Senior DevOps Engineer

ShopSe Digital Finance; Mumbai; On-site; INR 1,800,000 - 2,500,000; Full time

Job summary

ShopSe Digital Finance seeks a Senior DevOps Engineer to own the AWS infrastructure end‑to‑end, including CI/CD pipelines and monitoring. You will ensure high availability for a payments‑centric platform, optimise costs, and drive reliability across dev, staging, and production environments.

You will implement IaC (Terraform/CloudFormation/Pulumi), manage VPNs, and support AI‑augmented development workflows while maintaining on‑call readiness and incident response per SLA.

Qualifications

• 5–8 years of hands-on DevOps or infrastructure engineering experience.
• Deep, practical AWS expertise — EC2, RDS, ECS/EKS, VPC, IAM, ALB, Route 53, CloudWatch.
• Proven experience building and maintaining CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins).
• Hands-on experience with monitoring stacks — CloudWatch, Site24x7, Grafana, Prometheus, Datadog.
• Infrastructure-as-code using Terraform, CloudFormation, or Pulumi.
• Strong scripting skills — Python, Bash, or equivalent.
• Container experience — Docker and Kubernetes (EKS or self-managed).
• Experience managing VPN solutions (OpenVPN, AWS Client VPN, WireGuard).
• Access management experience — provisioning, deprovisioning, and periodic reviews across cloud and tooling.

Responsibilities

• Own the AWS infrastructure and ensure high availability and uptime.
• Design for fault tolerance and cost optimisation without sacrificing reliability.
• Build and maintain CI/CD pipelines across services for daily releases.
• Manage deployments across multiple AWS availability zones with traffic routing.
• Implement monitoring, alerting, and runbooks; analyze production incidents and RCA.
• Maintain on-call readiness and respond to production alerts per SLAs.
• Develop AI‑augmented development infrastructure and integrate AI tooling into CI/CD pipelines.

Skills

AWS

CI/CD

Monitoring

Scripting

Containers

IAM

Networking

Tools

Terraform

CloudFormation

Pulumi

GitHub Actions

GitLab CI

Jenkins

Job description

SENIOR DEVOPS ENGINEER

Shopse | Full-Time | Own the Infra. Keep Us Running.

• Own and manage the entire AWS infrastructure — EC2, RDS, S3, ECS/EKS, VPC, IAM, CloudFront, Route 53, and related services.
• Design for high availability and fault tolerance; ensure infra can handle payment‑grade uptime requirements.
• Right‑size and optimise infrastructure for cost without compromising reliability.
• Maintain environment parity across dev, staging, and production.
• Build, maintain, and continuously improve CI/CD pipelines across all services supporting a daily release.
• Manage deployment triggering across multiple AWS availability zones; handle traffic routing between zones including manual intervention when required.
• Ensure fast, reliable, and safe deployments with rollback capabilities and pre/post‑release health checks.
• Work closely with the engineering team to reduce deployment friction and maintain release velocity.
• Manage branching strategies, environment promotion, and deployment gates.
• Own site monitoring end‑to‑end — set up and maintain CloudWatch and Site24x7 (or equivalent) for uptime checks, dashboards, log aggregation, and alerting.
• Configure intelligent alerting rules that surface real issues without creating noise; maintain runbooks for
• Be the first responder for production alerts — acknowledge, triage, and resolve or escalated within defined SLAs. Proactive action on alerts is a core expectation of this role.
• Conduct root cause analysis (RCA) for all production incidents and drive fixes to prevent recurrence.
• Maintain an on‑call schedule; this role requires availability outside business hours for critical alerts.

4. System Automation

• Automate repetitive operational tasks — provisioning, scaling, patching, backups, and configuration management.
• Manage infrastructure‑as‑code using Terraform or equivalent; no manual console changes in production.
• Automate monitoring setup, alerting thresholds, and runbook execution wherever possible.

5. Security & Compliance

• Implement and maintain security rules, firewall policies, network ACLs, and IAM roles with least‑privilege.
• Manage VPN setup and access controls for internal teams and vendors.
• Manage access provisioning and deprovisioning for all team members across AWS and related services.
• Ensure infrastructure compliance with PCI DSS and ISO 27001 requirements — work closely with the InfoSec Lead on audit evidence and remediation.
• Manage SSL/TLS certificates, key rotation, secrets management (AWS Secrets Manager / Vault), and encryption at rest and in transit.

6. Releases & Server Operations

• Coordinate and execute daily production releases — validate pre‑release checklists, trigger deployments across zones, manage traffic routing, and monitor post‑release health.
• Handle server maintenance, OS upgrades, dependency patching, and scheduled downtime windows.
• Manage database backups, restoration drills, and disaster recovery procedures.
• Maintain up‑to‑date infrastructure documentation and runbooks.

7. AI-Augmented Development Infrastructure

• Design and manage infrastructure for AI‑assisted development workflows — including on‑demand provisioning and teardown of ephemoral EC2 or container instances used by AI dev tools such as Claude Code.
• Integrate AI dev tooling into CI/CD pipelines — enabling automated code generation, review, and testing stages that spin up isolated compute, execute tasks, and clean up on completion.
• Implement IAM policies, network boundaries, and cost guardrails for ephemoral AI development instances.
• Build monitoring and observability into AI‑augmented pipelines — tracking instance lifecycle, run times, failure rates, and compute costs.

Requirements

What we really mean by 'reliable and dependable'

In a payments business, infrastructure failures have real, immediate consequences for merchants and customers. We need someone who treats a production alert at 11 PM the same way they would at 11 AM — someone who does not need to be chased, who over‑communicates during incidents, and who takes pride in a green dashboard. If that describes you, we want to talk.

• 5–8 years of hands‑on DevOps or infrastructure engineering experience.
• Deep, practical AWS expertise — EC2, RDS, ECS/EKS, VPC, IAM, ALB, Route 53, CloudWatch. Ability to architect, troubleshoot, and optimise independently.
• Proven experience building and maintaining CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, or
• Hands‑on experience with monitoring stacks — CloudWatch, Site24x7, Grafana, Prometheus, Datadog, or equivalent.
• Infrastructure‑as‑code using Terraform, CloudFormation, or Pulumi.
• Strong scripting skills — Python, Bash, or equivalent.
• Container experience — Docker and Kubernetes (EKS or self‑managed).
• Experience managing VPN solutions (OpenVPN, AWS Client VPN, WireGuard, or equivalent).
• Access management experience — provisioning, deprovisioning, and periodic reviews across cloud and tooling.

Nice to Have

• Experience integrating AI dev tools (Claude Code, GitHub Copilot, Cursor, or similar) into CI/CD pipelines.
• Familiarity with ephemoral environment patterns for automated testing or AI‑assisted workflows.
• AWS certifications — Solutions Architect, DevOps Engineer Professional, or Security Specialty.
• Familiarity with PCI DSS infrastructure requirements and ISO 27001 technical controls.
• Experience in a fintech, payments, or BFSI environment.