Senior Infrastructure / DevOps Engineer

Senior Infrastructure Engineer, Platform & Security Sobat Bisnis Group (SBG) · Archiera / Nexion · Jakarta · Full-time About SBG SBG builds the platforms behind some of Indonesia's most demanding enterprises - banks (finserv), hospitals, and insurers. When a regulated client needs infrastructure that holds up to audit, they come to us. Our work spans cloud and on-premise, and the bar is the same everywhere: secure, reproducible, and built to last. About the role We're hiring a Senior Infrastructure Engineer to own how we build, secure, and operate infrastructure across cloud and on-premise environments. You'll set the standard, the baselines every client environment inherits, and be the person who makes "secure by default" real rather than aspirational. This role carries genuine ownership: you design the architecture, you don't just execute tickets. What you'll do Own infrastructure across AWS and client on-premise environments, provisioned entirely as code with Terraform + Terragrunt. Design network segmentation, secrets management, and system hardening to banking- and healthcare-grade standards, aligned to Indonesia's Personal Data Protection Law (UU PDP). Build and maintain CI/CD across GitLab CI/CD and GitHub Actions (OIDC), with containerized delivery via Docker for a Go / Java / Next.js / Angular / PostgreSQL stack. Establish observability — logging, monitoring, alerting — and lead incident response. Drive cost efficiency: right-sizing, reserved/spot strategy, and eliminating waste (NAT Gateway, idle load balancers, EKS control-plane overhead). Set the documentation and runbook standard so the team operates with confidence and independence. Minimum qualifications 5+ years in infrastructure, DevOps, or platform engineering. Production experience with Terraform and infrastructure-as-code. Strong Linux, networking (VPC, subnet, firewall, VPN), and Docker. Hands-on CI/CD with GitLab CI/CD and/or GitHub Actions. Depth in at least one major cloud (AWS preferred). Proven security judgment: IAM least-privilege, secrets management, TLS, system hardening. Comfortable delivering in both cloud and on-premise environments. Preferred qualifications Experience in regulated environments (banking, fintech, healthcare, insurance) or passing formal security audits. Terragrunt and Kubernetes in production. Familiarity with Indonesia's UU PDP and data-residency requirements. Demonstrated cost-optimization / FinOps track record. Relevant certifications (AWS Solutions Architect / SysOps, CKA, Security+). What we offer End-to-end ownership of infrastructure architecture across a portfolio of tier-1 clients. A small, high-trust team with minimal bureaucracy and fast decisions. Hybrid / remote with flexible hours.