About the role
This is a true ownership role, not a ticket queue. You will be the single owner of our infrastructure, with direct access to engineering leadership and the freedom to choose tools, set standards and drive changes that every engineer and every customer feels. As a profitable company, we invest in getting infrastructure right rather than chasing short-term fixes — and you will be the one shaping it.
Key Responsibilities
Infrastructure ownership (AWS)
- Own Recruiterflow's AWS infrastructure end to end: EC2, RDS (MySQL), Elastic Load Balancing, VPC/networking, IAM, S3, EFS, Route 53 and related services.
- Design and optimize EC2 fleet sizing, Auto Scaling and Application Load Balancer configuration for availability and cost efficiency.
- Tune Amazon RDS for MySQL: instance sizing, parameter groups, read replicas and replica lag, backups, snapshots and point-in-time recovery.
- Drive AWS cost optimization through right-sizing, Reserved Instances/Savings Plans, storage lifecycle policies and regular cost reviews.
- Codify infrastructure as code so environments are reproducible, reviewable and version-controlled.
- Own and improve our CI/CD pipelines on Bitbucket Pipelines: faster builds, reliable test stages, PR checks and safe, repeatable deployments.
- Introduce zero-downtime deployment strategies (rolling, blue/green) and clean rollback paths.
- Manage build artifacts, environment configuration and secrets across development, staging and production.
- Build a secure, streamlined way for engineers to connect to EC2 and RDS — e.g. AWS Systems Manager Session Manager, bastion-less access, port forwarding and SSO-based short-lived credentials — replacing shared keys and ad-hoc access.
- Implement least-privilege IAM roles and policies, with access that is auditable and easy to grant or revoke.
- Provide self-serve tooling and documentation so developers can spin up, debug and access environments without waiting on DevOps.
- Set up monitoring, logging and alerting (e.g. CloudWatch and/or Prometheus/Grafana) with clear dashboards for application and database health.
- Participate in production incident response, lead root-cause analysis and write runbooks to prevent repeat issues.
- Own backup, disaster recovery and data-retention practices for a multi-tenant SaaS platform holding customer data.
- Harden infrastructure security: patching, network segmentation, security groups, encryption at rest and in transit, and secret management.
- Work closely with backend, frontend and QA engineers and the product support team to remove infrastructure bottlenecks.
- Document architecture, runbooks and standards, and share DevOps best practices across the team.
Your work will directly shape how reliably and quickly Recruiterflow reaches thousands of recruiters every day. Faster pipelines mean features ship sooner; a tuned AWS setup means better performance at lower cost; and frictionless, secure access means engineers spend their time building instead of waiting. You will have the room to define the DevOps function at Recruiterflow and grow it as we scale.
Required Skills
- 4- 6 years of hands-on experience in DevOps, SRE or cloud infrastructure roles, ideally supporting a production SaaS product.
- Strong AWS expertise: EC2, RDS, ELB/ALB, Auto Scaling, VPC, IAM, S3, CloudWatch and Systems Manager.
- Database operations: experience running MySQL on Amazon RDS in production — performance tuning, read replicas, backups and recovery.
- CI/CD: proven experience building and maintaining pipelines (Bitbucket Pipelines preferred; GitHub Actions, GitLab CI or Jenkins also fine) and Git-based workflows.
- Infrastructure as Code: hands-on with Terraform, CloudFormation or AWS CDK.
- Linux administration: strong Ubuntu/Linux skills, including networking, SSH, Nginx/web servers and process management.
- Scripting: solid Bash and Python skills for automation and tooling.
- Security: practical experience with IAM least-privilege design, secret management and secure access patterns for servers and databases.
- Observability: experience setting up monitoring, logging and alerting, and handling on-call incidents.
- Strong problem-solving, clear communication and comfort working as the owner of a function.
- Experience running Python/Flask (or Django) applications in production, including WSGI servers such as Gunicorn/uWSGI and background workers.
- Experience with multi-tenant SaaS architectures and their isolation, scaling and data-safety concerns.
- Familiarity with Docker and container orchestration (ECS, EKS or Kubernetes).
- Experience with caching and queueing systems such as Redis, Celery, SQS or RabbitMQ.
- Exposure to zero-trust/secure access tools (AWS SSM, Tailscale, Teleport, AWS IAM Identity Center).
- Familiarity with supporting AI/LLM workloads on AWS (e.g. Amazon Bedrock).
- AWS certifications (Solutions Architect Associate/Professional, SysOps Administrator or DevOps Engineer Professional).
- Experience with SFTP/EFS-based file integrations and data migration infrastructure.