devops engineer for live products

The company operates a portfolio of live, revenue-generating products, including multiple applications with distinct architectures and audiences, as well as shared services.

• Own cloud infrastructure, reliability, and deployment tooling across multiple live products and AWS accounts
• Administer and harden a multi-account AWS Organization, including IAM, administrative credentials, and secrets management
• Manage EC2 fleets, load balancers, Auto Scaling Groups, launch templates, and golden-AMI deployment pipelines; modernize standalone instances toward containerized or more resilient patterns where appropriate
• Administer Amazon Aurora MySQL clusters, including read replica strategy, least-privilege service accounts, and CDC-based real-time data pipelines
• Operate the Tailscale zero-trust network and migrate legacy DNS to modern DNS/CDN infrastructure
• Own and improve GitLab CI/CD pipelines across PHP and Laravel applications, including migrating hardcoded secrets to managed CI/CD variables and parameter stores
• Build monitoring capabilities, define on-call and runbook practices, and lead production incident response, including root-cause writeups
• Manage AWS WAF rules, resolve dependency and Composer security advisories, manage certificate lifecycles, and reduce operational risk
• Support the in-house engineering team and outside contractors, and coordinate with third-party MSPs supporting related properties

• 5+ Years in a DevOps, SRE, or infrastructure role with hands-on AWS experience
• Experience configuring IAM policies, debugging Aurora replication, tuning Auto Scaling, and writing CloudFormation or Terraform from scratch
• Production incident experience, including identifying root causes and applying fixes across configuration, images/AMIs, and CI/CD source of truth
• Strong Linux systems administration fundamentals, including filesystems, systemd, log management, disk and volume operations, and access recovery
• Experience designing CI/CD pipelines and implementing secrets management
• Ability to support and gradually modernize legacy PHP code while building reliability tooling for a Laravel application
• Sound judgment around production risk and clear communication of live incidents to non-technical stakeholders
• Будет плюсом: GitLab CI/CD experience

• Russia