DevOps

Novacard

WorldwideremotePosted 1 month ago

Skill Required

DevOps-EngineerCloud-EngineerPlatform-EngineeringSite-Reliability-EngineeringAWS-EngineeringDevOpsDevOps-DevelopmentIT-DevOpsDevOps-ManagementDevOps-SolutionsCloud-DevOpsDevOps-and-Cloud-OperationsDevOps-SupportBackup and RecoveryDockertroubleshootingObservabilityEngineeringPostgreSQLKubernetesPrometheusnetworkingautomationElasticsearchGitHub ActionsTerraformRabbitMQsecuritybuildingfintechdesignGitKafkaRedisVaultLinuxCI/CDFulltime

Key highlights

Key requirement: Ability to design AWS network and EKS infrastructure from scratch to production handover
Key benefit: Opportunity to build a production-ready platform from scratch
Notable requirement: Strong AWS and Kubernetes (EKS) expertise
Notable requirement: Experience with Terraform and CI/CD (preferably GitLab CI)

Role overview

At NOVACARD, we’re redefining how people use credit. We are the first interest-free and no-annual-fee credit card in Mexico, designed to simplify personal finances and give users complete control - all from a mobile app. Our mission is to empower people to make smarter financial decisions by offering flexibility, transparency, and the freedom they need to reach their goals. We’re looking for a DevOps Engineer to design, deploy, and operate AWS infrastructure for a large-scale migration of a digital financial product. You’ll build and maintain a production-ready platform covering AWS networking, Kubernetes/EKS, CI/CD, observability, backup/restore, and secure access management, collaborating closely with development, system analysis, QA, and engineering teams to ensure fast delivery, stable services, and a controlled migration.

Responsibilities

Design, deploy, and maintain AWS infrastructure: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.
Configure AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.
Ensure HA, backup/restore, disaster recovery, and production infrastructure principles.
Create and maintain AWS infrastructure as code using Terraform.
Build and operate Kubernetes on AWS (EKS).
Work with core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.
Use Helm for application management.
Configure Ingress Controller, Load Balancer, and TLS/certificates.
Understand Kubernetes storage and ensure stateful applications run reliably.
Work with Docker: image builds, registry, container troubleshooting.
Build CI/CD processes, preferably with GitLab CI.
Automate deployment of applications and dependent services.
Integrate infrastructure changes into pipelines and maintain reproducible environments.
Set up monitoring with Prometheus + Grafana: metrics and alerts.
Organize centralized log collection and analysis: Loki/ELK/OpenSearch.
Diagnose network and system issues in Linux.
Ensure production stability, respond to incidents, and eliminate root causes.
Manage secrets: AWS Secrets Manager / Vault/OpenBao / External Secrets.
Configure RBAC/IAM and follow the principle of least privilege.
Ensure secure service-to-service communication and infrastructure access.
Support PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.
Ensure backup/restore and fault tolerance for stateful services.
Help teams deploy and maintain dependent services in Kubernetes.

Requirements

Strong AWS experience: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.
Good understanding of AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.
Hands-on experience building and operating Kubernetes on AWS (EKS).
Understanding of core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.
Experience with Helm.
Experience configuring Ingress Controller, Load Balancer, and TLS/certificates.
Experience with Docker: image builds, registry, container troubleshooting.
Understanding of Kubernetes storage and stateful application operation.
Terraform — creating and maintaining AWS infrastructure as code.
Experience building CI/CD, preferably GitLab CI.
Experience with PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.
Understanding of HA, backup/restore, disaster recovery, and production infrastructure principles.
Monitoring: Prometheus + Grafana, configuring metrics and alerts.
Centralized log collection and analysis: Loki/ELK/OpenSearch.
Secrets management: AWS Secrets Manager / Vault/OpenBao / External Secrets.
Linux administration and confident diagnosis of network and system issues.
Experience configuring RBAC/IAM and following the principle of least privilege.
Ability to design an AWS network from scratch → set up EKS → deploy an application and dependent services → configure ingress/DNS/TLS → CI/CD → monitoring/logging → backup → hand over a production-ready infrastructure for operation.

Nice to have

Experience migrating lending systems or fintech products.
Experience building CI/CD with GitLab CI.
Hands-on experience with Vault/OpenBao, External Secrets.
Experience with Kafka and stateful services in Kubernetes.

Benefits

Participation in a large-scale migration of a digital financial product.
Work with a modern stack: AWS, Kubernetes/EKS, Terraform, CI/CD, Prometheus/Grafana.
Close collaboration with development, system analysts, QA, and engineers.
Opportunity to build a production-ready platform from scratch and hand it over to operations.