Senior DevOps & Full-Stack Engineer

About this opportunity

Own the CI/CD pipelines for the platform's services and web application using GitHub Actions with keyless (OIDC) authentication, automated linting, testing, builds, pinned container images, deployments, approval gates, release evidence and rollback. Manage the promotion path from protected branches through preview and parity validation to production, including staged deployments and pre-deployment readiness checks for secrets, database migrations and configuration. Collaborate with mobile engineer on build, signing and release automation for iOS and Android applications. Own and manage Google Cloud infrastructure as code with Terraform including Cloud Run services, Cloud SQL (PostgreSQL), Memorystore, Artifact Registry, Secret Manager, IAM, and networking across isolated environments. Enhance resilience through database availability, backups, point-in-time recovery, disaster-recovery runbooks, capacity planning and cost control. Operate managed services depended on by the platform including Temporal Cloud workers, Stripe and Stripe Connect webhooks, LiveKit, transactional email and feature flags. Implement security with least-privilege access, internal service privacy, secrets management and rotation, dependency and container scanning. Build observability using OpenTelemetry and Google Cloud Operations: structured logs, traces, metrics, dashboards, alerts and service-level objectives. Lead incident response including on-call readiness, application/data/pipeline/infrastructure diagnosis, clear communication of impact, and conduct post-incident reviews. Support security reviews and penetration tests with evidence and close findings with tested changes. Develop and maintain back-end features and services across the TypeScript platform (NestJS / Fastify APIs, PostgreSQL data models and migrations, Temporal workflows) and support Next.js web application where needed. Contribute to the next version of the platform for services, data and infrastructure for service orders, delivery, invoicing and settlement. Build secure APIs with authentication, role-based authorization, payments, notifications and administrative operations tested end-to-end. Utilize AI-assisted development workflow for implementation, infrastructure as code, debugging, testing, investigation, code review, and documentation. Verify AI-assisted changes through code inspection, automated tests, runtime evidence and security review before release, never releasing infrastructure changes without a reviewed plan. Write clean, testable code and contribute disciplined code reviews, runbooks and architecture decision records. Document environments, pipelines, access and recovery procedures to ensure deployments and production support do not depend on a single individual. 8+ years in software engineering with at least 3 years in DevOps, cloud infrastructure or site reliability for production platforms. 3+ years of production back-end development experience. Proven CI/CD ownership: design and operation of pipelines from commit to production, covering tests, builds, containers, deployments, approvals and rollback using GitHub Actions or equivalent. Production experience on Google Cloud preferred, including containers (Cloud Run or Kubernetes), managed databases, IAM, networking, secrets, and backup/restore. Experience with Terraform or equivalent Infrastructure as Code for state management, module design, environment isolation and safe change review. Production use of Docker with secure, minimal images and runtime configuration. Experience with logs, metrics, traces, alerting and service-level objectives in production, with incident leadership to verified fix and post-incident review. Strong security practices including least-privilege access, secrets management, keyless CI auth, dependency/image scanning, and secure handling of payment and personal data. Proficient backend TypeScript development with Node.js (NestJS or similar), REST APIs, authentication, authorization, PostgreSQL schema design, migrations and performance. Proficiency with AI development tools: context engineering, task decomposition, context management, iterative refinement and verification of generated work. Ability to independently inspect, test, debug, secure and explain AI-assisted code and infrastructure changes, treating generated output with accountability. Strong engineering practices: Git workflow, automated testing, code reviews, documentation and production support. Excellent communication skills in English for explaining technical trade-offs and risks to stakeholders. Preferred experience includes in-depth knowledge of Google Cloud components (Cloud Run, Cloud SQL, Memorystore, Artifact Registry, Secret Manager, Cloud Operations, Workload Identity Federation). Experience with Temporal or other durable workflow engines in production. Familiarity with Stripe and Stripe Connect for marketplace payments, webhooks, idempotency, refunds and payouts; LiveKit or WebRTC. Experience moving a modular monolith towards independently deployable services, event-driven design, API versioning. Experience with Kubernetes / GKE, platform engineering or internal developer platforms. Knowledge of security and compliance practice including penetration-test remediation, audit evidence, UAE data protection law, SOC 2 or ISO 27001 controls. Experience with mobile CI/CD for Flutter applications including signing and App Store and Google Play automation. Knowledge of cloud cost management, Python for AI services, marketplace, fintech, booking or payments platforms.