Senior DevOps

About the role:

The DevOps / Cloud Infrastructure & Security Engineer is responsible for designing, building, and operating secure, scalable, and high-availability cloud environments that support payment processing systems, mobile applications, and real-time retail transactions. This role combines deep AWS expertise, infrastructure automation skills, and a strong security mindset—especially around PCI-DSS, SOC compliance, and financial data protection.

You will collaborate with backend engineers, mobile developers, QA, security, and product teams to ensure the platform is resilient, compliant, and optimized for a frictionless transaction experience across mobile channels and backend payment services.

What you will do:

1. Cloud Infrastructure Engineering (AWS)

• Design, deploy, and manage production-grade AWS environments supporting payment processing, mobile APIs, and retail transaction workloads.
• Build and maintain infrastructure-as-code (IaC) using Terraform, CloudFormation, or CDK.
• Implement autoscaling, load balancing, containerization (ECS/EKS), serverless components (Lambda), routing (API Gateway), and edge security (CloudFront, WAF).
• Manage VPC architecture, network segmentation, private link integrations, and secure connectivity to external banking partners.

2. DevOps & Platform Automation

• Develop CI/CD pipelines for backend services, mobile applications, event-driven systems, and infrastructure.
• Automate deployment workflows, testing, linting, and environment provisioning.
• Ensure zero-downtime deployments, blue/green or canary releases, and rollback strategies.
• Implement observability: centralized logging, distributed tracing, dashboards, and actionable alerting.

3. Security Engineering (Payment Processing Focus)

• Ensure cloud environments and mobile backends meet PCI-DSS, NACHA, and financial data protection standards.
• Implement identity and access control (IAM roles, federated SSO, permission boundaries, least-privilege models).
• Oversee secrets management (AWS Secrets Manager, KMS) and secure credential rotation.
• Perform vulnerability scanning, threat modeling, SAST/DAST scanning, and incident response participation.
• Support secure tokenization, encryption-at-rest/in-transit, and secure mobile app API access.

4. Reliability & Operations

• Build SLOs/SLIs for payment transaction availability, latency, and integrity.
• Manage infrastructure monitoring and prevent issues before they impact users.
• Lead incident response during outages related to cloud infrastructure, networking, database performance, or external processor issues.
• Conduct post-mortems and drive long-term reliability improvements.

5. Payment Processing & Mobile Ecosystem Integration

• Support backend and mobile teams integrating with payment processors (ACH, card, e-wallets, gateways).
• Configure secure network paths and firewall rules between AWS and payment partners.
• Manage mobile backend services that support authentication, identity, fraud detection, and transaction orchestration.
• Ensure mobile APIs are optimized, resilient, and protected with modern security standards (OAuth2/JWT, rate limiting, bot protection).

6. Collaboration & Cross-Functional Work

• Work closely with product and engineering teams during feature design and architecture reviews.
• Partner with security/compliance teams to meet audit requirements and maintain evidence repositories.
• Provide technical mentorship to engineers on DevOps best practices and cloud security patterns.
• Participate in agile ceremonies and development planning.

What you bring:

• 4–8+ years of hands-on DevOps, cloud infrastructure, or cloud security engineering experience.
• Deep expertise in AWS services, including:

○ EC2, ECS/EKS, Lambda

○ RDS/Aurora, DynamoDB

○ VPC, Transit Gateway, Route53

○ API Gateway, CloudFront, WAF, ALB/NLB

○ IAM, KMS, Secrets Manager

• Strong experience with payments, fintech, or high-compliance transaction systems.
• Proficiency with IaC (Terraform or AWS CloudFormation).
• Experience building and maintaining CI/CD pipelines (GitHub Actions, GitLab, Bitbucket, Jenkins, etc.).
• Solid understanding of networking, including VPNs, firewalls, DNS, routing, private connectivity, proxies, and load balancing.
• Experience securing mobile backends, APIs, and cloud services.
• Programming/scripting proficiency in Python, Bash, or Go.

Nice if you have:

• Experience with PCI-DSS, SOC 2, and security audits.
• Exposure to payment gateways (Stripe, Adyen, Fiserv, Dwolla, Plaid, PayPal, etc.).
• Knowledge of event-driven architectures (Kafka, SNS/SQS, Kinesis).
• Experience with container security and supply chain scanning (Trivy, Grype, Snyk).
• Understanding of mobile authentication (OAuth2, biometrics, token refresh strategies).
• Experience designing multi-tenant cloud architectures.
• Familiarity with Infrastructure Monitoring tools (Datadog, New Relic, Grafana, CloudWatch).

Equal Opportunity Employer:

AspenView is proud to be an equal opportunity employer. We believe in creating an environment where all employees feel welcome, valued, and empowered to succeed. We celebrate diversity and strive to build a culture of inclusion where all individuals, regardless of their race, color, gender, gender identity or expression, sexual orientation, disability, age, or any other characteristic, can thrive. We encourage applicants from all walks of life to join our team and make a lasting impact.