Senior DevOps Engineer

Senior DevOps Engineer

Team: Platform & Infrastructure (Engineering)

Location: Bangalore

Experience: 8-9+ years in DevOps, SRE or platform engineering, with at least 2 years running production systems that move money

Reports to: [Engineering Manager / Head of Platform]

About BukuWarung

BukuWarung builds digital payments and financial tools for Indonesia's MSMEs. Merchants rely on us to accept QRIS and card payments on EDC devices, make disbursements, and run their business day to day. When our platform is slow or down, a shopkeeper cannot get paid. That is the standard our infrastructure is built to.

About the role

We are looking for a Senior DevOps Engineer who reasons from first principles across infrastructure, delivery, observability, reliability, security and automation. You will own the platform that our payment services run on: from the networks that connect us to banks, switches and acquirers, to the pipelines that ship code into a regulated production environment.

This is a builder role, not a ticket queue. We want someone who can debug a messy production system calmly, reduce operational load for product teams, and make the right trade-offs between speed, cost, resilience and compliance.

Why this role matters in a payments company

• Every second of downtime is lost merchant revenue. Payment flows need high availability, predictable latency and safe recovery during peak hours and festive seasons.

• Correctness matters as much as uptime. A retry storm or a half-applied deployment can cause duplicate charges, stuck transactions or reconciliation breaks.

• We operate under regulation. Bank Indonesia and OJK requirements, PCI DSS for card data, and audit expectations shape how we handle access, secrets, data residency, logging and change management.

• We integrate with many external partners. Banks, payment switches and aggregators each bring their own connectivity, certificates, IP whitelisting and maintenance windows.

What you will do

Platform and infrastructure

• Design, build and operate cloud infrastructure for payment, ledger and merchant-facing services with clear failure domains, redundancy and disaster recovery targets (RPO/RTO).

• Run and improve our container platform (Kubernetes or equivalent), including capacity planning, autoscaling and cost control.

• Manage secure network connectivity to banks and payment partners: VPNs, private links, mTLS, certificate lifecycle and egress control.

• Codify all infrastructure with infrastructure as code so environments stay consistent and drift is detected.

Delivery and release safety

• Own CI/CD as a controlled delivery system: validation gates, artifact integrity, progressive rollouts (canary, blue-green), feature flags and fast rollback.

• Build change management into the pipeline so that approvals, audit trails and segregation of duties come from the tooling rather than manual paperwork.

• Plan database and schema migrations for transactional systems with backward compatibility and zero-downtime rollout.

Reliability and observability

• Define SLOs for critical journeys such as payment acceptance, disbursement and settlement, and build alerting that pages on customer impact rather than noise.

• Build metrics, logs and tracing that let engineers follow a single transaction across services and external partners.

• Lead and take part in incident response and the on-call rotation; run blameless postmortems and make sure follow-ups close.

• Run game days and failover drills so that DR plans are tested, not just written down.

Security and compliance

• Enforce least-privilege IAM, short-lived credentials and centralised secrets and key management (KMS/HSM-backed where needed).

• Maintain network segmentation and scope reduction for systems that handle card data.

• Work with Security, Risk and Compliance on PCI DSS, ISO 27001 and regulator audits, producing evidence from automated controls.

• Integrate vulnerability scanning, image signing and policy-as-code into the delivery pipeline.

Engineering leverage

• Build internal tooling and paved paths that make the safe way the easy way for product teams.

• Remove toil through automation that is idempotent, observable and maintainable by the team.

• Mentor engineers, review designs, and raise the operational standard across Engineering.

What we are looking for

Must have

• 6+ years in DevOps, SRE or platform engineering, including ownership of production systems with real users and an on-call rotation.

• Strong fundamentals in Linux (processes, memory, filesystems, resource exhaustion) and networking (DNS, TCP/IP, TLS, load balancers, proxies, timeouts and retries).

• Deep hands-on experience with at least one major cloud (AWS or GCP): compute, storage, IAM, VPC design and managed services.

• Production experience with Kubernetes and containers, including debugging, scaling and upgrades.

• Infrastructure as code (Terraform or similar) and configuration management at team scale.

• Designing and running CI/CD pipelines with rollback paths and deployment safety controls.

• Observability stack experience (for example Datadog, Prometheus, Grafana, OpenTelemetry) used for diagnosis, not just dashboards.

• Scripting in Python, Go or Bash to build reliable automation.

• A record of leading incident diagnosis and making lasting reliability improvements.

Strongly preferred (payments and fintech)

• Experience running payment, banking or other high-throughput transactional systems.

• Hands-on work with PCI DSS, ISO 27001, SOC 2 or regulator audits.

• Understanding of idempotency, exactly-once processing, message queues (Kafka, RabbitMQ) and reconciliation.

• Experience with database high availability, backup and restore, and replication for PostgreSQL or MySQL.

• Knowledge of HSMs, key rotation and certificate management at scale.

• FinOps practice: cost visibility, rightsizing and cost-versus-resilience decisions.

What will make you stand out

• You simplify a problem before you solve it.

• You think like the owner of the pager, not only the designer of the diagram.

• You automate aggressively but safely, with rollback and blast radius in mind.

• You can explain in plain terms how your work improved reliability, developer speed or cost.

• You understand that in payments, a correct transaction matters more than a fast one.

What we offer

• Ownership of infrastructure that serves millions of Indonesian merchants

• Hard reliability, scale and compliance problems in a regulated payments business

• A team that values first-principles engineering and blameless learning

• Competitive compensation and benefits [details to confirm with People team]