DevOps Engineer

Reco is looking for a DevOps Engineer to join their growing DevOps team. The role involves building, hardening, and scaling the infrastructure for Reco’s platform, while working closely with engineering and security teams to ensure reliable and secure cloud systems.

Responsibilities:

• Collaborate with the DevOps team to own and evolve CI/CD pipelines (GitHub Actions, ArgoCD, or similar) that let engineers ship with speed and confidence
• Build, manage, and harden cloud infrastructure on AWS and/or GCP using Terraform or Pulumi
• Manage Kubernetes clusters (EKS/GKE) in production, deployment strategies, autoscaling, resource optimization, and security hardening
• Define and enforce security controls across cloud environments: IAM policies, secrets management (Vault/AWS Secrets Manager), network segmentation, and vulnerability scanning
• Implement and maintain observability stacks, metrics, logs, tracing, using Datadog, Prometheus/Grafana, or OpenTelemetry
• Participate in incident response and blameless post-mortems alongside the team; help define SLOs and drive reliability improvements
• Collaborate with engineers to containerize workloads and optimize service delivery from dev to production
• Support compliance and audit readiness (SOC 2, ISO 27001) by building automated controls and evidence collection into the platform
• Identify and eliminate toil through thoughtful automation and help the broader team do the same
• Handle light IT/Help Desk support for the North America team

Requirements:

• 4+ years of production DevOps, platform engineering, or infrastructure engineering experience in a cloud-native SaaS environment
• Proven experience in security engineering, application security, or DevSecOps — you treat security as a first-class engineering concern
• Hands-on expertise with Kubernetes (EKS or AKS) and Docker in production, including cluster security and workload isolation
• Strong Infrastructure as Code skills using Terraform, Helm and GitOps (ArgoCD)
• Deep familiarity with AWS and Azure(optional) — VPCs, IAM,EKS, Lambda, CloudWatch, and equivalent Azure services
• Proficiency in Python, Go, or Bash for automation, tooling, and scripting
• Strong understanding of API design, authentication protocols (OAuth 2.0, SAML, OIDC), and zero-trust security models
• Experience with observability tooling — Datadog, Prometheus, Grafana, or the ELK stack
• Familiarity with security best practices for SaaS platforms: secrets management, SAST/DAST in pipelines, cloud security posture management
• Experience using AI-assisted engineering tools (e.g., Cursor, Claude) to streamline infrastructure-as-code, automation, scripting, troubleshooting, and software delivery workflows
• Ability to translate complex security and infrastructure concepts into clear, actionable solutions — for both technical and non-technical stakeholders
• Experience in a cybersecurity or SaaS security company (SSPM, CSPM, ITDR, or similar)
• Familiarity with SOC 2 Type II or ISO 27001 compliance implementation
• Contributions to open-source infrastructure tooling