Svitla Systems Inc. is looking for a Senior DevOps snd Cloud Infrastructure Engineer for a full-time position (40 hours per week) in Argentina and Costa Rica.

Our client is a software company that focuses on an AI-driven sales automation platform for lead qualification and engagement.

You'll help improve, automate, and secure the cloud infrastructure and deployment workflows across AWS and GCP. It is a hands-on role for someone who can quickly understand the current environment, identify gaps, and drive improvements with minimal direction. The primary focus will be to streamline deployments, convert manual and script-based infrastructure workflows into Terraform, improve CI/CD reliability, tighten production access controls, and support SOC 2 compliance readiness.

Current cloud and deployment setup includes:

• AWS and GCP as the primary cloud platforms;
• АWS Amplify deployments are currently triggered directly through Amplify;
• AWS Lambda functions are currently managed using the Serverless Framework;
• Vertex AI Pipelines are deployed across multiple tenants, with deployment times that need optimization;
• Tenant provisioning is currently handled partially through scripts;
• GitHub as the primary source control and automation platform;
• SOC 2 controls that need ongoing maintenance and improvement.

• 7+ years of experience in DevOps, cloud infrastructure, platform engineering, or systems engineering.
• Strong experience with Terraform and Infrastructure as Code in production environments.
• Expertise in managing infrastructure across AWS and GCP.
• In-depth understanding of building and maintaining GitHub Actions workflows.
• Strong knowledge of GitHub Actions and CI/CD automation.
• Understanding of multi-tenant provisioning automation.
• Knowledge of least privilege, and JIT access
• Experience with SOC 2 technical controls.
• Experience with production incident response and troubleshooting.
• Experience with AWS services such as:
• Lambda;
• IAM;
• VPC;
• Amplify;
• CloudWatch;
• Secrets Manager or Parameter Store.
• Experience with GCP services such as:
• Vertex AI;
• IAM;
• VPC networking;
• Cloud security;
• Cloud Logging / Monitoring/observability.
• Experience migrating manual or framework-based infrastructure to Infrastructure as Code.
• Strong understanding of Linux, networking, DNS, IAM, and cloud security fundamentals.
• Experience implementing least-privilege access and production access controls.
• Experience with monitoring, logging, and observability tools.
• Solid experience in scripting with Bash, Python, Go, or similar languages.
• Ability to work independently, clarify ambiguity, and drive implementation without heavy hand-holding.
• Strong documentation and communication skills.
• Self-directed individual who can identify what needs to be done and take action without waiting for detailed instructions.
• Ownership-oriented professional who treats infrastructure reliability, security, and deployment quality as their responsibility.
• The ability to balance speed, quality, and maintainability without over-engineering.
• The ability to design access, automation, and deployment workflows with least privilege and auditability in mind.
• The ability to work well with engineering, product, and leadership teams.
• Documentation-focused who can leave behind clear runbooks, diagrams, and processes that the team can maintain.
• The ability to focus on measurable improvements in deployment speed, reliability, security, and compliance.

• Move AWS Amplify deployments from direct Amplify workflows to GitHub-triggered CI/CD.
• Convert AWS Lambda/serverless infrastructure into Terraform.
• Convert tenant provisioning scripts into Terraform modules and GitHub Actions workflows.
• Optimize Vertex AI Pipeline deployment time across multiple tenants.
• Clean up and standardize AWS/GCP VPC structures.
• Implement GitHub repository rules for branch naming, Jira references, PR approvals, and protected branches.
• Automate production permissions and implement just-in-time access for on-call engineers.
• Improve SOC 2 controls around access, deployments, infrastructure changes, and evidence collection.
• Improve monitoring, logging, alerting, and operational runbooks.
• Document infrastructure architecture and deployment workflows.

• Experience with multi-tenant SaaS infrastructure.
• Familiarity with Vertex AI Pipelines or ML/AI deployment workflows.
• Understanding of optimizing long-running cloud deployment pipelines.
• Familiarity with GitOps or declarative infrastructure patterns.
• Experience with SOC 2, ISO 27001, or similar compliance frameworks.
• Experience with just-in-time access tooling such as Okta, Teleport, AWS IAM Identity Center, Google IAM Conditions, or similar.
• Knowledge of policy-as-code tools such as OPA, Checkov, Conftest, Sentinel, or Terraform Cloud policies.
• Knowledge of Kubernetes, Docker, or containerized workloads.

