DevOps Engineer — AWS

What you'll do

• Own our AWS estate: VPC design, EC2/ECS/EKS workloads, RDS, S3, CloudFront, Route 53 and IAM — architected for uptime and least privilege.
• Codify all of it in Terraform (or CloudFormation) so environments are reproducible and reviewable instead of hand-built and undocumented.
• Build and maintain CI/CD pipelines (GitHub Actions) that take a merge to production safely — including rollbacks that genuinely work under pressure.
• Containerise services with Docker and run them with sensible autoscaling, health checks and zero-downtime deployments.
• Put monitoring, logging and alerting in place (CloudWatch, Prometheus/Grafana, ELK) so we hear about problems before our clients do.
• Harden environments for payment-grade workloads: secrets management, network segmentation, encryption in transit and at rest, and audit trails that satisfy PCI-DSS review.
• Own backups, disaster recovery and the runbooks that make a bad day survivable — and rehearse them rather than assume them.
• Keep the AWS bill honest through right-sizing, reserved capacity, storage lifecycle policies and per-environment cost visibility.
• Support the engineering teams day to day: Linux and nginx troubleshooting, PostgreSQL/MySQL operations, and unblocking releases.

What you bring

• 8–10 years in DevOps, SRE or infrastructure engineering, with deep AWS specialisation (certification welcome; production scars preferred).
• Production Terraform or CloudFormation experience — you have built environments from an empty account upward.
• Strong Docker skills and container orchestration in production (ECS and/or EKS).
• End-to-end CI/CD ownership — GitHub Actions, GitLab CI or Jenkins — including artefacts, caching and secure secret handling.
• Confident Linux administration and scripting (Bash/Python), nginx configuration, TLS and DNS.
• Monitoring and incident-response experience: you have been on call, and you improved the system until the pager stopped firing.
• Database operations on PostgreSQL and/or MySQL — backups, restores, replication and performance basics.

Bonus points

• Security and compliance exposure: PCI-DSS, HIPAA or GDPR-driven controls.
• Kubernetes at scale, service meshes, or multi-region architectures.
• Cost-optimisation wins you can put a number against.
• Supporting mobile release infrastructure — build servers, artefact stores, OTA distribution.