Senior DevOps Engineer (AWS + PostgreSQL)

Description: CluneTech is a global technology group that provides solutions to simplify international business, including digital sales, global payroll, global VAT, tax compliance, and cross-border payments. The group is headquartered in Kilkenny, Ireland, and publicly lists more than 1,200 employees, 35 offices, and operations across 20 countries. About the role: As a Senior AWS DevOps Engineer, you will play a key role in AWS infrastructure engineering, database administration, Linux systems operations, CI/CD automation, cost optimisation, observability, and application modernization. They will also help introduce approved AI-assisted engineering practices to improve documentation, operational efficiency, code quality, and incident response. Senior AWS Platform Engineer with strong PostgreSQL expertise responsible for cloud modernization, Aurora adoption, SQL Server migration, Terraform-driven infrastructure, and operational excellence across a regulated fintech platform. Responsibilities: 1. AWS Infrastructure Engineering Design, deploy, and manage AWS infrastructure supporting production financial workloads. Work with services including EC2, ECS/Fargate, RDS, Aurora, S3, VPC, Lambda, CloudWatch, Secrets Manager, IAM, DynamoDB, SQS, SNS, EventBridge, API Gateway, AWS IAM Identity Center, and QuickSight. Implement and maintain Infrastructure as Code using Terraform, CloudFormation, or AWS CDK. Manage infrastructure across multiple AWS accounts and environments. Build and optimise CI/CD pipelines using tools such as GitLab CI, GitHub Actions, AWS CodePipeline, or equivalent. Design and maintain secure networking, including VPCs, subnets, routing, security groups, NACLs, Site-to-Site VPN, Transit Gateway, and related controls. Implement monitoring, alerting, logging, and observability using CloudWatch, dashboards, metrics, alarms, and log aggregation. Execute cost optimisation initiatives across compute, storage, databases, data transfer, and managed services. Build and maintain AWS QuickSight dashboards for billing analytics, cost allocation, usage trends, and financial reporting. Support recurring FinOps activities including monthly spend reviews, rightsizing, Savings Plans / Reserved Instance analysis, and waste elimination. 2. Database Administration Administer PostgreSQL environments, including RDS for PostgreSQL, Aurora PostgreSQL, and self-managed PostgreSQL where applicable. Support PostgreSQL version lifecycle management, including supported production versions and upgrade planning. Manage replication, backup and recovery, point-in-time recovery, vacuuming, indexing, query tuning, and performance troubleshooting. Manage Amazon Aurora PostgreSQL clusters, including scaling, failover, parameter groups, monitoring, and Performance Insights. Administer SQL Server on Amazon RDS, including backup strategies, index maintenance, Query Store analysis, and parameter tuning. Plan and execute database migrations, including SQL Server to PostgreSQL migrations using AWS DMS and native database tooling. Implement database security controls, including encryption at rest and in transit, IAM authentication where appropriate, audit logging, access control, and secrets management. 3. Linux Systems Administration Manage Amazon Linux 2023 and RHEL-based systems. Perform patching, hardening, performance tuning, log management, and operational troubleshooting. Administer Apache HTTP Server, including virtual hosts, SSL/TLS, module configuration, and runtime troubleshooting. Manage systemd services, EBS/EFS storage, filesystem permissions, and automated deployment workflows. Write and maintain Bash scripts for automation, monitoring, deployment, and operational tasks. Implement host-level security controls including SSH hardening, firewall rules, least-privilege access, log forwarding, and vulnerability remediation. 4. AI-Assisted Engineering and Automation Use approved AI-assisted engineering tools to improve operational workflows, documentation, code review, and troubleshooting. Work with Amazon Bedrock and supported large language models, including Anthropic Claude models where approved for company use. Use Kiro, AWS's agentic coding service, where appropriate to support spec-driven development, documentation, testing, and implementation planning. Evaluate AI-assisted tooling for infrastructure operations, anomaly detection, documentation generation, and incident response support. Build automation that improves alert enrichment, operational insight, and repeatable engineering workflows. Ensure AI usage follows company security, data protection, privacy, and compliance policies. 5. Application Modernisation and Rearchitecture Contribute to the rearchitecture of monolithic transactional applications into modern, resilient AWS-native patterns. Support containerisation strategies using Docker, ECS, and Fargate. Design and implement event-driven patterns using SQS, SNS, and EventBridge. Support blue/green and canary deployment strategies for safer releases and reduced downtime. Improve application reliability, scalability, observability, and operational maintainability. 6. Documentation, Security, and Compliance Produce clear technical documentation for completed work, including architecture decisions, runbooks, migration plans, configuration records, and operational procedures. Maintain standard operating procedures and incident response runbooks. Support ISO 27001 audit activity by providing evidence of infrastructure controls, change history, access controls, monitoring, and operational procedures. Contribute to change management processes, including risk assessment, implementation planning, rollback planning, and CAB submissions. Apply least-privilege, secure-by-design, and auditability principles across all infrastructure and operational work. Requirements: 5+ years in DevOps, SRE, Cloud Engineering,or Infrastructure Engineering, including at least 3 years of hands-on AWS experienc