responder for production alerts — acknowledge, triage, and resolve or escalate within defined SLAs. Proactive action on alerts is a core expectation of this role. Conduct root cause analysis (RCA) for all production incidents and drive fixes to prevent recurrence. Maintain an on-call schedule; this role requires availability outside business hours for critical alerts. System Automation Automate repetitive operational tasks — provisioning, scaling, patching, backups, and configuration management. Manage infrastructure-as-code using Terraform or equivalent; no manual console changes in production. Automate monitoring setup, alerting thresholds, and runbook execution wherever possible. Security & Compliance Implement and maintain security rules, firewall policies, network ACLs, and IAM roles with least-privilege principles. Manage VPN setup and access controls for internal teams and vendors. Manage access provisioning and deprovisioning for all team members across AWS and related services. Ensure infrastructure compliance with PCI DSS and ISO 27001 requirements — work closely with the InfoSec Lead on audit evidence and remediation. Manage SSL/TLS certificates, key rotation, secrets management (AWS Secrets Manager / Vault), and encryption at rest and in transit. Releases & Server Operations Coordinate and execute daily production releases — validate pre-release checklists, trigger deployments across zones, manage traffic routing, and monitor post-release health. Handle server maintenance, OS upgrades, dependency patching, and scheduled downtime windows. Manage database backups, restoration drills, and disaster recovery procedures. Maintain up-to-date infrastructure documentation and runbooks. AI-Augmented Development Infrastructure Design and manage infrastructure for AI-assisted development workflows — including on-demand provisioning and teardown of ephemeral EC2 or container instances used by AI dev tools such as Claude Code. Integrate AI dev tooling into CI/CD pipelines — enabling automated code generation, review, and testing stages that spin up isolated compute, execute tasks, and clean up on completion. Implement IAM policies, network boundaries, and cost guardrails for ephemeral AI development instances. Build monitoring and observability into AI-augmented pipelines — tracking instance lifecycle, run times, failure rates, and compute costs. Requirements Essential Experience 5–8 years of hands-on DevOps or infrastructure engineering experience. Deep, practical AWS expertise — EC2, RDS, ECS/EKS, VPC, IAM, ALB, Route 53, CloudWatch. Ability to architect, troubleshoot, and optimise independently. Proven experience building and maintaining CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, or equivalent) including multi-zone deployments. What we really mean by 'reliable and dependable' In a payments business, infrastructure failures have real, immediate consequences for merchants and customers. We need someone who treats a production alert at 11 PM the same way they would at 11 AM — someone who does not need to be chased, who over-communicates during incidents, and who takes pride in a green dashboard. If that describes you, we want to talk. Hands-on experience with monitoring stacks — CloudWatch, Site24x7, Grafana, Prometheus, Datadog, or equivalent. Infrastructure-as-code using Terraform, CloudFormation, or Pulumi. Strong scripting skills — Python, Bash, or equivalent. Container experience — Docker and Kubernetes (EKS or self-managed). Experience managing VPN solutions (OpenVPN, AWS Client VPN, WireGuard, or equivalent). Access management experience — provisioning, deprovisioning, and periodic reviews across cloud and tooling. Nice to Have Experience integrating AI dev tools (Claude Code, GitHub Copilot, Cursor, or similar) into CI/CD pipelines. Familiarity with ephemeral environment patterns for automated testing or AI-assisted workflows. AWS certifications — Solutions Architect, DevOps Engineer Professional, or Security Specialty. Familiarity with PCI DSS infrastructure requirements and ISO 27001 technical controls. Experience in a fintech, payments, or BFSI environment.