DevOps

Novacard; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

NOVACARD is seeking a hands-on AWS infrastructure engineer to design, deploy, and operate a large-scale migration of a digital financial product. You will own networking, Kubernetes/EKS, CI/CD, and observability, partnering with dev, QA, and engineering to deliver a production-ready platform.

You will build and maintain AWS infrastructure with Terraform, manage VPCs, IAM, and Kubernetes on EKS, implement CI/CD pipelines (GitLab CI), and establish monitoring with Prometheus/Grafana and

Qualifications

• 5+ years of hands-on AWS experience with architecture design.
• Experience running Kubernetes on AWS using EKS and Helm.
• Proficient in Terraform for infrastructure as code.
• Experience building CI/CD pipelines, preferably GitLab CI.
• Familiarity with PostgreSQL, Redis, RabbitMQ or Kafka at infra level.
• Strong Linux troubleshooting, HA, backup and disaster recovery.
• Docker image builds and container debugging.

Responsibilities

• Build and maintain AWS infrastructure (VPC, subnets, IAM, EC2, S3, ELB/ALB/NLB, Route53).
• Configure networking for HA setups (NAT, Internet Gateways, VPC peering, Transit Gateway).
• Operate Kubernetes on EKS, including Deployments, StatefulSets, Ingress, ConfigMaps, Secrets, PVCs, and Helm-based management.
• Develop CI/CD pipelines (GitLab CI) and integrate infra changes into reproducible environments.
• Set up monitoring with Prometheus and Grafana, centralise logs via Loki, ELK, or OpenSearch, and respond to incidents.
• Manage secrets through AWS Secrets Manager, Vault/OpenBao, or External Secrets with least-privilege RBAC/IAM.

Skills

AWS

Terraform

Kubernetes / EKS

CI/CD (GitLab CI)

Prometheus / Grafana

Docker

Security / IAM

Linux

Tools

Helm

GitLab CI

Prometheus

Grafana

Loki / ELK / OpenSearch

Vault / External Secrets

Terraform

AWS

Job description

Role overview

Design, deploy, and operate AWS infrastructure for a large-scale migration of a digital financial product. The role spans networking, Kubernetes/EKS, CI/CD, observability, and secure access management, partnering closely with development, QA, and engineering teams to deliver a production-ready platform.

Responsibilities

• Build and maintain AWS infrastructure (VPC, subnets, IAM, EC2, S3, ELB/ALB/NLB, Route53) using Terraform as code.
• Configure networking components such as NAT/Internet Gateways, VPC peering or Transit Gateway, VPN, and routing for HA setups.
• Operate Kubernetes on EKS, including Deployments, StatefulSets, Ingress, ConfigMaps, Secrets, PVCs, and Helm-based application management.
• Develop CI/CD pipelines (preferably GitLab CI) and integrate infrastructure changes into automated, reproducible environments.
• Set up monitoring with Prometheus and Grafana, centralise logs via Loki, ELK, or OpenSearch, and respond to incidents.
• Manage secrets through AWS Secrets Manager, Vault/OpenBao, or External Secrets, applying least-privilege RBAC/IAM.

Requirements

• Strong hands-on AWS experience covering core services and networking concepts.
• Practical experience building and operating Kubernetes on AWS (EKS), including core objects and Helm.
• Proficiency with Terraform and CI/CD tooling, ideally GitLab CI.
• Familiarity with PostgreSQL, Redis, and RabbitMQ or Kafka at the infrastructure level.
• Solid Linux troubleshooting skills and understanding of HA, backup/restore, and disaster recovery.
• Comfort with Docker image builds, registries, and container debugging.

Nice to have

• Experience migrating lending systems or fintech products.
• Hands-on exposure to Vault/OpenBao and External Secrets.
• Background operating Kafka and other stateful services inside Kubernetes.

Benefits and work setup

• Involvement in a large-scale digital financial product migration from inception to handover.
• Modern stack including AWS, EKS, Terraform, GitLab CI, and Prometheus/Grafana.
• Close cross-functional collaboration with development, system analysis, QA, and engineering teams.
• Terms and work format discussed individually with candidates.