{"id":4047437,"url":"https://alion.io/job/truebiz-senior-devops-engineer","title":"Senior DevOps Engineer","company":{"id":5552,"name":"TrueBiz","domain":"truebiz.io","url":"https://alion.io/company/truebiz","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Work at a Startup","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":{"min":140000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon Aurora","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon ECS","optional":false},{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"AWS Fargate","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Python","optional":false},{"name":"Redis","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon EventBridge","optional":true},{"name":"AWS Lambda","optional":true},{"name":"Celery","optional":true},{"name":"Django","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Scrapy","optional":true},{"name":"Sentry","optional":true},{"name":"Slack","optional":true}],"status":"live","first_seen_at":"2026-11-11T00:33:32Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T00:33:32Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"TrueBiz is a YC-backed merchant risk intelligence platform helping financial institutions understand whether the businesses they serve are legitimate.\nWe’re at a rare stage as a company: we already work with some of the largest companies in payments and financial services, but we’re still a small team where exceptional people can have an enormous impact on what gets built and how the company develops.\nWe’ve intentionally stayed lean, moved quickly, and given people much more ownership than they would typically have at a company with our level of enterprise traction. There are very few layers between identifying an important problem and actually solving it.\nThe mission matters too. Our technology helps stop fraudulent and abusive businesses from gaining access to the financial system, while helping legitimate businesses get approved faster and with less friction.\nThe Role\nYou will own the reliability of TrueBiz's production platform. That means the AWS infrastructure, the release path, the alerting, and the response when something breaks. It is the first dedicated infrastructure role here. Today a lot of this work is done by the Director of Engineering alongside other duties, and you will take it over and make it yours.\nReliability is the primary job. You will also run the technical side of our established security and SOC 2 program day to day, working alongside a dedicated compliance platform and outside security advisors who handle policy, audits, and architecture review. Your part is the hands-on operation of the controls and the evidence behind them.\nWhat you will do\nReliability (most of your time)\nCarry the pager for production, lead incident response, and write the postmortems that keep an incident from repeating.\nOwn alerting and observability end to end: alarms, dashboards, log pipelines, and regular proof that alerts actually reach a human.\nSize the platform against measured traffic. Our load arrives in bursts of thousands of reviews in a few minutes, and you will own the autoscaling floors, queue depths, and load tests that keep those bursts uneventful.\nDefine service level objectives with engineering and report against them.\nRun backup and disaster recovery: tested database restores, documented recovery targets, and a periodic recovery drill.\nInfrastructure and releases\nManage all infrastructure as code in AWS CDK (Python). Nothing in production is changed by hand.\nOwn the release path from merge to production: the CI/CD pipeline, deployment PRs, post-deploy verification, and rollback.\nPlan and execute migrations and decommissions, including database schema changes on large tables, engine upgrades, and retiring old systems completely.\nOperate the data layer: Aurora PostgreSQL, read replicas, and Redis.\nKeep staging a trustworthy rehearsal for production.\nManage AWS and vendor cost, including reserved capacity and cost per review.\nVendor reliability\nMonitor the error rates, latency, and quota use of the third-party APIs our reviews depend on, and tell apart a vendor outage, a rate limit, and an exhausted plan.\nWork with application engineers on the client behavior that protects us when a vendor degrades: timeouts, backoff, circuit breakers, and budgets.\nAdvise on plan sizing and renewals with real usage data.\nSecurity operations (secondary)\nTriage findings from GuardDuty, Inspector, and dependency scanners, and remediate vulnerabilities on a severity-based schedule.\nRun identity and access: single sign-on, least-privilege roles, access reviews, onboarding and offboarding, and credential hygiene.\nOwn secrets and encryption keys: inventory, rotation, and audit logging.\nMaintain the network edge, including rate limiting and web application firewall rules.\nWork with our outside security advisor on architecture review and the annual penetration test, and close the findings.\nCompliance (secondary)\nOperate the technical controls behind our SOC 2 program and produce the evidence for them, most of which comes from systems you already run.\nSupply the technical facts for customer security questionnaires and audit findings, and carry out the remediation.\nKeep runbooks, architecture documentation, and change records current enough that someone else could cover for you.\nWhat we are looking for\nRequired\nFive or more years running production systems, including time on call for a customer-facing service where you were the one who got paged.\nDeep, hands-on AWS experience: ECS on Fargate or a comparable container platform, load balancing, VPC networking and security groups, IAM, RDS or Aurora, CloudWatch.\nInfrastructure as code as your default way of working. CDK is ideal. Strong Terraform or CloudFormation experience with a willingness to switch is fine.\nComfortable reading and writing Python. Our infrastructure code, tooling, and application are all Python.\nA track record of leading incidents and writing honest postmortems.\nExperience owning a CI/CD pipeline and a release process with safe rollback.\nWorking security fluency: IAM policy, KMS, CloudTrail, and vulnerability triage. You do not need to be a security specialist.\nClear written communication. You will write for engineers, for leadership, and occasionally for a customer's security team.\nJudgment about risk. You verify before you delete, and you can explain why a change is safe.\nNice to have\nYou have been through a SOC 2 audit as the person supplying evidence.\nPostgreSQL operations at scale: upgrades, replication, query tuning, online schema changes.\nDjango and Celery, or another task-queue-heavy application.\nExperience with web scraping or headless-browser workloads.\nExperience managing dependence on rate-limited third-party APIs.\nGitHub Actions with OIDC-based deployment to AWS.\nYou have been the first infrastructure hire somewhere before.\nOur stack\nCloud: AWS. ECS on Fargate, Application Load Balancer, CloudFront, Aurora PostgreSQL, ElastiCache for Redis, Lambda, EventBridge, SNS, Secrets Manager, KMS.\n\nInfrastructure as code: AWS CDK in Python, with unit tests and type checking on the infrastructure code itself.\n\nApplication: Python, Django, Celery workers, and a Scrapy-based crawling fleet.\n\nDelivery: GitHub Actions deploying through short-lived OIDC roles. Separate AWS accounts for staging and production.\n\nObservability: CloudWatch metrics and Logs Insights, Better Stack, Sentry, structured JSON logging.\n\nSecurity tooling: GuardDuty with runtime monitoring, Inspector, CloudTrail, alerts routed to Slack.\n\nWhat success looks like\nFirst 30 days: You are deploying to production on your own, you are in the on-call rotation, and you have read every alarm and know which ones you trust.\n\nFirst 90 days: Service level objectives exist and are reported. Every production alert has an owner and a runbook. A database restore has been tested and timed. Vulnerability remediation runs on a written schedule.\n\nFirst six months: The next SOC 2 evidence cycle runs largely from automation. Traffic bursts and vendor degradations are handled by the system, not by a person watching a dashboard. A second person can cover on-call from your documentation.","description_format":"text","description_chars":7117,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["RegTech, AML & Compliance"],"lifecycle":[{"event":"open","at":"2026-11-11T00:33:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:3","win:early"],"computed_at":"2026-11-11T03:37:30Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/truebiz-senior-devops-engineer","json_url":"https://alion.io/job/truebiz-senior-devops-engineer.json","meta":{"generated_at":"2026-11-11T03:37:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3093,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5552},"rest":"https://alion.io/mcp/rest/get_company?id=5552"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftruebiz-senior-devops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftruebiz-senior-devops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftruebiz-senior-devops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/truebiz-senior-devops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftruebiz-senior-devops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4047437}},{"tool":"search_jobs","arguments":{"company":"truebiz.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4047437},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}