DevOps Engineer

NAXA is looking for an experienced DevOps Engineer to join our team in Kathmandu. We are seeking someone with 2–3 years of experience who is comfortable working across AWS, CI/CD, Docker, Django/Python, PostgreSQL, monitoring, security, and infrastructure automation. If you enjoy owning production systems, improving reliability, automating deployments, and working with a team building digital solutions for social good, we encourage you to apply. NAXA is an equal opportunity employer and welcomes applications from all qualified individuals. Interested? Please submit your application through the following link ONLY and not direct email or social media messaging: https://docs.google.com/forms/d/e/1FAIpQLScjI1UQUgbtr_4OYErX_i3pQcvwO2MuBStQ3SumQ9JymO4knQ/viewform *Important Note: Only those applications coming through the above link or LinkedIn will be further evaluated. Applications from any other source will be discarded. The role We're hiring a DevOps Engineer who is equally comfortable in our Django backend and in AWS. You'll own our cloud infrastructure, CI/CD, observability, and security, and work alongside backend developers to make the application itself faster and easier to operate. Location: Kathmandu, Nepal (on-site/hybrid)Type: Full-timeExperience: 2-3 years in DevOps, SRE, or backend roles with production ownership What you'll do Infrastructure & cloud (AWS) Own our AWS estate: EC2, RDS (PostgreSQL), S3, IAM, VPC/security groups, WAF, and related services across environments (staging, production, client-specific deployments).Move manual server setup to Infrastructure as Code (Terraform or similar) so environments are reproducible.Improve our scaling approach for peak-load periods, including right-sizing instances and load balancing.Manage backups, disaster recovery, and restore drills for databases and file storage. CI/CD & deployments Own GitHub Actions pipelines that build and deploy our Docker/Docker Compose services: Django backend, web frontend, Airflow, and Plotly/Dash dashboards.Make deployments safe and repeatable: zero-downtime releases, health checks, rollbacks, and no dependence on files living only on a server.Support mobile and frontend release builds alongside backend deploys. Backend & data platform Work in our Django/Python codebase: debug production issues, review migrations, and fix performance problems end to end.Profile and optimize PostgreSQL: slow queries, indexing, connection pooling, and caching (Redis).Run and harden Airflow data pipelines and the ODK Central / KoboToolbox integrations our clients rely on.Help roll out async task processing (e.g. Celery + Redis) for heavy background work. Security & secrets Own secrets management (AWS Secrets Manager / SSM): no credentials in repos, chat, or .env files on servers; rotate keys on a schedule.Maintain WAF rules, rate limiting, least-privilege IAM, SSH key hygiene, and patching.Integrate SAST, DAST, and vulnerability scanning into CI, and triage findings by risk.Support client security questionnaires and compliance reviews with accurate, documented answers. Observability & reliability Set up monitoring, logging, and alerting (e.g. CloudWatch, Grafana, Prometheus, Sentry) so we find issues before users do.Lead incident response and write short post-incident reviews.Document architecture, runbooks, and deployment steps so anyone on the team can operate the platform. Nice to have Apache Airflow operations (scheduler, workers, DAG deployment).Celery, Redis, and async job design.Plotly Dash or other Python dashboard apps in production.ECS, and knowing when not to use them.Monitoring stacks with Grafana.SAST/DAST tools (e.g. Semgrep, OWASP ZAP, Trivy) and pen-test follow-up.AWS certification (Solutions Architect, SysOps, or DevOps Engineer).