Senior DevOps Engineer (Remote, Contract)

OUR HIRING PROCESS: - We will review your application against our job requirements. We do not employ machine learning technologies during this phase as we believe every human deserves attention from another human. We do not think machines can evaluate your application quite like our seasoned recruiting professionals—every person is unique. We promise to give your candidacy a fair and detailed assessment. - We may then invite you to submit a video interview for the review of the hiring manager. This video interview is often followed by a test or short project that allows us to determine whether you will be a good fit for the team. - At this point, we will invite you to interview with our hiring manager and/or the interview team. Please note: We do not conduct interviews via text message, Telegram, etc. and we never hire anyone into our organization without having met you face-to-face (or via Zoom). You will be invited to come to a live meeting or Zoom, where you will meet our INFUSE team. - From there on, it’s decision time! If you are still excited to join INFUSE and we like you as much, we will have a conversation about your offer. We do not make offers without giving you the opportunity to speak with us live. INFUSE is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Privacy Policy INFUSE is looking for a Senior DevOps Engineer to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization. We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way. As part of our dynamic team, your responsibilities in this role will include: - Design, build and run secure AWS infrastructure (EC2 with Docker Compose, EKS) with Terraform and Ansible; move suitable workloads from EC2 to EKS - Build and maintain CI/CD in GitHub Actions; move remaining Jenkins jobs to GitHub Actions - Keep new and existing services at our security baseline: Cloudflare proxy with WAF and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root - Own monitoring, alerting and logs on our standard stack (Grafana, OpenTelemetry, Sentry); on-call, incident response, post-incident reviews - Own backups and regular restore tests - Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects - Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket - Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards - Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review - Work with internal teams and contractors; set and enforce standards; mentor other engineers. Our ideal candidate possesses the following skills: - 5+ Years in DevOps / SRE: Proven background operating mission-critical production environments, including 3+ years of hands-on experience running AWS at scale - IaC & CI/CD Mastery: Expert with Terraform, highly proficient with Ansible, and experienced in designing production workflows with GitHub Actions - Containerization & Kubernetes: Strong production experience with Docker and Kubernetes (specifically managed AWS EKS and Helm) - Production Security & Incident Management: Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and Cloudflare WAF/proxy configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills - English proficiency at B2 level or higher. What Else We Expect & Value: - Application Ecosystem Familiarity: Experience supporting Node.js and Python microservices paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare - Modern Observability: Practical setup and maintenance of Grafana, Prometheus, and OpenTelemetry pipelines - Core Scripting & Systems: Deep fluency in Linux administration, Bash, and Python scripting. - Collaborative Leadership: Ability to effectively manage, document, and standardize work across internal teams and external contractor groups. - AI-Augmented Workflow: Daily experience leveraging modern AI developer tools and agents (Claude Code preferred) to accelerate engineering output. - Proactive & Autonomous Mindset: A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table. Nice to have: - Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications. What we offer: - Fully remote work format - Schedule: Monday–Friday, 2 PM – 11 PM Eastern European Time (including 1 hour break) - A collaborative, innovation-first environment that values initiative and experimentation - Paid time off and sick leave - Reduced working hours on Fridays during the summer - Days off on US national holidays and your birthday. Hiring process: - Interview with Recruiter - Interview with Hiring Manager - Technical Interview - Offer. If you meet these criteria and are excited about contributing to our team, we encourage you to apply. We look forward to meeting you! 👋