Company: SmartCore
Employment Type: CONTRACTOR
Work Format: remote (only Europe) / hybrid
Work Type: fulltime
Grade: middle/senior
English: B2
Countries: Serbia / Spain / Kazakhstan +2 more
Relocation: Spain
Job description
TL;DR
DevOps Engineer (Fintech): support and development of cloud infrastructure in AWS with a focus on Kubernetes and CI/CD processes. Focus on ensuring high availability and security of payment systems in accordance with PCI/ISO standards.
DevOps Engineer (Strong Middle / Senior) in an international financial holding – remote friendly (EMEA/Barcelona)
About the company:
SmartCore is a fintech holding that creates infrastructure for the next generation of payments. Our solutions cover the entire financial operations cycle: from core banking and processing to cards, wallets, and anti-fraud systems.
We work with card acquiring, ensuring high speed and security of payments. In 5 years on the market, we have built a stable infrastructure in the EU and CIS, launched our own payment solutions, and continue to grow actively.
We are currently looking for a DevOps Engineer (Strong Middle / Senior). You will be responsible for supporting and developing cloud infrastructure: working with existing services, new environments, and components, automation, monitoring, and security in stage and prod environments.
In the team: CTO, CEO, 6 back-end developers, DevOps, ML engineer, and 2 PMs.
Technical Landscape:
- AWS: VPC, IAM, EKS, ECS/Fargate, ALB, ECR, RDS, ElastiCache, MSK, S3, Route53, ACM, Secrets Manager, KMS.
- Kubernetes: EKS, Deployments, Services, Ingress, IRSA, Helm, Kustomize, ArgoCD, Karpenter, External Secrets.
- IaC & CI/CD: Terraform, Terragrunt, GitHub Actions, Docker, AWS CodeBuild / CodePipeline, ECR.
- Observability: Prometheus, Grafana, OpenTelemetry / ADOT, CloudWatch, alerts.
- Data and Queues: PostgreSQL (RDS/Aurora), Redis, Kafka / MSK, MongoDB, ClickHouse.
- Cloudflare: DNS, CDN, WAF, SSL / TLS, traffic proxying.
- Security and Database: IAM / IRSA, secrets not in Git, TLS, PCI / ISO, Linux, bash, git, network (DNS, load balancing, security groups).
Responsibilities:
- Maintain infrastructure in AWS: network, compute, databases, queues, secrets.
- Add new services, environments, and components to Kubernetes and ECS.
- Keep IaC (Terraform / Terragrunt) and GitOps (ArgoCD) up-to-date.
- Configure and fix CI/CD: image building, deployment, pipelines.
- Monitor monitoring, logs, and alerts (Grafana, Prometheus, CloudWatch).
- Participate in on-call: troubleshoot incidents and assist development with deployments and environments.
- Support Cloudflare (DNS, CDN, WAF, certificates), ClickHouse, and the rest of the data layer (PostgreSQL, Redis, Kafka, MongoDB).
- Ensure security: access, secrets, network, PCI / ISO requirements.
Our Expectations (Must have):
- Experience: 4+ years of experience with AWS in production (VPC, IAM, EKS, ECS, RDS, load balancing, secrets).
- Expertise: EKS and Kubernetes in practice (deployment, debugging, Ingress, IRSA).
- Tools: Terraform (modules, state), Terragrunt, Helm + GitOps (ArgoCD), Docker, and CI/CD (GitHub Actions / CodeBuild).
- Technologies: Experience with ECS Fargate, Kafka / MSK, ClickHouse, Cloudflare, Grafana + Prometheus / AMP, CloudWatch, External Secrets, Karpenter.
- Specifics: Fintech experience or knowledge of PCI standards.
- Troubleshooting: Production debugging (pod not starting, no traffic, no metrics), readiness for on-call.
- Languages: Russian + English (reading documentation, AWS).
What we offer:
- Impact: Lots of design and new development, an opportunity to be at the forefront of the project. Freedom in decision-making and lack of bureaucracy.
- Processes: Flexible development processes based on Scrum (but without fanaticism and unnecessary bureaucracy).
- Location: Full-time, flexible hours, remote work in the European time zone or support and assistance with relocation (EU - Spain, Barcelona).
- Culture: We invest in engineering quality (modern tools, documentation, clear processes) and provide experience working in a large holding with its own infrastructure.
