DevOps Engineer

• Own and extend the GitOps deployment model — OpenTofu/Terragrunt for infrastructure, GitHub Actions and AWS CodePipeline for application delivery — across all environments and AWS accounts.
• Maintain OIDC federation for deployment identity; enforce the zero long-lived-credentials standard across every pipeline and runner.
• Build and maintain deployment pipelines for AWS Lambda services, API Gateway configurations, containerized workloads on EKS/ECR, and the PWA front end.
• Implement progressive delivery for the real-time call path: canary and blue/green releases, automated rollback on error-rate or latency regression, and feature flags for risky changes.
• Manage EAS build and over-the-air update pipelines as React Native/Expo mobile and kiosk surfaces come online.
• Own the observability stack — CloudWatch, X-Ray, structured logging, metrics, and alerting — with particular attention to the WebSocket screen-pop path and the voice agent's prefetch cache.
• Define and instrument SLOs for the call-intelligence path. Screen-pop time-to-first-render and voiceagent lookup latency are the two numbers that matter most; own them.
• Build runbooks and on-call rotation practices. Lead incident response and blameless post-incident reviews; drive corrective actions to completion.
• Monitor and tune Redis caching, Aurora Serverless scaling behavior, and Lambda cold-start characteristics on latency-sensitive endpoints.
• Operationalize defense-in-depth tooling: GuardDuty, Security Hub, Inspector, Macie, WAF/Shield, orgwide CloudTrail, and automated EventBridge remediation.
• Own secrets management (AWS Secrets Manager / Parameter Store) and rotation for DMS, CRM, telephony, and payment integrations.
• Integrate security scanning into the pipeline: dependency scanning, container image scanning, IaC policy checks, and secret detection on commit.
• Support PCI-relevant controls on the secure payment link path and PII-handling controls across voice and call-intelligence services.
• Track and report AWS spend by account, service, and workload; identify and implement optimization (right-sizing, Savings Plans, Spot for appropriate workloads, S3 lifecycle policies).
• Provide capacity guidance ahead of new business-unit onboarding.

Requirements

• 4+ years in a DevOps, SRE, or Platform Engineering role with production ownership.
• Deep, hands-on AWS experience — Lambda, API Gateway, ECS/EKS, ECR, S3, Aurora, VPC networking, IAM.
• Strong Terraform or OpenTofu skills, including module design and multi-environment patterns. Terragrunt experience strongly preferred.
• Proven CI/CD ownership with GitHub Actions, CodePipeline, or equivalent.
• Container fluency: Docker, and Kubernetes on EKS (Fargate and/or managed node groups).
• Scripting and automation in Python and/or Node.js — enough to write real tooling, not just glue.
• Practical observability experience: you have designed alerts people actually trust, not just dashboards.
• Incident response experience in a system where downtime had immediate business consequences.

• Experience with real-time systems — WebSockets, event-driven architectures, telephony/CPaaS integrations like 3CX, Twilio, or similar.
• AWS multi-account governance experience — Organizations, Control Tower, SCPs, IAM Identity Center, Transit Gateway.
• Exposure to PCI DSS or comparable compliance regimes.
• Automotive retail, DMS integration, or dealership technology background.
• AWS certification (DevOps Engineer – Professional, Solutions Architect – Associate or above).

Benefits

• Fully remote – work from anywhere in the Philippines.
• Work on a mature, serverless-first, GitOps-driven platform — not a legacy modernization project.
• Hands-on collaboration with senior architects and data scientists on a small, high-autonomy team.
• Opportunity to shape the operational practices of a platform that scales to multiple business units.
• Documentation-first culture with implementation-level detail over slideware.
• A team environment that values ownership, technical depth, and follow-through.