Senior DevOps / Site Reliability Engineer

Apex Research, based in Islamabad, Pakistan, is seeking a seasoned Infrastructure Engineer with over five years of experience to join their on-site team full-time. The company develops the technology platform behind Coastal Research, Policy Limit Research, and PolicyTrace AI, providing insurance policy limit research, due diligence, and skip-trace services tailored for US personal injury law firms. Their platform is a sophisticated multi-tenant SaaS environment hosted on AWS, featuring a Node.js backend, Next.js applications, partner REST APIs, CRM connectors, AI processing services, and automated report delivery.

Key Responsibilities

- Take full ownership of the production, staging, and QA infrastructure on AWS, including EC2, RDS PostgreSQL, S3, IAM, VPC, networking, CloudWatch, and Route 53.
- Define and manage infrastructure as code using Terraform or AWS CDK, covering web server setup, TLS, and DNS configurations.
- Manage the GitHub Actions deployment pipeline, ensuring smooth builds, database migration gating, release automation, and rollback capabilities for all services.
- Develop and maintain monitoring, alerting, and on-call processes to track uptime, error rates, queue depths, database and host metrics, and handle incident paging effectively.
- Implement automated database backups with regular restore testing and maintain a comprehensive disaster recovery runbook.
- Manage secrets securely through AWS Secrets Manager or SSM Parameter Store, enforcing least-privilege IAM policies.
- Collaborate with the backend team to design API and background-worker tiers that support horizontal scaling.
- Enhance container security by using non-root images, conducting vulnerability scans, and regularly updating dependencies and base images.
- Generate SOC 2 compliance evidence via Oneleet, including access reviews, change management, backup tests, and vulnerability scan results.
- Prepare infrastructure for payment processing by implementing network segmentation, logging, and PCI-aware configurations.
- Lead incident response efforts and conduct thorough post-incident reviews to improve system resilience.

Required Qualifications

- Minimum of 5 years managing production infrastructure on AWS for web applications, with hands-on experience in EC2, RDS, S3, IAM, VPC, and CloudWatch.
- Proficient with Docker in production environments, Linux system administration, nginx, TLS, and DNS management.
- Strong expertise in infrastructure as code tools such as Terraform or AWS CDK.
- Experience with GitHub Actions or similar CI/CD platforms.
- Skilled in PostgreSQL operations, including backups, tested restores, and upgrades.
- Competent in monitoring and alerting tools like CloudWatch, Grafana, or Datadog.
- Knowledgeable in secrets management and enforcing least-privilege IAM policies.

Preferred Qualifications

- Experience working with SOC 2 or ISO 27001 compliance evidence.
- Exposure to PCI DSS standards and requirements.

This role offers the opportunity to lead critical infrastructure initiatives within a dynamic SaaS environment, contributing directly to the reliability, security, and scalability of a platform serving specialized legal technology needs.