• Design, develop, and maintain modern full-stack applications. • Build scalable APIs, microservices, and cloud-native solutions. • Automate infrastructure and deployment pipelines using DevOps best practices. • Develop secure, reliable, and high-performing applications on Microsoft Azure. • Monitor, troubleshoot, and continuously improve application performance and reliability. • Collaborate with architects, developers, QA engineers, and stakeholders to deliver high-quality solutions.

• Develop comprehensive monitoring solutions to provide full visibility to the different platform components • Build and enhance dashboards and alerting to monitor our apps and platform components • Troubleshoot priority incidents, facilitate blameless post-mortems and ensure permanent closure of incidents • Evaluate our apps and platform components performance, provide improvements to meet our response goals • Engage with the development team throughout the life cycle to help develop software for reliability and scale • Improve our CI/CD processes to make them as boring as possible (automatization, bots implementation and etc.)

Role Description We're looking for a capable DevOps / Cloud Engineer to own meaningful parts of our AWS estate, ship CI/CD improvements, and help maintain the security and reliability of systems that serve BFSI enterprise clients worldwide. You'll work closely with our Senior Engineer and will help bring a junior engineer up to speed. What You'll Do - Build and maintain AWS infrastructure using Terraform — ECS Fargate, VPCs, RDS, S3, IAM, and related services - Manage and improve GitHub Actions CI/CD pipelines across multiple environments - Work within our IaC orchestration (TACOS) system for multi-tenant deployments - Support AWS networking — VPC design, security groups, Route 53, PrivateLink basics - Help maintain security controls — IAM policies, logging, alerting, access reviews - Contribute to compliance evidence gathering for SOC 2 / ISO 27001 - Troubleshoot infrastructure issues across ECS, networking, DNS, and security - Write and maintain runbooks and documentation What Success Looks Like Within your first few months, you'll: - Take ownership of key parts of Hupo's cloud infrastructure and become comfortable operating across our AWS environment and deployment workflows. - Ship improvements to our CI/CD pipelines, infrastructure automation, and operational tooling to improve reliability and developer experience. - Support the team in maintaining secure, scalable, and reliable systems for our enterprise BFSI customers. You’ll also be expected to continuously: - Identify opportunities to improve infrastructure, automation, and operational processes. - Take ownership of incidents and production issues, driving them through to resolution. - Document systems, share knowledge, and contribute to raising the engineering bar across the team. Qualifications - 3+ years in a DevOps, Cloud, or SRE role - Solid AWS fundamentals — VPC, ECS or EKS, IAM, S3, RDS - Terraform — comfortable writing and reviewing HCL at module level - GitHub Actions CI/CD — building, debugging, and maintaining pipelines - Linux, bash, and scripting - Security-aware — least-privilege IAM, secrets management basics - Good written communication for async remote work Nice-to-Haves - IaC orchestration tool experience (any TACOS) - AWS multi-account or AWS Organizations exposure - Azure exposure (even light) - SOC 2 or ISO 27001 familiarity - SaaS or AI product background - Python or Node.js scripting beyond bash - Cloudflare or advanced Route 53 DNS

Role Description We need a Sr. DevOps / Cloud Engineer to own our AWS and Azure environments, our multi-tenant deployment architecture, and our IaC CI/CD platform. You'll be a key technical voice on infrastructure decisions and will work directly with enterprise clients on security and integration requirements. What You'll Do - Own and evolve Hupo's AWS infrastructure — ECS Fargate, VPCs, IAM, RDS, PrivateLink, API Gateway, and more - Design and enforce AWS account organisation strategy — multi-account structures, AWS Organizations, SCPs, and landing zone patterns - Build and maintain multi-tenant deployment pipelines using a TACOS system (Terraform Automation and Collaboration), with per-client workspace and state isolation - Lead AWS networking design — VPC architecture, Transit Gateway, PrivateLink, NLB, and Private API Gateway for enterprise client integrations - Drive security and compliance posture for BFSI clients — SOC 2, ISO 27001, and enterprise security due diligence - Design and operate IAM Identity Center, cross-account role strategies, and external ID patterns for customer-deployed stacks - Manage GitHub Actions workflows for CI/CD across multiple environments and services - Lead infrastructure design decisions and produce ADRs, runbooks, and documentation - Mentor mid and junior engineers on the team What Success Looks Like - Take ownership of Hupo's cloud infrastructure across AWS and Azure, and become the go-to person for infrastructure architecture and operational decisions. - Design and implement scalable, secure, multi-tenant deployment patterns and CI/CD workflows that support our growing enterprise customer base. - Partner directly with enterprise customers and internal teams to deliver secure integrations, networking solutions, and compliance requirements for BFSI environments. - Continuously drive improvements in reliability, security, developer experience, and operational excellence across our infrastructure platform. - Document decisions, share knowledge, and raise the technical bar across the engineering team. Qualifications - 5+ years in a DevOps / Cloud / Platform Engineering role - Deep AWS expertise — multi-account architecture, VPC networking, IAM, ECS, Terraform - AWS account organisation — AWS Organizations, SCPs, Control Tower, or equivalent landing zone patterns - Advanced networking — Transit Gateway, PrivateLink, VPC Endpoint Services, NLB, Route 53 private zones - IaC orchestration (TACOS) — Spacelift, Terraform Cloud, Atlantis, or similar - Strong GitHub Actions CI/CD design and troubleshooting - Security engineering — IAM policies, least-privilege, audit trails, secrets management - Comfortable working async across time zones Nice-to-Haves - Azure alongside AWS (AKS, Entra ID, Azure networking) - Experience with enterprise BFSI security reviews or SOC 2 / ISO 27001 audits - Google Workspace + IAM Identity Center integration (SCIM / ssosync) - SaaS / AI product infrastructure background - FastAPI, Python, or Node.js service ownership - Cloudflare DNS management alongside Route 53