DevOps

Novacard; Job; Hybride; PHP 1 200 000 - 1 800 000; Plein temps

Résumé du poste

NOVACARD is seeking a DevOps Engineer to design and operate AWS infrastructure for a major migration of a digital financial product. You will build a scalable, secure platform on Kubernetes (EKS), manage networking, CI/CD, observability, and data services, collaborating with cross-functional teams to ensure fast delivery and stable services.

Responsibilities include infrastructure as code with Terraform, containerization with Docker, and deployment automation.

Qualifications

• Extensive experience designing AWS networks from scratch.
• Hands-on with Kubernetes on AWS (EKS) and container orchestration.
• Proficient with Terraform to manage infrastructure as code.
• Experience implementing CI/CD pipelines (GitLab CI preferred).
• Strong knowledge of Docker, Helm, and container tooling.
• Monitoring and observability using Prometheus/Grafana.
• Security best practices: IAM, RBAC, least privilege, and secret management.

Responsabilités

• Design, deploy, and operate AWS infrastructure for large-scale migration.
• Build and maintain production-ready platform across networking, Kubernetes, CI/CD, observability and security.
• Collaborate with development, QA, and engineering teams to ensure stable services.

Connaissances

Strong problem-solving

Team collaboration

Communication

Security best practices

Incident response

Outils

AWS (Networking)

Kubernetes (EKS)

Terraform

GitLab CI

Docker

Helm

Prometheus Grafana

Description du poste

At NOVACARD, we’re redefining how people use credit. We are the first interest-free and no-annual-fee credit card in Mexico, designed to simplify personal finances and give users complete control - all from a mobile app. With NOVACARD, users can access up to $200,000 MXN in credit, only pay when they use it, and manage everything digitally in under 5 minutes. Our mission is to empower people to make smarter financial decisions by offering flexibility, transparency, and the freedom they need to reach their goals. Simple finances, big goals.

About the Role:

We’re looking for a DevOps Engineer to design, deploy, and operate AWS infrastructure for a large-scale migration of a digital financial product. You’ll build and maintain a production-ready platform covering AWS networking, Kubernetes/EKS, CI/CD, observability, backup/restore, and secure access management. You’ll collaborate closely with development, system analysis, QA, and engineering teams to ensure fast delivery, stable services, and a controlled migration.

Key Responsibilities:

AWS Infrastructure Design & Operations

• Design, deploy, and maintain AWS infrastructure: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.
• Configure AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.
• Ensure HA, backup/restore, disaster recovery, and production infrastructure principles.
• Create and maintain AWS infrastructure as code using Terraform.

Kubernetes & Containerization

• Build and operate Kubernetes on AWS (EKS).
• Work with core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.
• Use Helm for application management.
• Configure Ingress Controller, Load Balancer, and TLS/certificates.
• Understand Kubernetes storage and ensure stateful applications run reliably.
• Work with Docker: image builds, registry, container troubleshooting.

CI/CD & Automation

• Build CI/CD processes, preferably with GitLab CI.
• Automate deployment of applications and dependent services.
• Integrate infrastructure changes into pipelines and maintain reproducible environments.

Observability, Reliability & Operations

• Set up monitoring with Prometheus + Grafana: metrics and alerts.
• Organize centralized log collection and analysis: Loki/ELK/OpenSearch.
• Diagnose network and system issues in Linux.
• Ensure production stability, respond to incidents, and eliminate root causes.

Security & Access Management

• Manage secrets: AWS Secrets Manager / Vault/OpenBao / External Secrets.
• Configure RBAC/IAM and follow the principle of least privilege.
• Ensure secure service-to-service communication and infrastructure access.

Data & Services

• Support PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.
• Ensure backup/restore and fault tolerance for stateful services.
• Help teams deploy and maintain dependent services in Kubernetes.

Key Requirements:

AWS & Networking

• Strong AWS experience: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.
• Good understanding of AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.

Kubernetes & Containers

• Hands-on experience building and operating Kubernetes on AWS (EKS).
• Understanding of core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.
• Experience with Helm.
• Experience configuring Ingress Controller, Load Balancer, and TLS/certificates.
• Experience with Docker: image builds, registry, container troubleshooting.
• Understanding of Kubernetes storage and stateful application operation.

IaC & CI/CD

• Terraform — creating and maintaining AWS infrastructure as code.
• Experience building CI/CD, preferably GitLab CI.

Data, Queues & Storage

• Experience with PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.
• Understanding of HA, backup/restore, disaster recovery, and production infrastructure principles.

Monitoring, Logging & Secrets

• Monitoring: Prometheus + Grafana, configuring metrics and alerts.
• Centralized log collection and analysis: Loki/ELK/OpenSearch.
• Secrets management: AWS Secrets Manager / Vault/OpenBao / External Secrets.

Linux & Security

• Linux administration and confident diagnosis of network and system issues.
• Experience configuring RBAC/IAM and following the principle of least privilege.

Especially Important Practical Experience:

• The engineer must be able to design an AWS network from scratch -> set up EKS -> deploy an application and dependent services -> configure ingress/DNS/TLS -> CI/CD -> monitoring/logging -> backup -> hand over a production-ready infrastructure for operation.

Nice to Have:

• Experience migrating lending systems or fintech products.
• Experience building CI/CD with GitLab CI.
• Hands-on experience with Vault/OpenBao, External Secrets.
• Experience with Kafka and stateful services in Kubernetes.

What We Offer:

• Participation in a large-scale migration of a digital financial product.
• Work with a modern stack: AWS, Kubernetes/EKS, Terraform, CI/CD, Prometheus/Grafana.
• Close collaboration with development, system analysts, QA, and engineers.
• Opportunity to build a production-ready platform from scratch and hand it over to operations.
• Terms and work format - discussed individually