Posted today · be early

DevOps

Novacard

WorldwideremotePosted 1 day ago

Skill Required

DevOps-EngineerCloud-EngineerPlatform-EngineeringSite-Reliability-EngineeringAWS-EngineeringDevOpsDevOps-DevelopmentIT-DevOpsDevOps-ManagementDevOps-SolutionsCloud-DevOpsDevOps-and-Cloud-OperationsDevOps-SupportBackup and RecoveryDockertroubleshootingObservabilityEngineeringPostgreSQLKubernetesPrometheusnetworkingautomationElasticsearchGitHub ActionsTerraformRabbitMQsecuritybuildingfintechdesignGitKafkaRedisVaultLinuxCI/CDFulltime

Key highlights

Role supports large-scale migration of NOVACARD’s digital financial product
Must-have technical skills include AWS, Kubernetes/EKS, Terraform, CI/CD, Prometheus/Grafana, and Linux administration
Key perk: opportunity to build a production-ready infrastructure platform from scratch
Critical practical requirement: ability to deliver end-to-end production-ready AWS infrastructure from network design to final handover
NOVACARD is Mexico’s first interest-free, no-annual-fee credit card product
Work terms and format are customized and discussed individually with candidates

Role overview

NOVACARD is Mexico’s first interest-free, no-annual-fee credit card fintech, designed to simplify personal finances and give users full control via a mobile app. Users can access up to $200,000 MXN in credit, only pay when they use it, and manage all finances digitally in under 5 minutes. The company’s mission is to empower people to make smarter financial decisions through flexibility, transparency, and the freedom to reach their goals, with the tagline 'Simple finances, big goals.' This DevOps Engineer role will design, deploy, and operate AWS infrastructure for a large-scale migration of NOVACARD’s digital financial product, building and maintaining a production-ready platform covering AWS networking, Kubernetes/EKS, CI/CD, observability, backup/restore, and secure access management, while collaborating closely with development, system analysis, QA, and engineering teams to ensure fast delivery, stable services, and a controlled migration.

Responsibilities

Design, deploy, and maintain AWS infrastructure including VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, and Route53
Configure AWS networking including public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, and routing
Ensure high availability, backup/restore, disaster recovery, and adherence to production infrastructure principles
Create and maintain AWS infrastructure as code using Terraform
Build and operate Kubernetes on AWS (EKS)
Work with core Kubernetes objects including Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, and ServiceAccount
Use Helm for application management
Configure Ingress Controller, Load Balancer, and TLS/certificates
Understand Kubernetes storage and ensure stateful applications run reliably
Work with Docker for image builds, registry management, and container troubleshooting
Build CI/CD processes, preferably with GitLab CI
Automate deployment of applications and dependent services
Integrate infrastructure changes into pipelines and maintain reproducible environments
Set up monitoring with Prometheus + Grafana for metrics and alerts
Organize centralized log collection and analysis using Loki/ELK/OpenSearch
Diagnose network and system issues in Linux
Ensure production stability, respond to incidents, and eliminate root causes
Manage secrets using AWS Secrets Manager / Vault/OpenBao / External Secrets
Configure RBAC/IAM and follow the principle of least privilege
Ensure secure service-to-service communication and infrastructure access
Support PostgreSQL, Redis, and RabbitMQ/Kafka at the infrastructure and application integration level
Ensure backup/restore and fault tolerance for stateful services
Help teams deploy and maintain dependent services in Kubernetes

Requirements

Strong AWS experience with VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, and Route53
Good understanding of AWS networking including public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, and routing
Hands-on experience building and operating Kubernetes on AWS (EKS)
Understanding of core Kubernetes objects including Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, and ServiceAccount
Experience with Helm
Experience configuring Ingress Controller, Load Balancer, and TLS/certificates
Experience with Docker for image builds, registry management, and container troubleshooting
Understanding of Kubernetes storage and stateful application operation
Experience creating and maintaining AWS infrastructure as code with Terraform
Experience building CI/CD, preferably with GitLab CI
Experience with PostgreSQL, Redis, and RabbitMQ/Kafka at the infrastructure and application integration level
Understanding of high availability, backup/restore, disaster recovery, and production infrastructure principles
Experience with monitoring using Prometheus + Grafana, including configuring metrics and alerts
Experience with centralized log collection and analysis using Loki/ELK/OpenSearch
Experience with secrets management using AWS Secrets Manager / Vault/OpenBao / External Secrets
Linux administration skills and ability to confidently diagnose network and system issues
Experience configuring RBAC/IAM and following the principle of least privilege
Ability to design an AWS network from scratch, set up EKS, deploy an application and dependent services, configure ingress/DNS/TLS, set up CI/CD, implement monitoring/logging and backup, and hand over a production-ready infrastructure for operation

Nice to have

Experience migrating lending systems or fintech products
Experience building CI/CD with GitLab CI
Hands-on experience with Vault/OpenBao and External Secrets
Experience with Kafka and stateful services in Kubernetes

Benefits

Participation in a large-scale migration of a digital financial product
Opportunity to work with a modern tech stack including AWS, Kubernetes/EKS, Terraform, CI/CD, and Prometheus/Grafana
Close collaboration with development, system analysts, QA, and engineering teams
Opportunity to build a production-ready platform from scratch and hand it over to operations
Flexible terms and work format discussed individually with the candidate