{"id":3518404,"url":"https://alion.io/job/koorahr-devops-engineer","title":"Devops Engineer","company":{"id":4488944,"name":"KooraHR","domain":null,"url":"https://alion.io/company/koorahr","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Nairobi, Kenya"],"countries":["KE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"Bitbucket","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Docker","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Laravel","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"MySQL","optional":false},{"name":"Nginx","optional":false},{"name":"Node JS","optional":false},{"name":"PCI DSS","optional":false},{"name":"PHP","optional":false},{"name":"PHP-FPM","optional":false},{"name":"Python","optional":false},{"name":"Redis","optional":false},{"name":"Sentry","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-21T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-21T00:00:00Z","board_verified":false,"closed_at":null,"days_open":13,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":13},"description":"Position summary\n\nWe're looking for a DevOps Engineer to own that infrastructure — the AWS environment, the CI/CD pipelines and the security posture — and to carry the operational load so product engineers can keep shipping.\n\nThis is a hands-on role with real ownership. You will be the person who decides how the company builds, deploys, monitors and secures everything it runs.\n\nLocation: Nairobi, Kenya\n\nType: Full-Time, Onsite\n\nKey responsibilities\n\n1. Cloud infrastructure and scalability\n\nOwn and operate the company's AWS environment, covering EC2, VPC, IAM, S3, RDS, ElastiCache, load balancers, Route 53 and CloudFront.\n\nMove the platform from single production and development instances to a clustered, load-balanced and auto-scaling architecture that holds up as livestream and campaign traffic grows.\n\nDefine infrastructure as code using Terraform or CloudFormation, with parity across development, staging and production.\n\nPlan capacity and performance ahead of peak moments such as livestream sales, campaign launches and end-of-year shopping periods.\n\nPrepare the infrastructure for multi-market operation as the company expands beyond Kenya.\n\n2. CI/CD, release engineering and developer enablement\n\nOwn the CI/CD pipelines for Laravel (PHP), Node.js and Flutter across web and mobile.\n\nAutomate build, test, release and rollback so deployments become routine rather than an event.\n\nContainerise services with Docker and move provisioning away from manual server setup.\n\nSet up and maintain mobile release pipelines to the Google Play Store and the Apple App Store.\n\nUnblock the Full-Stack and Mobile developers on environments, build failures, test data and release cuts.\n\n3. Security, access control and compliance\n\nHarden the infrastructure behind the company's payments product, where creator funds, advances and repayments sit.\n\nImplement least-privilege access, privileged access management on the internal admin console, secrets management and key rotation.\n\nEnforce encryption in transit and at rest, network segmentation, and web application firewall and DDoS protection at the edge.\n\nRun vulnerability scanning and patch management across servers, containers and dependencies.\n\nSupport internal security assessments and external penetration testing, then track and validate every fix.\n\nMeet the security and data-handling expectations of banking and payment partners, and align with the Kenya Data Protection Act and card industry standards where they apply.\n\n4. Reliability, observability and incident response\n\nBuild monitoring, logging and alerting that shows the real state of the platform, using Sentry, CloudWatch and an equivalent metrics and log aggregation stack.\n\nSet service level objectives, run the on-call rotation, and lead incident response and post-incident reviews.\n\nOwn backups and disaster recovery for transactional data such as orders, payouts, wallet events and loan records, with restores tested rather than assumed.\n\nTune MySQL and Redis for performance, and keep database growth under control as volumes rise.\n\n5. Cost, governance and teamwork\n\nTrack and reduce cloud spend, and make cost per transaction and cost per active creator visible to the business.\n\nDocument architecture, runbooks and standards so knowledge does not sit with one person.\n\nReview infrastructure-related code and coach the team on secure defaults.\n\nWork on partner integrations, technical due diligence and audit readiness.\n\nQualifications and technical skills\n\nRequired\n\nBachelor's degree in Computer Science, Information Technology, Software Engineering, Information Security or a related field.\n\n5+ years of professional experience in DevOps, site reliability, platform or cloud infrastructure engineering, running production systems.