DevOps Engineer for a Finance Company (US-Based/Remote)

Paired is a global staffing and recruiting agency that pairs remote work with top-tier talent. We help individuals from around the world connect with great companies that are looking for their specific skill set. Our mission is to provide great jobs to talented people, no matter where they are located.

Our client is a super-intelligent finance platform, a real-time data transformer that turns messy streams (bank feeds, invoices, emails, API events) into perfectly structured records and investor-grade clarity.

Role Overview:
As a DevOps Engineer, you would work shoulder-to-shoulder with the development team, review every infrastructure decision, and step in as the full owner the day the platform is released.

Key Responsibilities:

• Review & sign off on every AWS resource (Lambda, RDS/Postgres, S3, EventBridge, VPC, IAM, KMS) that the Toptal team codes. Block console clicks and own the modules post-launch.
• Validate VPCs, peering, VPNs, routing, and private endpoints. Ensure least-privilege paths and document the topology for future scale.
• Audit IAM policies, encryption settings, secret rotation, and audit logging. Confirm they hit GSI's security baseline.
• Evaluate & tune the ELK or Prometheus/Grafana stack Toptal deploys so alerts fire before users notice issues.
• Confirm automated CVE scans, patch workflows, and incident-response runbooks, then run a tabletop drill.
• Gather SOC 2 & ISO 27001 evidence (config snapshots, access logs), close gaps, and answer customer questionnaires.
• Review GitHub Actions (or similar) pipelines—ensure SAST/DAST/IaC scans and signed artifacts, then own and improve them.
• Verify & test snapshots, cross-region replication, and restore run-books so finance data can't disappear.

Requirements

• Terraform / Terragrunt for real workloads
• AWS expertise across compute, storage, and networking
• Cloud-networking depth (VPC design, peering, VPN, routing)
• Observability stacks (ELK, Prometheus/Grafana, or similar)
• SOC 2 & ISO 27001 exposure—you've lived under these frameworks
• Vulnerability management & incident response (CVE scanning, patching, drills)
• Availability to work with a 4—6 h overlap with New York time (UTC-8, UTC-3)

Benefits

• Remote Working for US Company
• Exposure to new technology & trends
• Competitive USD Salary