Senior DevOps Engineer

Fig; Toronto; Hybrid; CAD 150,000 - 170,000; Full time

Benefits offered by this job

Hybrid work

Competitive salary

Retirement plan

Health benefits

Vacation & wellness

Parental leave

Education stipend

Job summary

Fig, a Canadian fintech, is hiring a Senior DevOps Engineer to own and evolve the cloud platform that runs our products. You’ll manage our AWS environment end-to-end, using Terraform, ECS, and PostgreSQL on RDS, with GitHub Actions for CI/CD.

The role reports to the VP of Engineering and involves a hands-on, cross-functional setup. You’ll join a small, ambitious team in a hybrid work model (one day a week in Toronto) and will shape infrastructure standards, security controls, and reliability.

Qualifications

• 6+ years in platform, DevOps, SRE, or infrastructure engineering with hands-on AWS experience.
• Terraform production experience including modules, state management and change workflows.
• Hands-on experience running containerized services on ECS and building CI/CD pipelines, ideally with GitHub Actions.
• Experience keeping production systems reliable with observability, on-call, and incident response, and operating PostgreSQL on RDS.

Responsibilities

• Run and evolve our multi-account AWS environment on Control Tower, including access management and preventive/detective controls.
• Manage infrastructure in Terraform with reusable modules and drift detection.
• Make infrastructure changes safe via policy-as-code, automated plan checks, and approval gates.
• Build and improve CI/CD on GitHub Actions for frequent, safe deployments to ECS with approvals and quick rollbacks.
• Design and run networking, including secure connectivity to banking partners and third-party providers.
• Implement and operate security controls with the CISO, including secrets, encryption, logging, and threat detection for auditors.
• Build reliability through observability, backups, and tested disaster recovery for services and PostgreSQL databases.
• Participate in on-call rotation as platform expert and provide runbooks, automation, and clear documentation for engineers.
• Raise the bar through thoughtful design and thorough code reviews, mentoring teammates.

Skills

Pragmatic technical decisions

Clear trade-off communication

Tools

Terraform

GitHub Actions

ECS

RDS

Job description

Build a better way to borrow

Fig is a Canadian fintech making personal lending simpler, faster, and more accessible for Canadians. We offer fully digital personal loans, helping customers apply in minutes and receive decisions quickly, without paperwork, branch visits, or long delays .

Since launching in 2023, we’ve grown quickly and earned recognition including Consumer Lender of the Year and FinTech Startup of the Year. We’re proud to be consistently ranked among Canada’s Best Workplaces, with a 4.8/5 Trustpilot rating from our customers.

Supported by Fairstone Bank of Canada and Ontario Teachers’ Pension Plan, we combine deep lending expertise with the agility of a startup.

About the role

Fig is expanding beyond lending and building a new generation of digital banking products. We're hiring a Senior Devops Engineer, reporting to the VP of Engineering, to build and operate the cloud platform our products run on.

As our first dedicated infrastructure engineer, you'll own our AWS environment end-to-end: account structure, infrastructure as code, CI/CD, networking, observability, and security controls. You're a hands-on builder who's comfortable inheriting an existing setup, improving it, and making it easy for product engineers to ship safely.

Today our platform runs on AWS Control Tower, with containerized services on ECS and RDS for PostgreSQL, all managed in Terraform and deployed through GitHub Actions. We're exploring the opportunities AI can bring to the platform, and want someone who'll help us pursue them with the right controls in place.

We're a small team, so breadth matters. You'll work closely with our backend engineers, our CISO, and our Risk and Compliance teams, and help set the standards and paved roads other engineers build on as we grow.

What you’ll do

• Run and evolve our multi-account AWS environment on Control Tower, from account structure and access management to preventive and detective controls.
• Manage our infrastructure in Terraform, with reusable modules and drift detection.
• Make infrastructure changes safe and auditable through policy-as-code, automated plan checks, and approval gates.
• Build and improve CI/CD on GitHub Actions so engineers can ship to ECS frequently and safely, with approvals and fast rollbacks.
• Design and run our networking, including secure connectivity to banking partners and third-party providers.
• Implement and operate security controls with our CISO, from secrets and encryption to logging and threat detection, and produce the evidence partners and auditors need.
• Build reliability into the platform through observability, alerting backups, and tested disaster recovery for our services and PostgreSQL databases.
• Take part in our on-call rotation as the platform expert, and equip backend engineers to provide cover through runbooks, automation, and clear documentation.
• Raise the bar through sound technical design, thoughtful code review, and mentoring.

You’ll succeed here if you have

• 6+ years in platform, DevOps, SRE, or infrastructure engineering, with deep hands-on experience of multi-account AWS, including networking and access management (Organizations or Control Tower, IAM Identity Center, SCPs).
• Production Terraform experience, including module design, state management, and change workflows.
• Hands-on experience running containerized services on ECS (or a comparable orchestrator) and building CI/CD pipelines, ideally with GitHub Actions.
• Experience keeping production systems reliable, including observability, on-call, and incident response, and operating PostgreSQL on RDS through backups, upgrades, and recovery.
• Experience using AI tools in operations work such as incident investigation, with the judgment to validate their output and keep their access tightly scoped.
• The ability to make pragmatic technical decisions and communicate trade-offs clearly.

Why Fig

• Make an impact: Rare opportunity to join early and help shape the future direction of a fast-growing fintech company.
• High ownership: Take on a high-impact role with direct exposure to senior leadership and company-building initiatives.
• Strong culture: Work in a team that values impact, accountability, curiosity, and collaboration.
• Hybrid work environment: Balance of remote and in-office work (currently one day a week in Toronto), while maintaining strong collaboration.
• Competitive compensation: Expected base salary range between $150,000 - $170,000, plus the opportunity to earn an annual incentive bonus tied to performance
• Retirement savings program: Employer matching to support your long-term financial goals.
• Comprehensive benefits: Medical, dental, and vision group insurance, as well as health and wellness spending accounts.
• Time off: Generous vacation and wellness time to support rest and recharge.
• Parental support: Parental leave top‑up to support your growing family.
• Growth and Development: Continuing education stipend to support your professional development.

Our commitment to diversity, equity and inclusion

Fig is an equal opportunity employer committed to building a diverse and inclusive team.

We welcome applications from people of all backgrounds and do not discriminate based on race, religion, culture, sexual orientation, gender identity, or disability.

We’re focused on creating an environment where everyone feels respected, supported, and able to bring their full selves to work. We also provide accommodations throughout the recruitment process. If you need support, just let us know.

AI disclosure

We may use AI tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but do not replace human judgment, and all hiring decisions are ultimately made by people.

If you have questions about how your information is handled, feel free to reach out to us.