\n\nStrong AWS experience across both infrastructure and security: EC2, VPC, IAM, S3, RDS, CloudWatch, Secrets Manager, security groups, WAF and backup tooling.\n\nInfrastructure as code with Terraform or CloudFormation.\n\nDocker in production, with container orchestration experience (ECS, EKS or Kubernetes).\n\nOwnership of CI/CD pipelines using GitLab CI, GitHub Actions, Bitbucket Pipelines or similar.\n\nLinux administration, plus hands-on experience with Nginx, PHP-FPM, MySQL and Redis.\n\nScripting and automation in Bash and at least one of Python or Go.\n\nMonitoring, logging and alerting in production, with real incident response experience.\n\nSolid grounding in application and network security: TLS, key management, identity and access management, and vulnerability management.\n\nProficiency with Git and collaborative development workflows.\n\nAdditional skills preferred\n\nExperience in fintech or financial services, ideally a bank, payment service provider or lender, working on or close to financial rails such as mobile money, card processing, core banking, wallets or ledgers.\n\nFamiliarity with PCI DSS, ISO 27001, SOC 2 or the Kenya Data Protection Act, and with supporting audits or partner security reviews.\n\nCertifications such as AWS Solutions Architect, AWS Security Specialty, Certified Kubernetes Administrator, CISSP or OSCP.\n\nExperience supporting Laravel and Flutter teams.\n\nExposure to streaming or real-time media infrastructure.\n\nExperience with multi-tenant infrastructure serving several partners from a single platform.\n\nKPIs / What success looks like\n\nPlatform availability against agreed service level objectives, with the payments product and live-shopping feature held to the highest standard.\n\nHigher deployment frequency and shorter lead time for changes, with a low change failure rate.\n\nFaster mean time to recovery, and P1 incidents that do not recur.\n\nSecurity findings closed within agreed windows, with no critical issues left open after assessments.\n\nBackups and disaster recovery tested and proven, not assumed.\n\nCloud cost per transaction and per active creator trending down as volumes grow.\n\nProduct engineers unblocked, with environments, pipelines and releases no longer a bottleneck.\n\n Position summary\n\nWe're looking for a DevOps Engineer to own that infrastructure — the AWS environment, the CI/CD pipelines and the security posture — and to carry the operational load so product engineers can keep shipping.\n\nThis is a hands-on role with real ownership. You will be the person who decides how the company builds, deploys, monitors and secures everything it runs.\n\nLocation: Nairobi, Kenya\n\nType: Full-Time, Onsite\n\nKey responsibilities\n\n1. Cloud infrastructure and scalability\n\nOwn and operate the company's AWS environment, covering EC2, VPC, IAM, S3, RDS, ElastiCache, load balancers, Route 53 and CloudFront.\n\nMove the platform from single production and development instances to a clustered, load-balanced and auto-scaling architecture that holds up as livestream and campaign traffic grows.\n\nDefine infrastructure as code using Terraform or CloudFormation, with parity across development, staging and production.\n\nPlan capacity and performance ahead of peak moments such as livestream sales, campaign launches and end-of-year shopping periods.\n\nPrepare the infrastructure for multi-market operation as the company expands beyond Kenya.\n\n2. CI/CD, release engineering and developer enablement\n\nOwn the CI/CD pipelines for Laravel (PHP), Node.js and Flutter across web and mobile.\n\nAutomate build, test, release and rollback so deployments become routine rather than an event.\n\nContainerise services with Docker and move provisioning away from manual server setup.\n\nSet up and maintain mobile release pipelines to the Google Play Store and the Apple App Store.\n\nUnblock the Full-Stack and Mobile developers on environments, build failures, test data and release cuts.\n\n3. Security, access control and compliance\n\nHarden the infrastructure behind the company's payments product, where creator funds, advances and repayments sit.\n\nImplement least-privilege access, privileged access management on the internal admin console, secrets management and key rotation.\n\nEnforce encryption in transit and at rest, network segmentation, and web application firewall and DDoS protection at the edge.\n\nRun vulnerability scanning and patch management across servers, containers and dependencies.\n\nSupport internal security assessments and external penetration testing, then track and validate every fix.\n\nMeet the security and data-handling expectations of banking and payment partners, and align with the Kenya Data Protection Act and card industry standards where they apply.