Senior DevOps / Site Reliability Engineer

Apex Research, based in Islamabad, Pakistan, is seeking an experienced Infrastructure Engineer to join their team on a full-time, on-site basis. With over five years of experience required, this role involves managing and owning the entire infrastructure that supports a sophisticated multi-tenant SaaS platform. The platform serves US personal injury law firms by providing insurance policy limit research, due diligence, and skip-trace services, leveraging technologies such as Node.js, Next.js, AWS, and AI-driven automation. The successful candidate will ensure the availability, security, and reliability of production, staging, and QA environments while supporting ongoing platform enhancements including payment processing and CRM integrations.

Key Responsibilities

- Manage and maintain production, staging, and QA infrastructure on AWS, including EC2, RDS PostgreSQL, S3, IAM, VPC, CloudWatch, and Route 53.
- Define and implement infrastructure as code using Terraform or AWS CDK, covering web servers, TLS, and DNS configurations.
- Own and optimize the GitHub Actions deployment pipeline, handling builds, database migration gating, release automation, and rollback procedures for all services.
- Develop and maintain comprehensive monitoring, alerting, and on-call systems to track uptime, error rates, queue depths, and system metrics, ensuring prompt incident response.
- Administer automated database backups with regular restore testing and maintain an up-to-date disaster recovery runbook.
- Manage secrets securely through AWS Secrets Manager or SSM Parameter Store while enforcing least-privilege IAM policies.
- Collaborate with backend teams to design scalable API and background-worker tiers for horizontal scaling.
- Harden container security by implementing non-root images, vulnerability scanning, and timely updates of dependencies and base images.
- Generate SOC 2 compliance evidence using Oneleet, including access reviews, change management documentation, backup tests, and vulnerability scan results.
- Prepare infrastructure for payment processing by implementing network segmentation, enhanced logging, and PCI-aware configurations.
- Lead incident response efforts and conduct thorough post-incident reviews to improve system resilience.

Required Qualifications

- Minimum of 5 years’ experience managing production infrastructure on AWS, including EC2, RDS, S3, IAM, VPC, and CloudWatch.
- Proficiency with Docker in production environments, Linux system administration, nginx, TLS, and DNS management.
- Strong experience with infrastructure as code tools such as Terraform or AWS CDK.
- Expertise in CI/CD pipelines, specifically GitHub Actions or similar platforms.
- Solid PostgreSQL operational knowledge, including backups, tested restores, and version upgrades.
- Skilled in monitoring and alerting tools such as CloudWatch, Grafana, or Datadog.
- Experience with secrets management solutions and enforcing least-privilege IAM policies.

Preferred Qualifications

- Familiarity with SOC 2 or ISO 27001 compliance processes and evidence preparation.
- Exposure to PCI DSS standards and requirements.

This role offers the opportunity to take full ownership of a critical infrastructure environment supporting a cutting-edge SaaS platform with a focus on security, scalability, and compliance. Candidates who thrive in a dynamic, fast-paced environment and possess a strong technical foundation in AWS infrastructure and DevOps practices will find this position rewarding.