DevOps Lead (AWS / Terraform)

Why You Belong Here

As a DevOps Lead at Cresteo, you'll be more than just a developer; you will be part of transforming the tech industry through our honest, transparent, and people-centric approach.

Your role will be diverse and dynamic. You'll be instrumental in developing and maintaining our software solutions, working with a varied technology stack, and ensuring that our products are functional, efficient, reliable, and scalable.

By joining us, you're not just choosing a job; you're aligning with a vision that values the human side of tech, where your skills and passion are recognized, nurtured, and celebrated.

What We're Looking For

• Deep hands-on experience designing, operating, and evolving production infrastructure on AWS, with a strong focus on serverless architectures
• Extensive experience across AWS services including Lambda, API Gateway, Aurora Serverless, DynamoDB, OpenSearch Serverless, S3, SNS, SQS, ECS, CloudFront, WAF, Route 53, SES, Secrets Manager, AppConfig, and CloudWatch
• Professional-level Terraform experience, including reusable multi-environment module design and major provider-version upgrades
• Strong GitLab CI/CD experience, including pipeline templates, protected environments, approval gates, and OIDC-based authentication with AWS
• Hands-on experience deploying serverless applications using AWS SAM
• Strong cloud security engineering skills, including secrets rotation, IAM least-privilege design, secret scanning, and dependency and container vulnerability scanning within CI/CD pipelines
• Strong observability experience using CloudWatch metrics, alarms, dashboards, logging, and production monitoring strategies
• Experience owning production incident response and participating in or leading on-call operations
• Experience implementing SOC 2 controls from an engineering perspective, including evidence collection, traceability, access controls, and auditable infrastructure practices
• Experience designing resilient AWS environments, including multi-region and disaster recovery strategies, is highly valued
• Strong understanding of cost optimization for serverless and consumption-based AWS services
• Experience operating Amazon MWAA is valued
• Experience migrating applications from Serverless Framework to AWS SAM or CDK is valued
• Experience improving and hardening CI/CD environments, including introducing effective quality gates, blocking tests, secure deployment controls, and safer production release processes
• Strong Infrastructure as Code mindset, with infrastructure changes designed and managed through code rather than manual console configuration
• Strong ownership of the complete delivery lifecycle, treating infrastructure, security, CI/CD, observability, and production reliability as interconnected engineering responsibilities
• Strong troubleshooting and incident-management skills, including experience responding to security or secrets-related incidents
• Professional English communication skills and the ability to collaborate effectively with engineering and client stakeholders

Own the reliability, security, and delivery foundation of an AWS serverless platform across infrastructure, CI/CD, observability, and production operations. Lead hands-on improvements to the platform while strengthening automation, security controls, resilience, and engineering practices across both maintenance and delivery.