\n\n4. Reliability, observability and incident response\n\nBuild monitoring, logging and alerting that shows the real state of the platform, using Sentry, CloudWatch and an equivalent metrics and log aggregation stack.\n\nSet service level objectives, run the on-call rotation, and lead incident response and post-incident reviews.\n\nOwn backups and disaster recovery for transactional data such as orders, payouts, wallet events and loan records, with restores tested rather than assumed.\n\nTune MySQL and Redis for performance, and keep database growth under control as volumes rise.\n\n5. Cost, governance and teamwork\n\nTrack and reduce cloud spend, and make cost per transaction and cost per active creator visible to the business.\n\nDocument architecture, runbooks and standards so knowledge does not sit with one person.\n\nReview infrastructure-related code and coach the team on secure defaults.\n\nWork on partner integrations, technical due diligence and audit readiness.\n\nQualifications and technical skills\n\nRequired\n\nBachelor's degree in Computer Science, Information Technology, Software Engineering, Information Security or a related field.\n\n5+ years of professional experience in DevOps, site reliability, platform or cloud infrastructure engineering, running production systems.\n\nStrong AWS experience across both infrastructure and security: EC2, VPC, IAM, S3, RDS, CloudWatch, Secrets Manager, security groups, WAF and backup tooling.\n\nInfrastructure as code with Terraform or CloudFormation.\n\nDocker in production, with container orchestration experience (ECS, EKS or Kubernetes).\n\nOwnership of CI/CD pipelines using GitLab CI, GitHub Actions, Bitbucket Pipelines or similar.\n\nLinux administration, plus hands-on experience with Nginx, PHP-FPM, MySQL and Redis.\n\nScripting and automation in Bash and at least one of Python or Go.\n\nMonitoring, logging and alerting in production, with real incident response experience.\n\nSolid grounding in application and network security: TLS, key management, identity and access management, and vulnerability management.\n\nProficiency with Git and collaborative development workflows.\n\nAdditional skills preferred\n\nExperience in fintech or financial services, ideally a bank, payment service provider or lender, working on or close to financial rails such as mobile money, card processing, core banking, wallets or ledgers.\n\nFamiliarity with PCI DSS, ISO 27001, SOC 2 or the Kenya Data Protection Act, and with supporting audits or partner security reviews.\n\nCertifications such as AWS Solutions Architect, AWS Security Specialty, Certified Kubernetes Administrator, CISSP or OSCP.\n\nExperience supporting Laravel and Flutter teams.\n\nExposure to streaming or real-time media infrastructure.\n\nExperience with multi-tenant infrastructure serving several partners from a single platform.\n\nKPIs / What success looks like\n\nPlatform availability against agreed service level objectives, with the payments product and live-shopping feature held to the highest standard.\n\nHigher deployment frequency and shorter lead time for changes, with a low change failure rate.\n\nFaster mean time to recovery, and P1 incidents that do not recur.\n\nSecurity findings closed within agreed windows, with no critical issues left open after assessments.\n\nBackups and disaster recovery tested and proven, not assumed.\n\nCloud cost per transaction and per active creator trending down as volumes grow.\n\nProduct engineers unblocked, with environments, pipelines and releases no longer a bottleneck.","description_format":"text","description_chars":11981,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Kenya","iso":"KE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-30T10:55:31Z"}],"visa":[],"liveness":{"score":74,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.826,"p_room":0.9,"age_days":13,"expected_fill_days":24,"reasons":["seen:13","win:mid"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/koorahr-devops-engineer","json_url":"https://alion.io/job/koorahr-devops-engineer.json","meta":{"generated_at":"2026-11-03T08:34:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12050,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4488944},"rest":"https://alion.io/mcp/rest/get_company?id=4488944"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkoorahr-devops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkoorahr-devops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkoorahr-devops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/koorahr-devops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkoorahr-devops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3518404}},{"tool":"search_jobs","arguments":{"company":4488944,"detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3518404},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}