Senior DevOps & Cloud Security Engineer

About Cyrafa

Cyrafa builds payment infrastructure connecting traditional finance and digital assets. We are looking for a hands-on Senior DevOps & Cloud Security Engineer to own the security, reliability, and deployment of our production infrastructure.

You will work directly with our founder and developers, making architecture decisions and implementing them. This role requires practical experience securing live systems that handle sensitive financial data and transactions.

What you will own

• Design and maintain secure, cost-efficient infrastructure across dedicated servers, virtual machines, and cloud services.
• Harden Linux servers, configure firewalls, segment networks, and implement controlled administrative access.
• Implement Cloudflare Tunnel, Access, and Zero Trust policies for applications and infrastructure.
• Secure connectivity between application services, managed MongoDB, Redis, and external providers.
• Build and maintain GitHub Actions CI/CD pipelines with controlled production access, approval gates, security checks, and reliable rollback.
• Containerize applications and maintain consistent development, staging, and production environments.
• Manage infrastructure as code and configuration automation using Terraform, Ansible, or equivalent tools.
• Implement secrets management, credential rotation, and KMS/HSM integrations, with appropriate separation between application access and wallet-signing permissions.
• Establish monitoring, centralized logging, alerting, vulnerability management, and incident-response procedures.
• Own backup and disaster-recovery processes, including tested restores and documented recovery objectives.
• Review infrastructure changes with developers and resolve deployment, performance, and security issues.
• Maintain clear architecture diagrams, access records, and operational runbooks.

Required experience

• 5 years of hands-on DevOps, infrastructure, or site reliability engineering experience, including responsibility for production environments.
• Strong Linux administration, networking, DNS, TLS, reverse proxies, and troubleshooting skills.
• Practical experience with OVHcloud or comparable cloud and dedicated-server infrastructure.
• Production experience with Docker, GitHub Actions, and infrastructure automation.
• Hands-on experience with Cloudflare Tunnel, Access, and Zero Trust access controls.
• Experience supporting Node.js applications and React frontends.
• Experience securing and operating MongoDB and Redis integrations, including access restrictions, TLS, monitoring, and recovery.
• Strong understanding of least privilege, MFA, service identities, secrets management, and network segmentation.
• Experience integrating dependency, secret, container, and code-security scanning into delivery pipelines.
• Proven ability to investigate incidents, identify root causes, and implement lasting corrective actions.
• Ability to independently own infrastructure in a small engineering team and communicate technical decisions clearly.

Highly valuable

• Experience in fintech, payments, cryptocurrency, or other environments handling sensitive transactions.
• Experience with wallet infrastructure, signing-service isolation, and private-key lifecycle controls.
• Experience with Azure Key Vault, AWS KMS, HashiCorp Vault, or comparable technologies.
• Familiarity with Windows Server and Hyper-V.
• Experience with disaster-recovery exercises and collecting evidence for security audits.

What success looks like in your first 90 days

• A documented infrastructure inventory, architecture, and prioritized improvement plan.
• Administrative and database access restricted through verified access controls.
• Repeatable deployments with tested rollback procedures.
• Monitoring and actionable alerts covering critical services.
• A completed backup restoration exercise with measured recovery time.
• Documented secrets-management and incident-response procedures.

Interview process

We value demonstrated experience. Be prepared to explain production systems you have personally managed, incidents you have resolved, and the trade-offs behind your decisions.

The technical assessment will use a sandbox scenario covering secure application deployment, private database connectivity, CI/CD controls, monitoring, and recovery. Please do not share confidential information from previous employers.

To apply

• Apply through LinkedIn with your CV and a short description of a production infrastructure project you personally owned, including your responsibilities and the outcome.