ABOUT HUPO

We are an AI-native start-up building sales enablement products in the banking, financial services, and insurance industry; already trusted by dozens of enterprise customers (including Fortune 500 companies).

ROLE AT A GLANCE

Title: Sr. DevOps / Cloud Engineer Team: Engineering Employment Type: Full-time Location: Remote (APAC)

WHY THIS ROLE MATTERS

We need a Sr. DevOps / Cloud Engineer to own our AWS and Azure environments, our multi-tenant deployment architecture, and our IaC CI/CD platform. You'll be a key technical voice on infrastructure decisions and will work directly with enterprise clients on security and integration requirements.

WHAT YOU'LL DO

• Own and evolve Hupo's AWS infrastructure — ECS Fargate, VPCs, IAM, RDS, PrivateLink, API Gateway, and more

• Design and enforce AWS account organisation strategy — multi-account structures, AWS Organizations, SCPs, and landing zone patterns

• Build and maintain multi-tenant deployment pipelines using a TACOS system (Terraform Automation and Collaboration), with per-client workspace and state isolation

• Lead AWS networking design — VPC architecture, Transit Gateway, PrivateLink, NLB, and Private API Gateway for enterprise client integrations

• Drive security and compliance posture for BFSI clients — SOC 2, ISO 27001, and enterprise security due diligence

• Design and operate IAM Identity Center, cross-account role strategies, and external ID patterns for customer-deployed stacks

• Manage GitHub Actions workflows for CI/CD across multiple environments and services

• Lead infrastructure design decisions and produce ADRs, runbooks, and documentation

• Mentor mid and junior engineers on the team

WHAT SUCCESS LOOKS LIKE

Within your first few months, you'll:

• Take ownership of Hupo's cloud infrastructure across AWS and Azure, and become the go-to person for infrastructure architecture and operational decisions.

• Design and implement scalable, secure, multi-tenant deployment patterns and CI/CD workflows that support our growing enterprise customer base.

• Partner directly with enterprise customers and internal teams to deliver secure integrations, networking solutions, and compliance requirements for BFSI environments.

You’ll also be expected to continuously:

• Drive improvements in reliability, security, developer experience, and operational excellence across our infrastructure platform.

• Document decisions, share knowledge, and raise the technical bar across the engineering team.

WHAT WE'RE LOOKING FOR

MUST-HAVES

• 5+ years in a DevOps / Cloud / Platform Engineering role

• Deep AWS expertise — multi-account architecture, VPC networking, IAM, ECS, Terraform

• AWS account organisation — AWS Organizations, SCPs, Control Tower, or equivalent landing zone patterns

• Advanced networking — Transit Gateway, PrivateLink, VPC Endpoint Services, NLB, Route 53 private zones

• IaC orchestration (TACOS) — Spacelift, Terraform Cloud, Atlantis, or similar

• Strong GitHub Actions CI/CD design and troubleshooting

• Security engineering — IAM policies, least-privilege, audit trails, secrets management

• Comfortable working async across time zones

NICE-TO-HAVES

• Azure alongside AWS (AKS, Entra ID, Azure networking)

• Experience with enterprise BFSI security reviews or SOC 2 / ISO 27001 audits

• Google Workspace + IAM Identity Center integration (SCIM / ssosync)

• SaaS / AI product infrastructure background

• FastAPI, Python, or Node.js service ownership

• Cloudflare DNS management alongside Route 53