Senior DevOps Engineer

Private Identity; Mexico; On-site; PHP 7,524,000 - 11,285,000; Full time

Job summary

PrivateID is shaping a world of passwordless, privacy‑first digital identities and seeks a proactive Lead DevOps Engineer to join a collaborative team.

You will own hands-on infrastructure work across multi-cloud environments (AWS, GCP), Kubernetes, Terraform, CI/CD pipelines, and on-call rotations. You’ll implement robust, scalable solutions with GitOps practices.

This role emphasizes proactive incident response, security, and automating toil to keep services reliable for global brands.

Qualifications

• 7+ years in a DevOps, SRE, or Platform Engineering role.
• Strong Terraform skills—modules, remote state, multi-environment configurations.
• Hands-on experience with AWS (EKS, IAM, EC2, S3, multi-account) and GCP (GKE, IAM, Workload Identity).
• GitHub Actions—building and maintaining CI/CD pipelines, reusable workflows.
• ArgoCD or similar GitOps tooling.
• Active on-call experience—you've been paged, you know how to triage fast and communicate under pressure.
• PagerDuty—on-call rotations, escalation policies, alert routing.
• Secrets management—Doppler, Vault, or AWS Secrets Manager.
• Strong scripting in Bash and/or Python.
• A team-first attitude—share knowledge, ask questions early.

Responsibilities

• Contribute to multi-cloud infrastructure across AWS (EKS, IAM, multi-account) and GCP (GKE Autopilot, IAM, multi-project) using Terraform.
• Help provision and manage per-client environments — VPC, Kubernetes cluster, DNS, SSL, container registry, secrets, and GitOps integration.
• Manage bastion hosts, networking, firewalls, and VPC peering under guidance from the lead.
• Maintain and improve GitHub Actions pipelines for build, test, and deployment workflows.
• Support ArgoCD-based GitOps deployments across multiple GKE and EKS clusters.
• Help maintain reusable workflow templates used across all product repositories.
• Monitor application and infrastructure health using New Relic dashboards and alerts.
• Actively participate in the on-call rotation via PagerDuty.
• Contribute to runbooks and post-mortems after incidents.
• Proactively flag performance issues and anomalies to the team.
• Manage and rotate secrets across all environments using Doppler — AWS IAM keys, GCP service account keys, MongoDB Atlas API keys, GitHub tokens.

Skills

DevOps mindset

On-call experience

Bash scripting

Python scripting

Tools

Terraform

AWS

GCP

GitHub Actions

ArgoCD

Doppler

Vault

PagerDuty

Job description

Imagine a world where passwords are obsolete, and you never have to recall security questions about your first pet. At PrivateID, we're making this a reality with secure, self-managed digital identities that feel almost magical: think biometric sorcery meets cryptographic brilliance. Trusted by global brands for our privacy-first solutions, we're rapidly scaling to meet the soaring demand for passwordless, zero-trust technology.

About The Role

You'll work under the Lead DevOps Engineer as a key contributor on a collaborative team, executing on infrastructure work, responding to incidents, and helping keep our multi-cloud environments reliable and secure. You're someone who takes direction well, communicates proactively, and brings enough experience to work independently on complex tasks without needing hand-holding.

This is a hands-on, execution-focused role. You'll be deep in Kubernetes, Terraform, CI/CD pipelines, and on-call rotations day to day.

What You Will Do

Infrastructure & Cloud

• Contribute to multi-cloud infrastructure across AWS (EKS, IAM, multi-account) and GCP (GKE Autopilot, IAM, multi-project) using Terraform
• Help provision and manage per-client environments — VPC, Kubernetes cluster, DNS, SSL, container registry, secrets, and GitOps integration — following established patterns and module library
• Manage bastion hosts, networking, firewalls, and VPC peering under guidance from the lead

CI/CD & GitOps

• Maintain and improve GitHub Actions pipelines for build, test, and deployment workflows
• Support ArgoCD-based GitOps deployments across multiple GKE and EKS clusters
• Help maintain reusable workflow templates used across all product repositories

Observability & Incident Response

• Monitor application and infrastructure health using New Relic dashboards and alerts
• Actively participate in the on-call rotation via PagerDuty — acknowledge alerts promptly, triage issues, elevate when needed, and follow up thoroughly
• Contribute to runbooks and post-mortems after incidents
• Proactively flag performance issues and anomalies to the team

Security & Secrets Management

• Manage and rotate secrets across all environments using Doppler — AWS IAM keys, GCP service account keys, MongoDB Atlas API keys, GitHub tokens
• Follow and uphold least-privilege IAM practices across AWS, GCP, GitHub, and Azure AD
• Assist with employee access provisioning and offboarding

Must Have

• 7+ years in a DevOps, SRE, or Platform Engineering role
• Strong Terraform skills — modules, remote state, multi-environment configurations
• Hands-on experience with AWS (EKS, IAM, EC2, S3, multi-account) and GCP (GKE, IAM, Workload Identity)
• GitHub Actions — building and maintaining CI/CD pipelines, reusable workflows
• ArgoCD or similar GitOps tooling
• Active on-call experience — you've been paged, you know how to triage fast and communicate clearly under pressure
• PagerDuty — on-call rotations, escalation policies, alert routing
• Secrets management — Doppler, Vault, or AWS Secrets Manager
• Strong scripting in Bash and/or Python
• A team-first attitude — you share knowledge, ask questions early, and don't go dark

Nice to Have

• GCP Workload Identity Federation and AWS IRSA (keyless CI/CD auth)
• Azure AD / Entra ID user and access management
• Slack app integrations for deployment approvals and alerting
• Experience managing infrastructure for multiple clients or tenants from a single codebase

Important:

PrivateIDvaluesdiversityandiscommittedtoprovidinganinclusiveworkenvironmentwhereallemployeescanexcel.Qualifiedapplicantswillbeconsideredwithoutregardtorace,color,religion,sex,sexualorientation,genderidentity,nationalorigin,disability,veteranstatus,oranyotherlegallyprotectedstatus.Reasonableaccommodationsareavailableuponrequesttoensureequitableparticipationinourhiringprocessandworkplace.