DevOps Engineer

PayShepherd

3d • Remote

About The Position

PayShepherd is a vertical SaaS company transforming how heavy industries, such as Oil and Gas, Pulp and Paper, Mining and Power Generation, manage contractor spend. Our cloud-based contractor management platform automates the previously manual review of paper-based vendor cost reports, and our anomaly detection engine ensures 100% contract compliance and the elimination of overbilling. We have real customers and a genuine moat. We're looking for a DevOps Engineer to own the day-to-day health of our AWS infrastructure; keeping it secure, reliable, cost-efficient, and ready to scale. Our platform handles sensitive financial data for some of the largest industrial operators in North America. The security and reliability bar is high, and we need someone who treats it that way, not as paperwork, but as core craft. This isn't a role where you'll need to invent a brand-new platform from scratch. We need someone dependable who can step into our AWS environment, understand it quickly, keep it healthy, and make it better week over week. When the infrastructure is humming, we want someone who can roll up their sleeves and contribute to product code, internal tooling, or automation projects. That cross-functional ability is a real asset on a small team.

Requirements

• 3+ years of professional DevOps, SRE, or Cloud Engineering experience
• Strong hands-on AWS experience. This is non-negotiable; our entire platform runs on AWS.
• Strong security knowledge and instincts: IAM, network security, secrets management, common attack vectors, audit and compliance basics
• Comfortable with Linux, shell scripting, and at least one general-purpose programming language (Python, Node.js, PHP, Go, or similar)
• Experience with Infrastructure as Code (Terraform, CloudFormation, or CDK)
• Experience with CI/CD tooling
• Familiarity with relational databases (MySQL preferred): backups, monitoring, basic tuning
• Solid communication skills and a willingness to write things down so others can follow

Nice To Haves

• Active experience using AI-assisted tools (Claude Code, Cursor, Copilot, agentic workflows) in your daily work. This is a real differentiator for us.
• Application development background that lets you jump into product or tooling code when DevOps work is light
• Experience operating SaaS environments at scale, ideally with multiple production instances
• Experience responding to SOC 2, ISO 27001, or similar compliance/audit programs
• Experience with cost optimization at a meaningful scale

Responsibilities

• Operate, maintain, and improve our AWS environment (EC2, RDS, S3, Lambda, ALB, Auto Scaling, Route 53, CloudWatch, and the rest)
• Manage IAM policies, roles, and access boundaries with care
• Monitor performance, reliability, and cost; surface and act on issues before they become problems
• Build and maintain Infrastructure as Code (Terraform, CloudFormation, or CDK)
• Own backup, disaster recovery, and incident response procedures
• Apply AWS security best practices end-to-end: IAM with MFA, least-privilege roles, network segmentation, secrets management, encryption in transit and at rest
• Review and harden the environment against common threats
• Maintain audit logging and observability so we can answer "what happened, when, and by whom."
• Respond to security questionnaires, vendor reviews, and customer compliance requests
• Stay current on AWS security advisories and apply patches and mitigations promptly
• Maintain and improve our build, test, and deployment pipelines
• Make it easy for the engineering team to ship safely and quickly
• Automate the repetitive and error-prone parts of the development lifecycle
• Support our production MySQL databases: backups, monitoring, query performance, schema migrations
• Plan and execute consolidation, upgrade, and migration work as the platform evolves
• When DevOps work is light, contribute to product code, internal tooling, or automation projects
• Pair with engineers to solve infrastructure-shaped problems in the application layer
• Share what you know about observability, performance, and security with the rest of the team
• Work closely with our Engineering Lead and the rest of the engineering team
• Participate in code reviews, technical discussions, and knowledge sharing
• Communicate progress, blockers, and recommendations clearly and early

Benefits

• Meaningful stock options: we expect ownership, and we share the upside.
• Excellent medical, dental, and vision plans
• Real autonomy and real accountability
• New MacBook and accessories

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed