We are looking for a DevOps Engineer to own and harden Utilen's cloud infrastructure and delivery pipeline. This person will bring our AWS environment fully under Terraform, mature our CI/CD, strengthen observability and security posture, and reduce the manual, hand-applied steps that currently sit between a merge and production.

‍

Key Responsibilities

‍

• Own infrastructure-as-code: manage and extend the Terraform configuration covering ECS services, networking, security groups, WAF, RDS, S3/MinIO, and supporting AWS resources.
• Eliminate configuration drift by backfilling hand-applied CLI changes into Terraform and enforcing IaC as the source of truth.
• Build and maintain CI/CD pipelines (self-hosted Gitea) for reliable, repeatable builds and deployments to ECS via ECR — replacing manual image builds and pushes.
• Manage container builds and the ECR image lifecycle, including consistent tagging and promotion strategies between dev, pre-production, and production.
• Own observability: CloudWatch metrics, logs, alarms, and dashboards; ensure log exports, access logging, and flow logs are in place across services.
• Lead infrastructure security and compliance work: IAM/SSO (Identity Center), WAF rules, encryption, access logging, and remediation of SOC 2 audit findings.
• Diagnose production infrastructure issues across networking, service discovery, container connectivity, and environment configuration.
• Manage secrets, environment configuration, and credential rotation; drive least-privilege access and remove static long-lived keys.
• Partner with engineering to make deploys safe, fast, and self-service.

Required Qualifications

‍

• 3+ years in DevOps, SRE, or infrastructure engineering.
• Hands-on production experience with AWS (ECS, ECR, VPC, IAM, RDS, S3, CloudWatch, WAF).
• Strong Terraform skills and a track record of managing real infrastructure as code.
• Solid Docker/containerization experience and CI/CD pipeline design.
• Comfortable with Linux, networking fundamentals, and debugging distributed systems.
• Scripting proficiency (Python, Bash, and/or PowerShell).

‍

Preferred / Nice to Have

‍

• Experience operating multi-tenant SaaS on ECS or Kubernetes.
• Familiarity with SOC 2 controls and audit remediation.
• Experience with self-hosted CI (Gitea Actions or similar) and ECR-based deployment workflows.
• Knowledge of Celery/Redis, PostgreSQL operations, and message-broker troubleshooting.

‍