SRE / DevOps Engineer

apreel was founded in April 2010 by friends who dreamed of creating their own software house. With the company's growth and increasing client trust, it expanded its services to include IT expert leasing, which is now apreel's main business pillar. The founders continue to pursue their passion for creating proprietary IT solutions and aim for their continuous improvement.

• Minimum 5 years of experience in SRE, DevOps, or Platform Engineering in production.
• Deep knowledge of AWS services including ECS or EKS, IAM (assume-role patterns, scoped policies), VPC, RDS, ElastiCache, S3, CloudWatch.
• Experience with Infrastructure-as-Code tools, preferably Terraform or Pulumi.
• Proficiency with GitHub Actions including building reusable workflows, secret handling, and reproducible builds.
• Container fundamentals including Dockerfile authoring, multi-stage builds, and image hardening.
• Linux operations expertise.
• Experience with Datadog in production: logs, APM, metrics, dashboards, monitors, SLO/SLI definition.
• Incident response experience including leading or co-leading real production incidents and writing post-mortems.
• Observability experience for both Node.js and Python services.
• Secrets management using AWS Secrets Manager, SOPS, or comparable tools.
• Working proficiency in English.

Nice to have:

• Cost-optimization discipline including FinOps, AWS Cost Explorer, Reserved Instance planning.
• LLM cost monitoring with OpenAI token spend dashboards.
• Kubernetes experience.
• Security baseline experience including CIS benchmarks, dependency scanning (Snyk, Dependabot), SAST tools.
• GDPR and data-residency considerations for cross-border data flows (US ↔ PL).
• Mobile CI considerations such as Fastlane, app-signing automation, TestFlight / Google Play internal tracks.
• On-call playbook authoring.

Engagement context:

• Takeover of production AI mobile coaching platform with runtimes Node.js/NestJS and Python/FastAPI.
• Manage datastores including MongoDB, Postgres, and Redis.
• Manage infrastructure on AWS (ECS/EKS, RDS, ElastiCache, S3, VPC, IAM).
• Oversee CI with GitHub Actions.
• Manage observability with Datadog.
• Handle push notifications with OneSignal.
• Manage error tracking with Crashlytics.
• Manage deep links with Branch.
• Coordinate with vendors: Auth0, ElevenLabs, OpenAI, Amplitude, Terra, Strava.

Role summary:

• Senior SRE/DevOps responsible for CI to production, Infrastructure as Code, deployment automation, observability, on-call duties, cost control, secrets, and security baselines.
• Phase 1: measure and document.
• Phase 2: operate and transfer ownership.

First 90 days:

• Audit CI/CD (GitHub Actions) for duration, flakiness, failure modes, and secrets handling.
• Audit AWS components: ECS/EKS topology, IAM posture, VPC layout, RDS, ElastiCache, S3.
• Audit Datadog dashboards, tracked metrics, and SLO/SLI gaps.
• Audit incidents over 12 months: count, severity, MTTR, RCA patterns.
• Inventory vendors including Auth0, OneSignal, ElevenLabs, OpenAI, Branch, Amplitude, Terra, Strava, Crashlytics for owners, billing, MFA, and recovery plans.

Ongoing:

• Own CI/CD across services.
• Own AWS infrastructure using Terraform or Pulumi.
• Control costs including OpenAI token spend and AWS rightsizing.
• Maintain security baselines: least-privilege IAM, secrets rotation, dependency scanning.
• Build onboarding process for second SRE/DevOps hire.