Devops Engineer 3

Job description

About Rupeek: Rupeek, established in 2015 and headquartered in Bangalore, stands as India's leading asset-backed digital lending fintech platform. Committed to making credit accessible to Indians in a fair and convenient manner, Rupeek pioneers innovative financial products focused on monetizing India's $2 trillion gold market. Leveraging state-of-the-art technology and an automated asset-light supply chain, Rupeek is transforming the gold loan disbursal landscape across 40+ cities in India. With a customer base exceeding 5,00,000+, the company's strategic partnerships with top banks and financial institutions underscore its commitment to building gold-backed assets through low-risk, low-touch, and friction-free processes. Rupeek's impressive journey is supported by key investors such as Sequoia Capital, Accel Partners, Bertelsmann, and GGV Capital. In Apr 2024, Rupeek turned profitable and raised $25 in equity capital from Manipal Group and Elevation Capital to fund its next phase of growth. Join us in redefining the future of finance through innovation, technology, and a commitment to financial inclusivity. About the Role Rupeek's infrastructure spans RFPL and RCPL customer-facing apps, lending core, ledger systems, and operations running on AWS with EKS as the primary compute plane. DevOps is a horizontal function serving all engineering pods, and also owns the interface with Infosec on audits, RBI/DPDP compliance evidence, and incident response. The DevOps L3 is the senior-most engineer in the team and its technical lead. This person sets standards, mentors the team, and owns infrastructure vision. Job Title: DevOps Engineer - L3 Experience: 4+ years Location: Bangalore Key Responsibilities: • Sets vision and direction for Rupeek's infrastructure cloud architecture, Kubernetes platform, CI/CD, observability, cost, and reliability. • Owns infrastructure-as-code standards Terraform module design, state management, drift detection, and review process. • Owns the production readiness bar every service that ships production traffic clears standards this person defines. • Partners with Infosec to pass audits (RBI IT Outsourcing, SOC 2, ISO 27001, DPDP) and due diligence (lender, investor, partner). • Leads incident response from the infra side — the person on the call when the blast radius is large. • Mentors junior and mid DevOps engineers; runs design and code reviews for the team. • Represents DevOps in architecture reviews for major product initiatives. • Sets AI-fluency standards for the DevOps team — tooling, prompt patterns, safe use of AI in production workflows. • Peer to senior SDE IIIs across product pods. Must have skills: Cloud & Kubernetes • Deep AWS — VPC design, IAM, EKS, RDS/Aurora, S3, KMS, cost architecture, multi-AZ / multi-region trade-offs. • EKS operations — node group strategy, cluster upgrades, addons lifecycle, admission controllers, network policies, PSA. • Comfortable debugging at layers others can't — kernel/OS, container runtime, CNI, etcd, control plane. Infrastructure as Code • Terraform mastery — module design, remote state, workspaces vs directories, provider version discipline, testing (terratest, tflint, checkov). • Has designed and enforced IaC standards across a team — including PR review process, plan/apply gating, and drift detection. • Opinion on Terraform vs Pulumi vs CDK, and why they picked what they picked. CI/CD & SDLC • Has built and operated production CI/CD pipelines with strong controls — immutable artifact tagging, signed artifacts (cosign or equivalent), promotion gates, per-environment approvals. • Familiar with supply chain security — SLSA levels, SBOMs, dependency pinning, supply chain (npm/PyPI) incident response. • Comfortable with GitOps patterns Observability & Reliability • Deep in Prometheus, Grafana, Alertmanager, and PagerDuty — from scrape config to SLO-driven alerting • Has designed on-call rotations, runbooks, and blameless post-mortem culture. • Comfortable with distributed tracing (OpenTelemetry, Jaeger, or similar) and structured logging. Security & Compliance • Has partnered with Infosec through at least one major audit (SOC 2, ISO 27001, RBI, or equivalent). • Strong on secrets management (Vault, AWS Secrets Manager, KMS), workload identity (IRSA), and least-privilege IAM • Understands regulated-industry constraints — data localization, PII handling, audit trails, evidence collection. • Has responded to real security incidents — DDoS, credential leaks, supply chain compromise, or similar. Scripting & Automation • Strong in Python or Go — writes production-quality automation, not just glue scripts. • Bash fluency; comfortable with the standard Linux toolchain. AI Fluency • Uses AI tools (Claude Code, Cursor, or similar) as part of daily workflow. • Has opinions on where AI helps and where it hurts in the DevOps SDLC. • Can articulate what "AI-safe" infrastructure change management looks like. Leadership • Has mentored junior and mid engineers; visible track record of growing people. • Writes well — runbooks, RFCs, post-mortems • Insists on high standards; can hold the line on production readiness without becoming a bottleneck. • Comfortable pushing back on product timelines when infra risk is real. Persona • Engineering degree in Computer Science or related • Has held a "senior-most DevOps / SRE / Platform" role at least once before, in a company where the infra actually mattered. • Fintech, payments, or regulated-industry background strongly preferred. • Recent hands-on work — has written Terraform and touched a cluster in the last month. • Comfortable being the escalation point at 2am.