Note: The job is a remote job and is open to candidates in USA. Railsware is seeking a Senior DevOps Engineer to support Mailtrap's production infrastructure, a multi-region AWS platform for high-volume email sending and testing. The role owns infrastructure reliability, security, cost efficiency, automation, and a strategic partial migration of selected workloads to rented bare-metal or colocation infrastructure. The engineer will design the hybrid platform, lead migration planning and execution, and coordinate cutovers, vendors, and engineering teams.
Responsibilities
- Operate and evolve AWS multi-account / multi-region infra
- Terraform modules/workspaces
- Ensure safe infrastructure changes across network, storage, and services, with zero-downtime deployments
- ECS services, blue/green deploys, Docker image pipelines
- Reliability: CloudWatch/PagerDuty/Sentry, capacity, cost tags
- Security baseline: IAM, secrets (SSM), Cloudflare edge rules
- Partner with engineers on release automation and production readiness
- Maintain the hybrid estate (AWS and rented bare metal) as one operable platform
- Build the business and technical case for what moves off AWS vs what stays
- Design the rented bare-metal / colo landing zone (compute, network, storage, observability, secrets)
- Produce migration waves, dependency maps, cutover/rollback plans
- Stand up hybrid connectivity and dual-run periods; shift traffic safely (e.g. via Cloudflare)
- Replace or re-home managed services where it pays off (compute, queues, search, cache, MTA nodes)
- Coordinate colo/vendors, timelines, and eng teams; report progress and risk
Skills
- * 5+ years DevOps/platform (senior), production ownership
- * Deep AWS (VPC, ECS, IAM, RDS/ElastiCache or equivalents, networking)
- * Terraform at scale (modules, remote state / Terraform Cloud)
- * CI/CD with GitHub Actions, including automated deploys to production (e.g. blue/green deployments)
- * Containers (Docker); comfortable operating services on ECS or K8s
- * Strong Linux networking (DNS, TLS, load balancing, firewalls, VPN/hybrid)
- * Proven experience planning and executing migration to on-prem, colo, or private cloud (partial/hybrid OK — full exit not required)
- * Comfortable owning a multi-quarter infra initiative: TCO, design, vendors, cutover, rollback
- * Comfortable automating operational tasks with shell and/or Python
- * Fluent English (both spoken and written)
- * Colo/bare-metal ops: IPAM (NetBox), Ansible, image-based provisioning (Packer or equivalent), HAProxy/Nginx
- * Replacing managed AWS services with self-hosted (Postgres HA, Redis/Valkey, Kafka, OpenSearch)
- * Email infrastructure (MTA, SMTP, IP reputation, DKIM/SPF/DMARC) — Halon or similar
- * Cloudflare (DNS/WAF/Access)
- * Observability beyond CloudWatch (Prometheus/Grafana/Loki or equivalent)
- * Prior work with multi-region SaaS or EU data residency
- * Cost-driven architecture / FinOps mindset
- * GCP (BigQuery/certificates)
- * Comfortable reading Ruby or Go (used in our services and tooling)
- * AWS Certificates
Company Overview