Senior DevOps & Back-End Engineer
The role
Xpertyy is a UAE professional-services marketplace that connects customers with verified experts and firms on the web and on iOS and Android. The platform is live in production on Google Cloud and built in TypeScript end to end (NestJS, Next.js, PostgreSQL and Temporal), with Stripe Connect payments and LiveKit video. We are now building the next version alongside it: service orders and packages, formal delivery, invoicing and settlement, and the services and infrastructure needed to scale them. We are hiring a senior, hands-on engineer who leads on DevOps and infrastructure and also ships product code. You will own how code reaches production and how production runs, and you will build features and services across the stack. Candidates must meet every mandatory requirement; Preferred / Plus experience does not replace a mandatory criterion.
What you will own CI/CD and release engineering
- Own the CI/CD pipelines for the platform's services and web application: GitHub Actions with keyless (OIDC) authentication, automated linting, testing, builds, pinned container images, deployments, approval gates, release evidence and rollback.
- Run the promotion path from protected branches through preview and parity validation to production, with staged deployments and pre-deployment readiness checks for secrets, database migrations and configuration.
- Work with the mobile engineer on build, signing and release automation for the iOS and Android applications.
Cloud infrastructure and operations
- Own the Google Cloud estate as code with Terraform: Cloud Run services, Cloud SQL (PostgreSQL), Memorystore, Artifact Registry, Secret Manager, IAM and networking, across isolated environments.
- Strengthen resilience: database availability, backups and point-in-time recovery proven by tested restores, disaster-recovery runbooks, capacity planning and cost control.
- Operate the managed services the platform depends on, including Temporal Cloud workers, Stripe and Stripe Connect webhooks, LiveKit, transactional email and feature flags.
Security, observability and incident response
- Apply least-privilege access, keep internal services private, manage and rotate secrets, and keep dependency and container scanning in the pipeline.
- Build observability with OpenTelemetry and Google Cloud Operations: structured logs, traces, metrics, dashboards, alerts and service-level objectives.
- Lead incident response: on-call readiness, diagnosis across the application, data, pipeline and infrastructure layers, clear communication of impact, and post-incident reviews that lead to verified fixes.
- Support security reviews and penetration tests with evidence, and close findings with tested changes.
Back-end product delivery
- Build and maintain back-end features and services across the TypeScript platform: NestJS / Fastify APIs, shared packages, PostgreSQL data models and migrations, and Temporal workflows, with support for the Next.js web application where needed.
- Contribute to the next version of the platform, including the services, data and infrastructure that service orders, delivery, invoicing and settlement need.
- Build secure APIs with authentication, role-based authorisation, payments, notifications and administrative operations, tested from unit to end-to-end.
AI-driven development
- Use our existing AI-assisted development workflow for implementation, infrastructure as code, debugging, testing, investigation, code review and documentation.
- Remain accountable for every AI-assisted change: verify it through code inspection, automated tests, runtime evidence and security review before release, and never apply a generated infrastructure change without a reviewed plan.
Engineering quality and continuity
- Write clean, testable code and contribute disciplined code reviews, runbooks and architecture decision records.
- Document environments, pipelines, access and recovery procedures so that deployments and production support do not depend on one person.
Mandatory requirements
Professional experience: 8+ years in software engineering, including at least 3 years owning DevOps, cloud infrastructure or site reliability for a production platform, and at least 3 years of production back- end development. CI/CD ownership : pipelines you designed and operated from commit to production, covering tests, builds, container images, deployments, approvals and rollback, in GitHub Actions or an equivalent. Cloud infrastructure: production ownership on a major cloud, Google Cloud preferred: containers (Cloud Run or Kubernetes), managed databases, IAM, networking, secrets, and backup and restore. Infrastructure as code: Terraform or an equivalent for real production environments, including state management, module design, environment isolation and safe change review. Containers: Docker in production, including secure, minimal images and runtime configuration. Observability and incidents: logs, metrics, traces, alerting and service-level objectives in production, and real incidents you led through to a verified fix and a post-incident review. Security: least-privilege access, secrets management, keyless CI authentication, dependency and image scanning, and secure handling of payment and personal data. Back-end TypeScript: production experience with Node.js back-end services (NestJS or similar), REST APIs, authentication and authorisation, and PostgreSQL schema design, migrations and query performance. AI-driven development: demonstrable working proficiency with AI development tools, including context engineering, task decomposition, context management, iterative refinement and verification of generated work. AI output accountability: the ability to inspect, test, debug, secure and explain AI-assisted code and infrastructure changes independently; generated output is never treated as correct without evidence. Engineering practice: strong Git workflow, automated testing, code review, documentation and production support. Communication: clear written and spoken English, with the ability to explain technical trade-offs and risk to product and operational stakeholders.
Preferred / Plus
- Google Cloud in depth: Cloud Run, Cloud SQL, Memorystore, Artifact Registry, Secret Manager, Cloud Operations and Workload Identity Federation.
- Temporal or another durable workflow engine in production.
- Stripe and Stripe Connect for marketplace payments, webhooks, idempotency, refunds and payouts; LiveKit or WebRTC.
- Moving a modular monolith towards independently deployable services; event-driven design; API versioning.
- Kubernetes / GKE, platform engineering or internal developer platforms.
- Security and compliance practice: penetration-test remediation, audit evidence, data protection under UAE law, SOC 2 or ISO 27001 controls.
- Mobile CI/CD for Flutter applications, including signing and App Store and Google Play automation.
- Cloud cost management; Python for future AI services; marketplace, fintech, booking or payments platforms.
What success looks like
- First 30 days: complete the technical handover; reproduce clean deployments in every environment; map the production architecture, pipelines, secrets and access; document the top risks across reliability, security, recovery and cost, with a plan to close them.
- By 60 days: own normal deployments and on-call; close the highest-risk gaps, such as access, alerting and restores proven by test; take on assigned back-end tasks for the next version.
- By 90 days: production runs on documented runbooks with alerts and service-level objectives; the infrastructure path for the next version is agreed and being built; no part of deployment or recovery depends on one person; regular back-end delivery on the next version.
Send your CV, LinkedIn profile and GitHub or portfolio where available, with brief examples of: (1) a CI/CD pipeline or cloud environment you designed and operated in production; (2) a production incident you led what failed, what you did and what you changed afterwards; and (3) a back-end feature or service you shipped. Tell us how you use AI tools in your work.
Pay: From AED15,000.00 per month
Work Location: In person
openqareer не кадровое агентство: вакансия собрана с открытого источника, отклик подаётся на сайте работодателя.