Senior DevOps Engineer

Railsware is looking for a Senior DevOps Engineer to maintain and evolve the production infrastructure of Mailtrap, a multi-region AWS platform focusing on high-volume email sending and testing. The role includes leading a strategic initiative migrating selected workloads from AWS to rented bare-metal/colocation infrastructure, designing a hybrid platform likely using Kubernetes or similar orchestrator. The engineering team operates in an agile, automation-focused environment.

• 5+ years senior experience in DevOps/platform with production ownership
• Deep expertise in AWS services including VPC, ECS, IAM, RDS, ElastiCache, networking
• Expertise in Terraform at scale (modules, remote state, Terraform Cloud)
• Experience with CI/CD pipelines using GitHub Actions, including automated deployments and blue/green deployment strategies
• Proficient with containers (Docker), and operating services on ECS or Kubernetes
• Strong Linux networking skills covering DNS, TLS, load balancing, firewalls, VPN/hybrid setups
• Proven experience planning and executing migration to on-premises, colocation, or private cloud environments (partial/hybrid preferred)
• Experience managing multi-quarter infrastructure initiatives including TCO, design, vendor management, cutover, and rollback
• Ability to automate operational tasks using shell scripting and/or Python
• Fluent in English (spoken and written)

Strongly preferred:

• Experience with colocation/bare-metal operations including IPAM (NetBox), configuration management with Ansible, image-based provisioning (Packer or equivalent), and reverse proxies like HAProxy or Nginx
• Experience replacing managed AWS services with self-hosted solutions (Postgres HA, Redis/Valkey, Kafka, OpenSearch)
• Knowledge of email infrastructure (MTA, SMTP, IP reputation, DKIM/SPF/DMARC), preferably with Halon or similar
• Experience with Cloudflare services (DNS, WAF, Access)
• Observability tools beyond CloudWatch such as Prometheus, Grafana, Loki or equivalents
• Prior work with multi-region SaaS or EU data residency requirements
• Cost-driven architecture mentality and FinOps mindset

Would be a plus:

• Experience with GCP (BigQuery, certificates)
• Comfortable reading Ruby or Go
• Relevant AWS certifications

Day-to-day:

• Operate and evolve AWS multi-account/multi-region infrastructure
• Manage Terraform modules and workspaces
• Ensure safe infrastructure changes with zero-downtime deployments
• Oversee ECS services and Docker image pipelines with blue/green deploys
• Monitor reliability via CloudWatch, PagerDuty, and Sentry; manage capacity and cost tags
• Maintain security baselines including IAM, secrets (SSM), and Cloudflare edge rules
• Collaborate with engineers on release automation and production readiness
• Maintain a hybrid platform of AWS and rented bare metal

Migration leadership:

• Build business and technical cases for migration from AWS to bare-metal/colocation
• Design the rented bare-metal/colo landing zone including compute, network, storage, observability, and secrets
• Plan migration waves, dependency maps, cutover and rollback procedures
• Establish hybrid connectivity and manage dual-run periods with safe traffic shifts using Cloudflare
• Replace or re-home managed services such as compute, queues, search, cache, and MTA nodes
• Coordinate with colocation vendors, teams, and report progress and risks

Candidate must be fluent in English (spoken and written).