Senior DevOps Engineer

Railsware is seeking a Senior DevOps Engineer to own and evolve Mailtrap's production infrastructure, a multi-region AWS platform focused on high-volume email sending and testing. The team values agile methodologies, continuous improvement, and automation.

• 5+ years of DevOps or platform experience with production ownership
• Deep knowledge of AWS components including VPC, ECS, IAM, RDS, ElastiCache, and networking
• Expertise in Terraform at scale with modules and remote state
• Experience with CI/CD pipelines using GitHub Actions and automated deployments (e.g., blue/green deployments)
• Proficiency with containers and operating services on ECS or Kubernetes
• Strong Linux networking skills including DNS, TLS, load balancing, firewalls, and VPN
• Ability to manage multi-quarter infrastructure initiatives (TCO, design, vendors, cutover, rollback)
• Automation skills using shell scripting and/or Python
• Fluent English (spoken and written)

Strongly preferred:

• Replacing managed AWS services with self-hosted solutions like Postgres HA, Redis/Valkey, Kafka, OpenSearch
• Email infrastructure expertise including MTA, SMTP, IP reputation, DKIM/SPF/DMARC (Halon or similar)
• Experience with Cloudflare DNS/WAF/Access
• Observability beyond CloudWatch using Prometheus, Grafana, Loki, or equivalents
• Experience with multi-region SaaS or EU data residency
• Cost-driven architecture or FinOps mindset

Would be a plus:

• Experience with GCP (BigQuery, certificates)
• Ability to read Ruby or Go
• AWS Certificates
• Experience with on-premises, colo, or private cloud migrations including IPAM (NetBox), Ansible, image-based provisioning (Packer), HAProxy/Nginx

• Operate and evolve AWS multi-account and multi-region infrastructure
• Develop and maintain Terraform modules and workspaces
• Ensure safe infrastructure changes across network, storage, and services with zero-downtime deployments
• Manage ECS services, blue/green deployments, and Docker image pipelines
• Maintain reliability using CloudWatch, PagerDuty, and Sentry
• Monitor capacity and cost tagging
• Implement security baselines including IAM, secrets management (SSM), and Cloudflare edge rules
• Partner with engineers on release automation and production readiness