DevOps

_At_ _[NOVACARD](https://novacard.mx/)_ _, we’re redefining how people use_ credit. We _are the_ _first interest-free and no-annual-fee credit card in Mexico_ _, designed to simplify personal finances and give users complete control - all from a mobile app. With NOVACARD, users can access up to_ _$200,000 MXN in credit_ _, only pay when they use it, and manage everything digitally in under 5 minutes. Our mission is to empower people to make smarter financial decisions by offering flexibility, transparency, and the freedom they need to reach their goals. Simple finances, big goals._

About the Role:

We’re looking for a DevOps Engineer to design, deploy, and operate AWS infrastructure for a large-scale migration of a digital financial product. You’ll build and maintain a production-ready platform covering AWS networking, Kubernetes/EKS, CI/CD, observability, backup/restore, and secure access management. You’ll collaborate closely with development, system analysis, QA, and engineering teams to ensure fast delivery, stable services, and a controlled migration.

Key Responsibilities:

AWS Infrastructure Design & Operations

• Design, deploy, and maintain AWS infrastructure: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.
• Configure AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.
• Ensure HA, backup/restore, disaster recovery, and production infrastructure principles.
• Create and maintain AWS infrastructure as code using Terraform.

Kubernetes & Containerization

• Build and operate Kubernetes on AWS (EKS).
• Work with core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.
• Use Helm for application management.
• Configure Ingress Controller, Load Balancer, and TLS/certificates.
• Understand Kubernetes storage and ensure stateful applications run reliably.
• Work with Docker: image builds, registry, container troubleshooting.

CI/CD & Automation

• Build CI/CD processes, preferably with GitLab CI.
• Automate deployment of applications and dependent services.
• Integrate infrastructure changes into pipelines and maintain reproducible environments.

Observability, Reliability & Operations

• Set up monitoring with Prometheus + Grafana: metrics and alerts.
• Organize centralized log collection and analysis: Loki/ELK/OpenSearch.
• Diagnose network and system issues in Linux.
• Ensure production stability, respond to incidents, and eliminate root causes.

Security & Access Management

• Manage secrets: AWS Secrets Manager / Vault/OpenBao / External Secrets.
• Configure RBAC/IAM and follow the principle of least privilege.
• Ensure secure service-to-service communication and infrastructure access.

Data & Services

• Support PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.
• Ensure backup/restore and fault tolerance for stateful services.
• Help teams deploy and maintain dependent services in Kubernetes.