Senior Software Engineer (DevOps)

[About the Role]

We're a fast-moving startup looking for a hands-on Senior Software Engineer (DevOps) to own and evolve our infrastructure. You'll work closely with the engineering team to streamline deployments, improve reliability, and help us accelerate deployment process. This is a high-impact, high-ownership role where your decisions shape how we build and ship.

[Responsibilities]

Infrastructure & Deployment

- Own and evolve CI/CD pipelines built on GitHub Actions, and integrate with GCP Artifact Registry for Docker image management

- Manage and optimize cloud infrastructure on Google Cloud Platform (GCP)

- Containerize and orchestrate services using Docker and Docker Compose, with a planned migration toward Kubernetes (K8s)

- Lead on-premises deployment initiatives — evaluating, implementing, and continuously optimizing self-hosted infrastructure

- Occasionally travel to client sites for on-premises deployment and support as needed

Observability & Operations

- Design and build the service monitoring and alerting system using the Grafana ecosystem (Grafana, Prometheus, OpenTelemetry) to detect and help resolve production issues

- Continuously improve automation for service maintenance and operations, reducing manual toil

- Support task management and product release management, ensuring smooth and predictable deployments

- Drive a culture of high-quality software development and deployment processes across the engineering team

Security, Compliance & Governance

- Embed security and compliance controls into infrastructure and workflows

- Implement and manage secrets management practices (e.g. GCP Secret Manager, Vault)

- Define and enforce IAM policies and access governance across cloud resources and CI/CD pipelines

- Run regular vulnerability scanning on container images and infrastructure, and drive remediation

- Establish baseline security hardening practices for infrastructure and deployment pipelines

[Requirements]

- Solid experience with GCP (Artifact Registry, Cloud Run, GKE, IAM, VPC Networking, etc.)

- Proficient with Docker and container workflows; hands-on with Docker Compose in production or near-production environments

- Proven experience building end-to-end CI/CD pipelines with GitHub Actions

- Hands-on with the Grafana ecosystem (Grafana, Prometheus, OpenTelemetry) for metrics, logs, tracing, dashboards, and alerting

- Familiarity with on-premises / self-hosted deployment and infrastructure optimization

- Working knowledge of Kubernetes concepts; experience or strong motivation to lead K8s adoption

- Experience with security best practices — secrets management, IAM governance, container/infra vulnerability scanning

- Comfortable scripting in Bash, Python, or similar

[Nice to Have]

- Experience migrating from Docker Compose to Kubernetes

- Familiarity with GitOps tools (ArgoCD, Flux)

- Infrastructure-as-code experience (Terraform, Pulumi)

- Hands-on experience instrumenting services with OpenTelemetry SDKs

- Familiarity with compliance frameworks (SOC 2, ISO 27001) is a plus