Job Description
We are looking for a technically strong and hands-on DevOps Engineer to manage, secure, automate, and scale the cloud infrastructure supporting Bondsmart, our digital debt investment platform.
The candidate will be responsible for managing our AWS infrastructure, application deployments, CI/CD pipelines, server configurations, networking, monitoring, backups, and infrastructure security.
The ideal candidate should have strong hands-on experience with AWS, Linux, deployment automation, networking, and production troubleshooting. They should be capable of independently managing the existing infrastructure while continuously improving its reliability, security, scalability, and cost efficiency.
As a growing fintech startup, we require someone who can establish robust DevOps practices, reduce manual operational dependencies, improve deployment reliability, and prepare the platform for future growth without unnecessary infrastructure complexity or cost.
Key Responsibilities
AWS Infrastructure Management
- Manage and maintain AWS infrastructure, including EC2, VPC, subnets, security groups, route tables, Internet Gateways, NAT Gateways, Elastic IPs, IAM, and related services.
- Manage development, QA, and production environments with appropriate resource separation and access controls.
- Configure and maintain EC2 instances running Node.js applications, Nginx, and PM2.
- Manage Amazon RDS PostgreSQL infrastructure, including connectivity, backups, monitoring, storage, and availability.
- Manage S3 buckets and CloudFront distributions for frontend hosting, content delivery, and application routing.
- Configure and maintain Route 53 DNS records, domain mappings, ACM SSL/TLS certificates, and HTTPS redirects.
- Maintain infrastructure documentation, environment configurations, deployment procedures, and operational runbooks.
- Troubleshoot infrastructure, networking, connectivity, and server-level issues independently.
CI/CD & Deployment Automation
- Design, implement, and maintain CI/CD pipelines using GitHub Actions or equivalent tools.
- Automate application build, testing, deployment, and release processes across development, QA, and production environments.
- Implement secure deployment workflows for React frontend applications and Node.js / Express.js / NestJS backend services.
- Automate S3 deployments, CloudFront cache invalidation, backend deployments, and application restarts where applicable.
- Establish controlled release workflows, environment-specific configurations, rollback procedures, and deployment verification.
- Implement secure GitHub deployment practices, branch protection, environment approvals, and deployment permissions.
- Reduce manual server access and repetitive operational tasks through scripting and automation.
- Support zero-downtime or low-downtime deployment strategies wherever feasible.
Linux & Application Server Management
- Manage Linux-based servers and troubleshoot operating system, disk, memory, CPU, networking, and process-related issues.
- Configure and maintain Nginx reverse proxies, virtual hosts, SSL/TLS settings, request routing, and application-level security headers.
- Manage Node.js application processes using PM2, including startup configuration, process monitoring, log management, and restart policies.
- Configure application environment variables, runtime versions, service dependencies, and server permissions.
- Investigate application availability issues, port conflicts, failed deployments, memory leaks, and resource exhaustion.
- Establish standardised server configuration and maintenance procedures across environments.
Networking & Infrastructure Reliability
- Design, configure, and troubleshoot AWS networking, including VPCs, public and private subnets, routing, security groups, and network access.
- Ensure databases and internal services remain private and are accessible only through authorised network paths.
- Configure NAT Gateways and Elastic IPs where required for stable outbound connectivity and third-party vendor IP whitelisting.
- Manage connectivity requirements for external financial integrations, including payment gateways, KYC providers, and exchange-related services.
- Plan and implement load balancing, health checks, and Auto Scaling for application workloads as the platform’s traffic grows.
- Identify infrastructure bottlenecks and recommend improvements for availability, resilience, and performance.
- Support future infrastructure evolution towards containerised deployments and managed orchestration services when justified by business requirements.
Monitoring, Logging & Production Support
- Implement and maintain monitoring, alerting, and logging using Amazon CloudWatch and relevant application monitoring tools.
- Maintain centralised application and server logs for backend services, Nginx, and operational processes.
