# DevOps at NOVACARD

> Remote · Serbia · Unspecified · DevOps / SRE / Infra · open. Source: https://alderhq.app/jobs/recruitee%3Anovacard%3A2746618 (read 2026-11-10).

## Facts (observed)

- Company: [NOVACARD](https://alderhq.app/companies/novacard)
- Location text: St. Petersburg, Sankt-Peterburg, Russia; Moscow, Moskva, Russia; Belgrade, Beograd, Serbia
- Where it can be done from (inferred): Remote · Serbia (evidence: "Location: St. Petersburg, Sankt-Peterburg, Russia; Moscow, Moskva, Russia; Belgrade, Beogr")
- Posted: 2026-09-15 (56 days ago)
- First seen by alder: 2026-11-07 · last verified: 2026-11-07
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://novacard.recruitee.com/o/devops
- Skills listed (inferred): PostgreSQL, Redis, Kafka, Elasticsearch, AWS, Kubernetes, Docker, Terraform

## Pay and sponsorship

- Posted pay: not posted

## Description (the employer's text)

At NOVACARD, we’re redefining how people use credit. We are the first interest-free and no-annual-fee credit card in Mexico, designed to simplify personal finances and give users complete control - all from a mobile app. With NOVACARD, users can access up to $200,000 MXN in credit, only pay when they use it, and manage everything digitally in under 5 minutes. Our mission is to empower people to make smarter financial decisions by offering flexibility, transparency, and the freedom they need to reach their goals. Simple finances, big goals.

### About the Role

We’re looking for a DevOps Engineer to design, deploy, and operate AWS infrastructure for a large-scale migration of a digital financial product. You’ll build and maintain a production-ready platform covering AWS networking, Kubernetes/EKS, CI/CD, observability, backup/restore, and secure access management. You’ll collaborate closely with development, system analysis, QA, and engineering teams to ensure fast delivery, stable services, and a controlled migration.

### Key Responsibilities

### AWS Infrastructure Design & Operations

Design, deploy, and maintain AWS infrastructure: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.

Configure AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.

Ensure HA, backup/restore, disaster recovery, and production infrastructure principles.

Create and maintain AWS infrastructure as code using Terraform.

### Kubernetes & Containerization

Build and operate Kubernetes on AWS (EKS).

Work with core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.

Use Helm for application management.

Configure Ingress Controller, Load Balancer, and TLS/certificates.

Understand Kubernetes storage and ensure stateful applications run reliably.

Work with Docker: image builds, registry, container troubleshooting.

### CI/CD & Automation

Build CI/CD processes, preferably with GitLab CI.

Automate deployment of applications and dependent services.

Integrate infrastructure changes into pipelines and maintain reproducible environments.

### Observability, Reliability & Operations

Set up monitoring with Prometheus + Grafana: metrics and alerts.

Organize centralized log collection and analysis: Loki/ELK/OpenSearch.

Diagnose network and system issues in Linux.

Ensure production stability, respond to incidents, and eliminate root causes.

### Security & Access Management

Manage secrets: AWS Secrets Manager / Vault/OpenBao / External Secrets.

Configure RBAC/IAM and follow the principle of least privilege.

Ensure secure service-to-service communication and infrastructure access.

### Data & Services

Support PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.

Ensure backup/restore and fault tolerance for stateful services.

Help teams deploy and maintain dependent services in Kubernetes.

### Requirements

### Key Requirements

### AWS & Networking

Strong AWS experience: VPC, Subnets, Route Tables, Security Groups, IAM, EC2, EBS, S3, ELB/ALB/NLB, Route53.

Good understanding of AWS networking: public/private subnets, NAT Gateway, Internet Gateway, VPC Peering / Transit Gateway, VPN, routing.

### Kubernetes & Containers

Hands-on experience building and operating Kubernetes on AWS (EKS).

Understanding of core Kubernetes objects: Deployment, StatefulSet, DaemonSet, Service, Ingress, ConfigMap, Secret, Job/CronJob, PVC/PV, Namespace, ServiceAccount.

Experience with Helm.

Experience configuring Ingress Controller, Load Balancer, and TLS/certificates.

Experience with Docker: image builds, registry, container troubleshooting.

Understanding of Kubernetes storage and stateful application operation.

### IaC & CI/CD

Terraform — creating and maintaining AWS infrastructure as code.

Experience building CI/CD, preferably GitLab CI.

### Data, Queues & Storage

Experience with PostgreSQL, Redis, RabbitMQ/Kafka at the infrastructure and application integration level.

Understanding of HA, backup/restore, disaster recovery, and production infrastructure principles.

### Monitoring, Logging & Secrets

Monitoring: Prometheus + Grafana, configuring metrics and alerts.

Centralized log collection and analysis: Loki/ELK/OpenSearch.

Secrets management: AWS Secrets Manager / Vault/OpenBao / External Secrets.

### Linux & Security

Linux administration and confident diagnosis of network and system issues.

Experience configuring RBAC/IAM and following the principle of least privilege.

### Especially Important Practical Experience

The engineer must be able to design an AWS network from scratch → set up EKS → deploy an application and dependent services → configure ingress/DNS/TLS → CI/CD → monitoring/logging → backup → hand over a production-ready infrastructure for operation.

### Nice to Have

Experience migrating lending systems or fintech products.

Experience building CI/CD with GitLab CI.

Hands-on experience with Vault/OpenBao, External Secrets.

Experience with Kafka and stateful services in Kubernetes.

### What We Offer

Participation in a large-scale migration of a digital financial product.

Work with a modern stack: AWS, Kubernetes/EKS, Terraform, CI/CD, Prometheus/Grafana.

Close collaboration with development, system analysts, QA, and engineers.

Opportunity to build a production-ready platform from scratch and hand it over to operations.

Terms and work format — discussed individually

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/recruitee%3Anovacard%3A2746618 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.
