DevOps

M8l; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

NOVACARD is seeking a DevOps Engineer to design, deploy, and operate AWS infrastructure for a large-scale migration of a digital financial product. You’ll build a production-ready platform covering networking, Kubernetes/EKS, CI/CD, observability, backup/restore, and secure access management.

You will collaborate with development, system analysis, QA, and engineering teams to ensure fast delivery, stable services, and a controlled migration.

Qualifications

• Hands-on experience building and operating Kubernetes on AWS (EKS).
• Terraform — creating and maintaining AWS infrastructure as code.
• Experience building CI/CD pipelines, preferably GitLab CI.
• Monitoring with Prometheus + Grafana; centralized logging with Loki/OpenSearch.
• RBAC/IAM and secrets management for secure access.
• Stateful services in Kubernetes (PostgreSQL/Redis/Kafka) integration.

Responsibilities

• Design, deploy, and maintain AWS infrastructure: VPC, subnets, IAM, EC2, S3, etc.
• Build and operate Kubernetes on AWS (EKS) and manage deployments.
• Create and manage CI/CD pipelines and automate deployments.
• Ensure high availability, backup/restore, and DR for production.
• Setup monitoring and logging, respond to incidents.

Skills

AWS

Kubernetes

CI/CD

Terraform

GitLab CI

Monitoring & observability

Security & IAM

Linux

Tools

Helm

Docker

Prometheus

Grafana

Loki

OpenSearch

Vault/OpenBao

External Secrets

Job description

Remote in the listed countries: Russia, Serbia.

At NOVACARD, we’re redefining how people use credit. We are the first interest-free and no-annual-fee credit card in Mexico, designed to simplify personal finances and give users complete control - all from a mobile app. With NOVACARD, users can access up to $200,000 MXN in credit, only pay when they use it, and manage everything digitally in under 5 minutes. Our mission is to empower people to make smarter financial decisions by offering flexibility, transparency, and the freedom they need to reach their goals. Simple finances, big goals.

About the Role:

We’re looking for a DevOps Engineer to design, deploy, and operate AWS infrastructure for a large-scale migration of a digital financial product. You’ll build and maintain a production-ready platform covering AWS networking, Kubernetes/EKS, CI/CD, observability, backup/restore, and secure access management. You’ll collaborate closely with development, system analysis, QA, and engineering teams to ensure fast delivery, stable services, and a controlled migration.

Key Responsibilities:

AWS Infrastructure Design & Operations

• Design, deploy, and maintain AWS infrastructure: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.

• Configure AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.

• Ensure HA, backup/restore, disaster recovery, and production infrastructure principles.

• Create and maintain AWS infrastructure as code using Terraform.

Kubernetes & Containerization

• Build and operate Kubernetes on AWS (EKS).

• Work with core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.

• Use Helm for application management.

• Configure Ingress Controller, Load Balancer, and TLS/certificates.

• Understand Kubernetes storage and ensure stateful applications run reliably.

• Work with Docker: image builds, registry, container troubleshooting.

CI/CD & Automation

• Build CI/CD processes, preferably with GitLab CI.

• Automate deployment of applications and dependent services.

• Integrate infrastructure changes into pipelines and maintain reproducible environments.

Observability, Reliability & Operations

• Set up monitoring with Prometheus + Grafana: metrics and alerts.

• Organize centralized log collection and analysis: Loki/ELK/OpenSearch.

• Diagnose network and system issues in Linux.

• Ensure production stability, respond to incidents, and eliminate root causes.

Security & Access Management

• Manage secrets: AWS Secrets Manager / Vault/OpenBao / External Secrets.

• Configure RBAC/IAM and follow the principle of least privilege.

• Ensure secure service-to-service communication and infrastructure access.

Data & Services

• Support PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.

• Ensure backup/restore and fault tolerance for stateful services.

• Help teams deploy and maintain dependent services in Kubernetes.

Key Requirements:

AWS & Networking

• Strong AWS experience: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.

• Good understanding of AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.

Kubernetes & Containers

• Hands-on experience building and operating Kubernetes on AWS (EKS).

• Understanding of core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.

• Experience with Helm.

• Experience configuring Ingress Controller, Load Balancer, and TLS/certificates.

• Experience with Docker: image builds, registry, container troubleshooting.

• Understanding of Kubernetes storage and stateful application operation.

IaC & CI/CD

• Terraform — creating and maintaining AWS infrastructure as code.

• Experience building CI/CD, preferably GitLab CI.

Data, Queues & Storage

• Experience with PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.

• Understanding of HA, backup/restore, disaster recovery, and production infrastructure principles.

Monitoring, Logging & Secrets

• Monitoring: Prometheus + Grafana, configuring metrics and alerts.

• Centralized log collection and analysis: Loki/ELK/OpenSearch.

• Secrets management: AWS Secrets Manager / Vault/OpenBao / External Secrets.

Linux & Security

• Linux administration and confident diagnosis of network and system issues.

• Experience configuring RBAC/IAM and following the principle of least privilege.

Especially Important Practical Experience:

• The engineer must be able to design an AWS network from scratch → set up EKS → deploy an application and dependent services → configure ingress/DNS/TLS → CI/CD → monitoring/logging → backup → hand over a production-ready infrastructure for operation.

Nice to Have:

• Experience migrating lending systems or fintech products.

• Experience building CI/CD with GitLab CI.

• Hands-on experience with Vault/OpenBao, External Secrets.

• Experience with Kafka and stateful services in Kubernetes.

What We Offer:

• Participation in a large-scale migration of a digital financial product.

• Work with a modern stack: AWS, Kubernetes/EKS, Terraform, CI/CD, Prometheus/Grafana.

• Close collaboration with development, system analysts, QA, and engineers.

• Opportunity to build a production-ready platform from scratch and hand it over to operations.

• Terms and work format — discussed individually