- Configure actionable alerts for CPU, memory, disk utilisation, application availability, error rates, and infrastructure health.
- Work with developers to improve error tracking, request correlation, and production incident investigation using tools such as Sentry and CloudWatch.
- Troubleshoot production incidents, identify root causes, and implement preventive measures.
- Establish incident response procedures, escalation mechanisms, and operational runbooks.
- Monitor application and infrastructure health during releases and critical business operations.
Security & Compliance
- Implement AWS IAM best practices, least-privilege access, role-based permissions, and secure service-to-service access.
- Use IAM roles for EC2 workloads instead of storing long-lived AWS access keys on servers.
- Manage application secrets and configuration securely using AWS Secrets Manager and Systems Manager Parameter Store.
- Ensure RDS databases remain private and protected through appropriate network controls, encryption, and access restrictions.
- Configure security groups, SSH access restrictions, HTTPS, security headers, and secure administrative access.
- Manage CloudTrail audit logs and relevant AWS security monitoring services.
- Support vulnerability remediation, security assessments, VAPT findings, and infrastructure hardening.
- Maintain appropriate backup, retention, access-control, and auditability practices for a fintech environment.
- Support security and infrastructure documentation required for internal reviews and external audits.
Backup, Disaster Recovery & Business Continuity
- Implement and maintain automated database backups, snapshots, retention policies, and recovery procedures.
- Establish and periodically test disaster recovery and restoration processes.
- Configure appropriate RDS backup, encryption, and deletion-protection settings.
- Define recovery objectives and identify infrastructure components that could become single points of failure.
- Develop practical recovery and rollback procedures for application releases and infrastructure failures.
- Ensure critical application services and transaction-related infrastructure can be restored reliably.
Infrastructure Scaling & Cost Optimization
- Monitor AWS resource utilisation and identify opportunities to optimise infrastructure costs.
- Recommend appropriate EC2 instance types, storage configurations, networking options, and managed services based on actual workload requirements.
- Plan for increased API traffic, concurrent users, and growth in investment activity.
- Implement infrastructure changes incrementally, balancing cost, availability, security, and scalability.
- Evaluate and implement Docker, infrastructure as code, Auto Scaling, and container-based deployments where appropriate.
- Help establish a scalable architecture that can evolve towards services such as ECS / Fargate without unnecessary premature complexity.
- Track AWS resource usage and implement cost alerts, tagging, and resource lifecycle management.
Collaboration & Engineering Enablement
- Work closely with backend, frontend, QA, and product teams to understand deployment and infrastructure requirements.
- Support developers in debugging environment-specific issues and improving application reliability.
- Establish standardised development, QA, and production deployment practices.
- Maintain clear documentation for CI/CD pipelines, infrastructure architecture, incident handling, and server operations.
- Participate in release planning, infrastructure reviews, incident reviews, and technical discussions.
- Take end-to-end ownership of DevOps activities and continuously improve the team’s operational efficiency.
Skills And Knowledge
Technical Skills
- Strong hands-on experience with AWS services, particularly EC2, VPC, IAM, S3, CloudFront, Route 53, RDS, CloudWatch, and ACM.
- Good understanding of AWS networking, including public/private subnets, route tables, security groups, NAT Gateways, Elastic IPs, and network troubleshooting.
- Strong proficiency in Linux server administration, preferably Ubuntu.
- Experience managing Nginx, reverse proxies, SSL/TLS certificates, DNS, and HTTPS configurations.
- Experience deploying and maintaining Node.js applications using PM2 or equivalent process managers.
- Hands-on experience designing and maintaining CI/CD pipelines using GitHub Actions or equivalent tools.
- Strong understanding of Git, GitHub workflows, branching strategies, pull requests, and deployment controls.
- Experience with PostgreSQL / Amazon RDS administration, backups, monitoring, and connectivity troubleshooting.
- Experience with application logging, monitoring, alerting, and production incident management.
- Knowledge of IAM roles, least-privilege access, secrets management, encryption, and infrastructure security.
