Principal Software Engineer - DevOps

The Senior DevOps Engineer works with the team to lift the visibility, reliability, and security of the platforms that serve our clients and end-users globally. We are a focused team so your judgment materially shapes how the platform runs.

The role owns:

•       Reliability and uptime of Esyasoft's production estate on AWS and Kubernetes

•       CI/CD pipeline ownership — finalizing the move to full automation via GitOps

•       Observability, security and compliance posture across the platform

•       On-call coverage and incident response as part of a paid weekly rotation

A. Cloud Infrastructure and Platform Operations

•       Own day-to-day reliability of Esyasoft's production estate on AWS and Kubernetes, including incident triage and remediation

•       Operate and harden the Linux server fleet (Rocky Linux, Amazon Linux) and supporting database layers

•       Manage cloud cost and capacity in partnership with engineering — right-size, decommission and forecast

B. CI/CD and Infrastructure as Code

•       Finalise the transition to a fully automated CI/CD pipeline (Jenkins to GitOps via FluxCD)

•       Maintain and extend Infrastructure as Code using Terraform and Kustomize

•       Curate the developer experience so engineers can ship safely, quickly, and with minimal friction

C. Observability, Monitoring and Incident Response

•       Evolve the monitoring stack (Prometheus, Grafana) — dashboards, alerts and SLOs that earn their keep

•       Lead incident response during your rotation; drive blameless post-mortems and follow-through actions

•       Participate in the weekly paid on-call rotation to maintain service levels for Esyasoft's users

D. Security and Compliance

•       Maintain Esyasoft's posture against Cyber Essentials, ISO 27001 and PCI-DSS

•       Embed secure-by-default patterns in CI/CD, IaC, container images and Kubernetes manifests; partner on access reviews and secrets management

E. Engineering Practice and Team Contribution

•       Mentor peers and product engineers on infrastructure, deployment and reliability practice

•       Contribute to architectural decisions across the wider engineering team

F. Tooling and Continuous Improvement

•       Evaluate emerging tools and patterns responsibly — prove value, then adopt; keep what we have working hard before reaching for the new

•       Curate documentation and runbooks so platform knowledge is shared across the team, not siloed

Required Skills & Experience

•       Proven track record running production workloads on AWS, with hands-on experience operating Kubernetes in production (not just deploying to it)

•       Strong foundations in core systems — Linux, HTTP, networking, Bash and a scripting language (Python preferred)

•       Practical experience with Infrastructure as Code (Terraform preferred), GitOps tooling and CI/CD pipelines end-to-end

•       Comfort participating in an on-call rotation and leading incident response, including blameless post-mortems

Desirable Skills & Experience

•       Exposure to compliance frameworks — Cyber Essentials, ISO 27001 or PCI-DSS — in a production context

•       Experience with additional cloud providers (Digital Ocean, GCP) and database operations at scale (MySQL)

•       PHP exposure (Esyasoft's stack includes PHP services)

Key Attributes

•       Pragmatic — picks the smallest change that solves the real problem; values clarity over cleverness

•       Reliability-minded — instinctively asks 'what does this look like when it breaks?' before shipping

•       Clear communicator — writes runbooks, explains incidents and pushes back without drama

Esyasoft operates primarily within the cloud-native ecosystem and includes the requirement to work as a competent user of:

•       AWS, Kubernetes, Docker

•       Terraform, Kustomize, FluxCD, Jenkins, Prometheus, Grafana, MySQL

•       Python, Bash, PHP — running on Rocky Linux / Amazon Linux

This role may also require flexibility to work with additional cloud providers (Digital Ocean, GCP) and third-party tools as the platform evolves.