• Manage and improve cloud infrastructure across AWS and GCP.
• Convert existing manual provisioning scripts into Terraform.
• Migrate AWS Lambda/serverless infrastructure from Serverless Framework to Terraform.
• Build reusable Terraform modules for tenant provisioning, networking, IAM, deployment resources, and environment setup.
• Ensure infrastructure is repeatable, version-controlled, documented, and auditable.
• Improve infrastructure consistency across development, staging, and production environments.
• Streamline deployment workflows across services and environments.
• Move AWS Amplify deployments from direct Amplify-based deployment to GitHub-driven workflows.
• Build and maintain GitHub Actions pipelines for application deployment, infrastructure deployment, and tenant provisioning.
• Improve deployment speed, reliability, rollback safety, and visibility.
• Optimize deployment workflows for multi-tenant environments.
• Improve long-running Vertex AI Pipeline deployments across multiple tenants.
• Establish clear promotion workflows between environments.
• Review existing tenant provisioning scripts and workflows.
• Convert tenant provisioning into Terraform-backed infrastructure workflows.
• Automate tenant provisioning using GitHub Actions.
• Improve repeatability, traceability, and rollback capability for tenant setup.
• Reduce manual operational work and deployment risk.
• Review, clean up, and improve existing VPC structures.
• Define clear networking patterns across AWS and GCP.
• Improve segmentation between environments and tenants where appropriate.
• Review DNS, routing, security groups, firewall rules, and cloud networking configuration.
• Document cloud network architecture and operational runbooks
• Security, IAM, and Access Controls.
• Implement least-privilege access across AWS, GCP, GitHub, and deployment systems.
• Automate permission management for engineering and production environments.
• Restrict production access based on role and operational need.
• Implement or improve just-in-time access for on-call engineers.
• Improve auditability of privileged access and production changes.
• Review secrets management and recommend improvements where needed.
• GitHub Governance
• Implement GitHub repository rules and engineering workflow standards, including:
• Branch naming conventions;
• Pull request requirements;
• Required Jira ticket references;
• Protected branches;
• Required reviews;
• Required CI checks;
• Environment-based approvals.
• Improve consistency of engineering workflows across repositories.
• Ensure GitHub workflows support both developer velocity and compliance needs.
• Review and improve monitoring, logging, metrics, and alerting.
• Help identify deployment bottlenecks, infrastructure risks, and recurring operational issues.
• Improve incident response readiness through runbooks and documentation.
• Support production incident troubleshooting when needed.
• Recommend improvements to reduce operational toil and improve system reliability.
• Help maintain and improve technical controls required for SOC 2.
• Support controls related to:
• Access management;
• Change management;
• Deployment approvals;
• Infrastructure security;
• Production access;
• Audit logging;
• Evidence collection.
• Ensure infrastructure and deployment processes are auditable and documented.
• Help create or improve runbooks, diagrams, and process documentation needed for compliance.

• Deployments are reliable, repeatable, and primarily managed through GitHub-based workflows.
• Infrastructure is managed through Terraform rather than manual scripts or ad hoc configuration.
• Tenant provisioning is automated, auditable, and significantly less manual.
• Vertex AI Pipeline deployments are better optimized for multi-tenant use.
• AWS and GCP networking structures are cleaner, more secure, and better documented.
• GitHub rules support consistent engineering workflows and compliance requirements.
• Production access is restricted, auditable, and based on just-in-time access where appropriate.
• SOC 2 controls are easier to maintain, and evidence is easier to collect.
• Engineering teams have clear documentation and runbooks for ongoing maintenance.

• US and EU projects based on advanced technologies.
• Competitive compensation based on skills and experience.
• Comprehensive private medical insurance.
• Regular performance appraisals to support your growth.
• Flexibility in workspace, either remote, our welcoming office or local coworking.
• Bonuses for recommendations of new employees.
• Bonuses for article writing, public talks, other activities.
• 15 vacation days, 10 national holidays, 10 sick leaves.
• Personalized learning program tailored to your interests and skill development.
• Free tech webinars and meetups organized by Svitla.
• Fun corporate online\offline celebrations and activities.
• Well-established remote culture.
• Awesome team, friendly and supportive community!

Svitla Systems is a global digital solutions company headquartered in the U.S. and operating across the Americas, Europe, Asia, and APAC. Since 2003, we have served a wide range of clients — from innovative start-ups to Fortune 500 companies.

Our success is built on partnership. By integrating seamlessly with clients’ teams, we create lasting collaborations that drive real results.

We are strong advocates of workplace flexibility, remote culture, individual approach to professional and personal growth.

Svitla is proud to be an equal opportunity employer. All qualified applicants will receive consideration for cooperation without regard to age, gender identity, sexual orientation, religion, race, color, national origin, disability, or any other characteristic protected by applicable law.

Our global mission is to build a business that contributes to wellbeing of our partners, personnel, and their families, improves our communities, and makes a lasting difference in the world.

Together, we are coding a brighter tomorrow — and living it.

Join us!