About the role
We're looking for someone who can set up production-grade AWS infrastructure, make sure our early-stage decisions are sound, and leave behind infrastructure that another engineer can confidently maintain without the original author.
Responsibilities:
- High-level scope: AWS infrastructure from scratch (VPC, compute, database, load balancing, security).
- CI/CD pipeline with secure deployment practices.
- Monitoring and alerting foundation.
- Database provisioning with migration tooling.
- Review our current infrastructure decisions, confirm what's right, flag what should change, and document the growth path.
- Clean handoff with documentation.
Requirements:
- AWS VPC design from scratch.
- Must have created VPCs with public/private subnet separation, NAT gateways, and ALB routing.
- Not someone who deployed to VPCs someone else built.
- Terraform that survives handoff.
- Must have written Terraform that another engineer inherited and maintained without the original author.
- Modular structure, remote state, environment separation.
- Secure CI/CD and operational recovery.
- Has set up GitHub Actions with OIDC-based AWS role assumption (no stored credentials).
- Has validated that database backups actually restore.
- Must have 5+ years of AWS infrastructure experience.
- Terraform depth: remote state, locking, modules, staging/prod isolation, drift detection.
- AWS networking from scratch: VPC, subnets, NAT, security groups, IAM least privilege, ECS experience, Fargate preferred, RDS.
- PostgreSQL: Provisioning, backup configuration, and connection management.
- Docker: Container images for JVM services CI/CD with GitHub Actions, including OIDC-based AWS auth backup/restore operational maturity.
- Has delivered infrastructure for at least two production AWS applications and handed them off to another engineer.
- Has experience right-sizing infrastructure for early-stage products.
- Comfortable working independently from design documents.