- Ability to write shell scripts and automate routine infrastructure operations.
- Understanding of load balancing, health checks, high availability, and Auto Scaling concepts.
- Experience with AWS cost optimisation and infrastructure capacity planning.
- Good troubleshooting, analytical, and root-cause investigation skills.
Preferred Technical Skills
- Experience with Terraform, AWS CloudFormation, or other Infrastructure as Code tools.
- Experience with Docker and container-based application deployment.
- Familiarity with Amazon ECS / Fargate and container orchestration.
- Experience with AWS Systems Manager, Session Manager, and secure remote server administration.
- Familiarity with CloudTrail, GuardDuty, AWS Config, and other AWS security services.
- Experience with performance testing, load testing, and capacity planning.
- Familiarity with Sentry, CloudWatch dashboards, and centralised log management.
- Understanding of backup strategies, disaster recovery, and business continuity planning.
- Experience supporting fintech, banking, payment systems, or other security-sensitive applications.
Behavioural & Professional Competencies
- Strong ownership and accountability for infrastructure reliability.
- Ability to independently investigate and resolve complex production issues.
- Security-first mindset, particularly when handling financial applications and sensitive data.
- Proactive approach to automation, monitoring, and incident prevention.
- Ability to balance scalability, reliability, security, and infrastructure cost.
- Strong documentation and operational discipline.
- Good communication and collaboration skills with developers and business stakeholders.
- Ability to work in a fast-paced startup environment with evolving technical requirements.
- Willingness to take responsibility for both day-to-day infrastructure operations and long-term improvements.
- Key Expectations from the Role
- Own AWS Infrastructure – Take end-to-end responsibility for the stability, security, availability, and maintainability of Bondsmart’s cloud infrastructure.
- Automate Deployments – Build reliable CI/CD pipelines and reduce manual deployment and server management activities.
- Strengthen Security – Implement secure access controls, private networking, secrets management, audit logging, and infrastructure hardening.
- Improve Monitoring & Reliability – Establish effective logging, alerting, incident response, and root-cause analysis practices.
- Prepare for Growth – Improve infrastructure readiness for increased traffic through appropriate capacity planning, load balancing, and Auto Scaling.
- Control Infrastructure Costs – Optimise AWS spending while maintaining appropriate reliability, security, and performance.
- Ensure Backup & Recovery Readiness – Establish and test reliable backup, restoration, and disaster recovery procedures.
- Support Financial Integrations – Maintain reliable network connectivity and stable outbound IP requirements for external financial service providers.
- Build Maintainable Infrastructure – Document infrastructure, automate repeatable tasks, and establish standardised operational procedures.
- Be Hands-on – Actively work on AWS, Linux, networking, deployment pipelines, debugging, and production incidents rather than functioning only as an infrastructure coordinator.
Experience Background
- AWS cloud infrastructure management, configuration, and optimization.
- Management of EC2 instances, VPCs, subnets, security groups, route tables, and IAM.
- Deployment and maintenance of Node.js / Express.js / NestJS backend applications.
- Management of Nginx, PM2, Linux servers, and application runtime environments.
- Frontend deployment using Amazon S3, CloudFront, Route 53, and SSL/TLS certificates.
- CI/CD pipeline development and automation using GitHub Actions or equivalent tools.
- Database infrastructure management using Amazon RDS and PostgreSQL.
- Infrastructure monitoring, logging, alerting, and production troubleshooting.
- Cloud security, access management, network security, and secrets management.
- Backup management, disaster recovery, high availability, and infrastructure reliability.
- Infrastructure cost optimization, capacity planning, and performance monitoring.
- Experience working with development teams to improve deployment processes and operational reliability
- Experience in fintech, banking, financial services, or other security-sensitive environments is preferred
Educational Qualification
B.Tech / B.E. / M.Tech / MCA / BCA in Computer Science, Information Technology, or a related field. Relevant practical experience and industry certifications will be an advantage.
