Senior DevOps Engineer

We are looking for a Senior DevOps Engineer to join our team!

You will own and evolve Mailtrap's production infrastructure — a multi-region AWS platform powering high-volume email sending and testing. You will keep it reliable, secure, and cost-efficient day-to-day.

Our engineering team thrives in an agile, continuously improving, and automation-oriented environment. We value ongoing evolution, objective evaluation of our processes, and taking action to make things better.

What are we looking for?

Must-have skills:

• 5+ years DevOps/platform (senior), production ownership
• Experience of planning and implementing DevOps practices end-to-end

- Deep AWS (VPC, ECS, IAM, RDS/Elasti

• Cache or equivalents, networking)
• Terraform at scale (modules, remote state)
• CI/CD with GitHub Actions, including automated deploys to production
• Containers (Docker); comfortable operating services on ECS or K8s
• Strong Linux networking (DNS, TLS, load balancing, firewalls, VPN)
• Comfortable owning a multi-quarter infra initiative: TCO, design, vendors, cutover, rollback
• Fluent English (both spoken and written)

Strongly preferred:

• Replacing managed AWS services with self-hosted (Postgres HA, Redis/Valkey, Kafka, OpenSearch)
• Email infrastructure (MTA, SMTP, IP reputation, DKIM/SPF/DMARC) — Halon or similar
• Cloudflare (DNS/WAF/Access)
• Observability beyond CloudWatch (Prometheus/Grafana/Loki or equivalent)
• Prior work with multi-region SaaS or EU data residency
• Cost-driven architecture / Fin
• Ops mindset

Would be a plus:

• GCP (BigQuery/certificates)
• Comfortable reading Ruby or Go (used in our services and tooling)
• AWS Certificates
• Experience planning or/and executing migration to on-prem, colo, or private cloud (both partial or hybrid), including colo/bare-metal ops: IPAM (NetBox), Ansible, image-based provisioning (Packer or equivalent), HA
• Proxy/Nginx
• Comfortable automating operational tasks with shell and/or Python

Responsibilities

• Operate and evolve AWS multi-account / multi-region infrastructure
• Fin
• Ops
• Implementing IaaC using Terraform modules
• Ensure safe infrastructure changes across network, storage, and services, with zero-downtime deployments.
• ECS services, blue/green deploys, Docker image pipelines
• Reliability: CloudWatch/PagerDuty/Sentry, capacity, cost tags
• Security baseline: IAM, secrets (SSM), Cloudflare edge rules
• Partner with engineers on release automation and production readiness