DevOps Engineer

Role summary

Own and operate our AWS/Linux estate for the SaaS solutions hosted by the business. Apply strong information security practices (least-privilege IAM, patching, secrets management, TLS, vulnerability remediation). Bring serverless awareness to choose the right architecture per use case. Collaborate with engineering to plan safe releases, improve observability, and drive reliability and cost efficiency.

Responsibilities

• Design, provision, and operate AWS infrastructure (EC2/ASG, ELB, MySQL, S3, IAM, VPC, CloudWatch).
  
• Build and maintain Terraform modules, backends, and promotion workflows; review infra changes via PRs.
  
• Manage Linux systems (Rocky): hardening, patching, systemd, storage/filesystems.
  
• Own Puppet configuration management (modules, manifests, environments).
  
• Containerize with Docker; maintain images, registries, and runtime configuration.
  
• Operate MySQL users/roles, backups/restores, parameter tuning, slow-query triage. Ability to build replicable slaves and troubleshoot
  
• Engineer networking: VPC/subnets, routing, SGs/NACLs, DNS (Route 53), VPN/Direct Connect, TLS/PKI.
  
• Apply information security controls: IAM least privilege, secrets (SSM/Secrets Manager), patch compliance, vuln remediation, access reviews. Awareness of ISO 27001.
  
• Introduce serverless where it fits (Lambda jobs, event processing, light APIs); integrate with existing services.
  
• Observability: metrics/logs/traces, dashboards/alerts, runbooks, on-call participation and incident reviews.
  
• Cost stewardship: rightsizing, autoscaling policies, storage lifecycle, monthly reviews and actions.
  
• Ability to script with Bash and Python.
  
• Administer TeamCity & Jenkins: jobs/pipelines for build, test, packaging, and controlled deployments; agent fleet hygiene and backups.
  
• Participate in on-call rota.
  
• Documentation & knowledge transfer: playbooks, handover notes, and KT sessions.

Required skills & experience

• Expert AWS and Linux administration in production.
  
• Strong networking fundamentals (TCP/IP, HTTP/TLS, routing, load balancing, firewalls).
  
• Solid MySQL operations (backup/restore, replication basics, performance).
  
• Terraform (modules, backends, testing, code review).
  
• Puppet (module design, environments).
  
• Docker (image authoring, multi-stage builds, registry usage).
  
• Scripting for automation (Bash plus one of Python).
  
• Experience supporting Java services alongside LAMP components.
  
• Demonstrable information security mindset and practice.

Nice to have

• Ansible for ad-hoc/host lifecycle tasks.
  
• Containers orchestration basics (ECS/EKS/Kubernetes).
  
• Nginx/Apache tuning, reverse proxying.
  
• HashiCorp toolchain (Packer, Vault), SSM Parameter Store/Secrets Manager patterns.
  
• Monitoring stacks (Nagios, APM) and alert design.