Imagine a world where passwords are obsolete, and you never have to recall security questions about your first pet. At PrivateID, we're making this a reality with secure, self-managed digital identities that feel almost magical: think biometric sorcery meets cryptographic brilliance. Trusted by general brands for our privacy-first solutions, we're rapidly scaling to meet the soaring demand for passwordless, zero-trust technology.

About The Role

You'll work under the Lead DevOps Engineer as a key contributor on a collaborative team, executing on infrastructure work, responding to incidents, and helping keep our multi-cloud environments reliable and secure. You're someone who takes direction well, communicates proactively, and brings enough experience to work independently on complex tasks without needing hand-holding.

This is a hands-on, execution-focused role. You'll be deep in Kubernetes, Terraform, CI/CD pipelines, and on-call rotations day to day.

What You Will Do

Infrastructure & Cloud

- Contribute to multi-cloud infrastructure across AWS (EKS, IAM, multi-account) and GCP (GKE Autopilot, IAM, multi-project) using Terraform
- Help provision and manage per-client environments — VPC, Kubernetes cluster, DNS, SSL, container registry, secrets, and GitOps integration — following established patterns and module library
- Manage bastion hosts, networking, firewalls, and VPC peering under guidance from the lead

CI/CD & GitOps

- Maintain and improve GitHub Actions pipelines for build, test, and deployment workflows
- Support ArgoCD-based GitOps deployments across multiple GKE and EKS clusters
- Help maintain reusable workflow templates used across all product repositories

Observability & Incident Response

- Monitor application and infrastructure health using New Relic dashboards and alerts
- Actively participate in the on-call rotation via PagerDuty — acknowledge alerts promptly, triage issues, elevate when needed,



and follow up thoroughly
- Contribute to runbooks and post-mortems after incidents
- Proactively flag performance issues and anomalies to the team

Security & Secrets Management

- Manage and rotate secrets across all environments using Doppler — AWS IAM keys, GCP service account keys, MongoDB Atlas API keys, GitHub tokens
- Follow and uphold least-privilege IAM practices across AWS, GCP, GitHub, and Azure AD
- Assist with employee access provisioning and offboarding

Must Have

- 7+ years in a DevOps, SRE, or Platform Engineering role
- Strong Terraform skills — modules, remote state, multi-environment configurations
- Hands-on experience with AWS (EKS, IAM, EC2, S3, multi-account) and GCP (GKE, IAM, Workload Identity)
- GitHub Actions — building and maintaining CI/CD pipelines, reusable workflows
- ArgoCD or similar GitOps tooling
- Active on-call experience — you've been paged, you know how to triage fast and communicate clearly under pressure
- PagerDuty — on-call rotations, escalation policies, alert routing
- Secrets management — Doppler, Vault, or AWS Secrets Manager
- Strong scripting in Bash and/or Python
- A team-first attitude — you share knowledge, ask questions early, and don't go dark

Nice to Have

- GCP Workload Identity Federation and AWS IRSA (keyless CI/CD auth)
- Azure AD / Entra ID user and access management
- Slack app integrations for deployment approvals and alerting
- Experience managing infrastructure for multiple clients or tenants from a single codebase

Important:

PrivateIDvaluesdiversityandiscommittedtoprovidinganinclusiveworkenvironmentwhereallemployeescanexcel.Qualifiedapplicantswillbeconsideredwithoutregardtorace,color,religion,sex,sexualorientation,genderidentity,nationalorigin,disability,veteranstatus,oranyotherlegallyprotectedstatus.Reasonableaccommodationsareavailableuponrequesttoensureequitableparticipationinourhiringprocessandworkplace.

#J-18808-Ljbffr

📌 Senior DevOps Engineer (Ciudad de México)
🏢 Private Identity
📍 Ciudad de México