Senior Software Engineer (DevOps)

[About the Role] We're a fast-moving startup looking for a hands-on Senior Software Engineer (DevOps) to own and evolve our infrastructure. You'll work closely with the engineering team to streamline deployments, improve reliability, and help us accelerate deployment process. This is a high-impact, high-ownership role where your decisions shape how we build and ship. [Responsibilities] Infrastructure & Deployment - Own and evolve CI/CD pipelines built on GitHub Actions, and integrate with GCP Artifact Registry for Docker image management - Manage and optimize cloud infrastructure on Google Cloud Platform (GCP) - Containerize and orchestrate services using Docker and Docker Compose, with a planned migration toward Kubernetes (K8s) - Lead on-premises deployment initiatives — evaluating, implementing, and continuously optimizing self-hosted infrastructure - Occasionally travel to client sites for on-premises deployment and support as needed Observability & Operations - Design and build the service monitoring and alerting system using the Grafana ecosystem (Grafana, Prometheus, OpenTelemetry) to detect and help resolve production issues - Continuously improve automation for service maintenance and operations, reducing manual toil - Support task management and product release management, ensuring smooth and predictable deployments - Drive a culture of high-quality software development and deployment processes across the engineering team Security, Compliance & Governance - Embed security and compliance controls into infrastructure and workflows - Implement and manage secrets management practices (e.g. GCP Secret Manager, Vault) - Define and enforce IAM policies and access governance across cloud resources and CI/CD pipelines - Run regular vulnerability scanning on container images and infrastructure, and drive remediation - Establish baseline security hardening practices for infrastructure and deployment pipelines [Requirements] - Solid experience with GCP (Artifact Registry, Cloud Run, GKE, IAM, VPC Networking, etc.) - Proficient with Docker and container workflows; hands-on with Docker Compose in production or near-production environments - Proven experience building end-to-end CI/CD pipelines with GitHub Actions - Hands-on with the Grafana ecosystem (Grafana, Prometheus, OpenTelemetry) for metrics, logs, tracing, dashboards, and alerting - Familiarity with on-premises / self-hosted deployment and infrastructure optimization - Working knowledge of Kubernetes concepts; experience or strong motivation to lead K8s adoption - Experience with security best practices — secrets management, IAM governance, container/infra vulnerability scanning - Comfortable scripting in Bash, Python, or similar [Nice to Have] - Experience migrating from Docker Compose to Kubernetes - Familiarity with GitOps tools (ArgoCD, Flux) - Infrastructure-as-code experience (Terraform, Pulumi) - Hands-on experience instrumenting services with OpenTelemetry SDKs - Familiarity with compliance frameworks (SOC 2, ISO 27001) is a plus