Senior DevOps Engineer

Railsware is hiring a Senior DevOps Engineer to own and evolve Mailtrap's production infrastructure, which is a multi-region AWS platform for high-volume email sending and testing. The role involves leading a strategic initiative to partially migrate workloads from AWS to rented bare-metal / colocation infrastructure, focusing on a hybrid design rather than a full cloud exit.

• 5+ years experience in DevOps/platform roles with production ownership
• Deep knowledge of AWS services including VPC, ECS, IAM, RDS, ElastiCache, and networking
• Expertise in Terraform usage at scale, including modules and remote state management
• Experience with CI/CD pipelines using GitHub Actions, including automated production deployments
• Proficiency with Docker containers and operating services on ECS or Kubernetes
• Strong Linux networking skills including DNS, TLS, load balancing, firewalls, and VPN/hybrid networks
• Experience planning and executing migration to on-premises, colocation, or private clouds, including hybrid environments
• Ability to own multi-quarter infrastructure initiatives covering TCO, design, vendors, cutover, and rollback
• Automation skills using shell scripting and/or Python
• Fluent English in spoken and written forms

Strongly preferred:

• Experience with colocation/bare-metal operations including IP address management (NetBox), Ansible, and image-based provisioning (Packer)
• Knowledge of HAProxy, Nginx
• Experience replacing managed AWS services with self-hosted solutions like Postgres HA, Redis/Valkey, Kafka, OpenSearch
• Email infrastructure knowledge (MTA, SMTP, IP reputation, DKIM/SPF/DMARC) with tools like Halon
• Experience with Cloudflare services (DNS, WAF, Access)
• Observability beyond CloudWatch: Prometheus, Grafana, Loki or equivalents
• Experience with multi-region SaaS or EU data residency requirements
• Cost-conscious architecture and FinOps mindset

Would be a plus:

• Knowledge of GCP (e.g. BigQuery, certifications)
• Comfortable reading Ruby or Go code
• Holding AWS certifications

• Operate and evolve multi-account, multi-region AWS infrastructure and Terraform modules/workspaces
• Ensure safe zero-downtime infrastructure changes across network, storage, and services
• Manage ECS services, blue/green deployments, and Docker image pipelines
• Maintain reliability using CloudWatch, PagerDuty, and Sentry
• Implement and maintain security baselines including IAM, secrets management (SSM), and Cloudflare edge rules
• Partner with engineers on release automation and production readiness
• Maintain a hybrid platform combining AWS and rented bare-metal infrastructure
• Build business and technical cases for workload migration from AWS to bare-metal
• Design colocation landing zones including compute, network, storage, observability, and secrets
• Produce migration waves, dependency maps, and cutover/rollback plans
• Establish hybrid connectivity with dual-run periods and traffic shifting via Cloudflare
• Replace or re-home managed services like compute, queues, search, caching, and mail transfer agents
• Coordinate colocation vendors, timelines, and engineering teams, reporting progress and risks

Fluent English (both spoken and written) is required.