DevOps Engineer, Cloud Reliability

About the Company and Product

We're building a technology company around a web platform that helps organizations manage who can use their spaces and how access information is handled. The product brings together user and administrator portals, an API, and backend processes. It currently includes authentication, account recovery, invitations, a people directory, and read-only imports from external access-control systems. Imports retrieve information without changing the source system. Our goal is a secure, easy-to-use platform that keeps each organization's data separate.

About the Role

You will prepare and run deployments, maintain Azure and Cloudflare, monitor the API and background workers, and protect configuration and backups. You will keep a tested recovery path to restore priority services quickly on Google Cloud, AWS, or a VPS if Azure fails.

What You'll Do

• Maintain GitHub Actions CI/CD for the portals, API, background workers, and shared packages; automate formatting, analysis, type checks, tests, contract checks, security checks, and builds.
• Prepare releases traceable to a commit and environment; deploy to development, test, and production, verify service health after each release, and roll back when checks fail.
• Operate Azure App Service, PostgreSQL, and Blob Storage; maintain identities, permissions, connectivity, and environment-specific configuration.
• Manage Cloudflare: DNS, proxy, SSL/TLS, CDN and caching, and security rules; verify domains and prepare traffic switching to the alternate environment.
• Monitor asynchronous background workers: status, backlog, errors, retries, and resource use; diagnose stalled jobs and prevent data loss or duplicate processing when jobs are retried.
• Review production before and after every deployment and through alerts: availability, latency, errors, database, storage, workers, certificates, and resource use; investigate incidents and document root causes.
• Maintain automated, encrypted backups with defined retention for PostgreSQL and critical files; ensure recovery copies remain accessible when Azure is unavailable.
• Prepare a disaster-recovery path from Azure to Google Cloud, AWS, or a VPS; keep artifacts, infrastructure, data, background workers, secrets, and DNS ready to restore priority services.
• Test restores, failover, and return to Azure; verify critical workflows and measure recovery time and data recovery point. Agree on recovery objectives with the team and close any gaps found.
• Maintain and update environment variables, configuration values, keys, certificates, and secrets in Azure Key Vault or an equivalent manager; control access and rotation without exposing them in Git or frontend code.
• Coordinate database migrations and rollback with backend; maintain a service inventory, deployment checklists, and incident runbooks.

What We're Looking For

• Experience with CI/CD, preferably GitHub Actions, traceable deployments, post-deployment checks, and rollback.
• Experience with Azure App Service, managed PostgreSQL, and Blob Storage; knowledge of identities, permissions, networking, and Azure Key Vault.
• Knowledge of Cloudflare: DNS, SSL/TLS, CDN and caching, and security rules; ability to troubleshoot domain or connectivity failures.
• Experience with Linux, Git, and shell scripting (Bash or PowerShell) to automate tasks and troubleshoot build, deployment, and infrastructure failures.
• Experience with production monitoring, alerts, and troubleshooting workers or background processes; ability to explain an incident and restore service.
• Experience backing up and restoring PostgreSQL and files; knowledge of Google Cloud, AWS, or VPS operations to prepare an alternate environment and recover data and services.
• English B2+ is mandatory.

Nice to Have

• Experience with infrastructure as code, such as Terraform or Bicep, and repeatable multi-environment configuration.
• Experience with continuity planning, disaster recovery, replication, failover, and failback to the primary environment.
• Knowledge of Google Cloud or AWS, networking, storage, observability, cloud security, and cost management.

Team Technology Stack

GitHub Actions, Linux, Cloudflare, Azure, Google Cloud, AWS/VPS, PostgreSQL, Blob Storage, Key Vault, and monitoring.