Devops Engineer 3

Rupeek; Bengaluru; On-site; INR 2,200,000 - 3,500,000; Full time

Job summary

Rupeek, a leading asset-backed fintech in Bangalore, seeks a senior DevOps Engineer to lead infra strategy and cloud architecture. You will own Terraform, CI/CD, and observability, while coordinating with Infosec for audits and compliance. The role emphasizes production readiness, mentoring, and AI safety in production workflows.

Location: Bangalore. Experience: 4+ years. You will work in a high-impact fintech environment focused on scalable, low-touch lending infrastructure on AWS/EKS.

Qualifications

• Cloud and Kubernetes experience with deep AWS knowledge.
• Terraform mastery and IaC standards experience.
• Proven CI/CD with production-level controls and GitOps.
• Strong observability skills with Prometheus/Grafana.
• Security/compliance experience in regulated environments.
• Scripting in Python or Go; Bash fluency.
• AI tooling usage and safe AI in production workflows.
• Leadership and mentoring of engineers.

Responsibilities

• Define vision for Rupeek's infra and Kubernetes platform.
• Own Terraform module design, state, drift detection, and review process.
• Ensure production readiness for all services shipping production traffic.
• Collaborate with Infosec for audits and approvals (RBI SOC/ISO DPDP).
• Lead infra incident response during outages and major incidents.
• Mentor junior engineers; conduct design and code reviews.
• Represent DevOps in architecture reviews for major initiatives.
• Set AI-fluency standards for the DevOps team and safe AI usage.

Skills

Cloud & Kubernetes

Terraform

CI/CD

Observability

Security & Compliance

Scripting Python/Go

Bash & Linux

AI Fluency

Leadership

Education

Engineering degree

Tools

Terraform

OpenTelemetry

Prometheus

Grafana

Jaeger

Vault

AWS

Job description

About Rupeek:

Rupeek, established in 2015 and headquartered in Bangalore, stands as India's leading asset-backed digital lending fintech platform. Committed to making credit accessible to Indians in a fair and convenient manner, Rupeek pioneers innovative financial products focused on monetizing India's $2 trillion gold market. Leveraging state-of-the-art technology and an automated asset-light supply chain, Rupeek is transforming the gold loan disbursal landscape across 40+ cities in India. With a customer base exceeding 5,00,000+, the company's strategic partnerships with top banks and financial institutions underscore its commitment to building gold-backed assets through low-risk, low-touch, and friction-free processes.

Rupeek's impressive journey is supported by key investors such as Sequoia Capital, Accel Partners, Bertelsmann, and GGV Capital. In Apr 2024, Rupeek turned profitable and raised $25 in equity capital from Manipal Group and Elevation Capital to fund its next phase of growth. Join us in redefining the future of finance through innovation, technology, and a commitment to financial inclusivity.

About the Role

Rupeek's infrastructure spans RFPL and RCPL customer-facing apps, lending core, ledger systems, and operations running on AWS with EKS as the primary compute plane. DevOps is a horizontal function serving all engineering pods, and also owns the interface with Infosec on audits, RBI/DPDP compliance evidence, and incident response.

The DevOps L3 is the senior-most engineer in the team and its technical lead. This person sets standards, mentors the team, and owns infrastructure vision.

Job Title: DevOps Engineer - L3

Experience: 4+ years

Location: Bangalore

Key Responsibilities:

• Sets vision and direction for Rupeek's infrastructure cloud architecture, Kubernetes platform, CI/CD, observability, cost, and reliability.
• Owns infrastructure-as-code standards Terraform module design, state management, drift detection, and review process.
• Owns the production readiness bar every service that ships production traffic clears standards this person defines.
• Partners with Infosec to pass audits (RBI IT Outsourcing, SOC 2, ISO 27001, DPDP) and due diligence (lender, investor, partner).
• Leads incident response from the infra side — the person on the call when the blast radius is large.
• Mentors junior and mid DevOps engineers; runs design and code reviews for the team.
• Represents DevOps in architecture reviews for major product initiatives.
• Sets AI-fluency standards for the DevOps team — tooling, prompt patterns, safe use of AI in production workflows.
• Peer to senior SDE IIIs across product pods.

Must have skills:

Cloud & Kubernetes

• Deep AWS — VPC design, IAM, EKS, RDS/Aurora, S3, KMS, cost architecture, multi-AZ / multi-region trade-offs.
• EKS operations — node group strategy, cluster upgrades, addons lifecycle, admission controllers, network policies, PSA.
• Comfortable debugging at layers others can't — kernel/OS, container runtime, CNI, etcd, control plane.

Infrastructure as Code

• Terraform mastery — module design, remote state, workspaces vs directories, provider version discipline, testing (terratest, tflint, checkov).
• Has designed and enforced IaC standards across a team — including PR review process, plan/apply gating, and drift detection.
• Opinion on Terraform vs Pulumi vs CDK, and why they picked what they picked.

CI/CD & SDLC

• Has built and operated production CI/CD pipelines with strong controls — immutable artifact tagging, signed artifacts (cosign or equivalent), promotion gates, per-environment approvals.
• Familiar with supply chain security — SLSA levels, SBOMs, dependency pinning, supply chain (npm/PyPI) incident response.
• Comfortable with GitOps patterns

Observability & Reliability

• Deep in Prometheus, Grafana, Alertmanager, and PagerDuty — from scrape config to SLO-driven alerting
• Has designed on-call rotations, runbooks, and blameless post-mortem culture.
• Comfortable with distributed tracing (OpenTelemetry, Jaeger, or similar) and structured logging.

Security & Compliance

• Has partnered with Infosec through at least one major audit (SOC 2, ISO 27001, RBI, or equivalent).
• Strong on secrets management (Vault, AWS Secrets Manager, KMS), workload identity (IRSA), and least-privilege IAM
• Understands regulated-industry constraints — data localization, PII handling, audit trails, evidence collection.
• Has responded to real security incidents — DDoS, credential leaks, supply chain compromise, or similar.

Scripting & Automation

• Strong in Python or Go — writes production-quality automation, not just glue scripts.
• Bash fluency; comfortable with the standard Linux toolchain.

AI Fluency

• Uses AI tools (Claude Code, Cursor, or similar) as part of daily workflow.
• Has opinions on where AI helps and where it hurts in the DevOps SDLC.
• Can articulate what "AI-safe" infrastructure change management looks like.

Leadership

• Has mentored junior and mid engineers; visible track record of growing people.
• Writes well — runbooks, RFCs, post-mortems
• Insists on high standards; can hold the line on production readiness without becoming a bottleneck.
• Comfortable pushing back on product timelines when infra risk is real.

Persona

• Engineering degree in Computer Science or related
• Has held a "senior-most DevOps / SRE / Platform" role at least once before, in a company where the infra actually mattered.
• Fintech, payments, or regulated-industry background strongly preferred.
• Recent hands-on work — has written Terraform and touched a cluster in the last month.
• Comfortable being the escalation point at 2am.