Find Your Dream Job

Company Name: Peach Payments

DevOps Engineer - CardRails Infrastructure (Contract)

Team: CardRails Platform Engineering

Duration: 6-12 months (with potential for extension)

Location: Remote/Hybrid

Security Clearance: Background check required for PCI environments

Compensation Range: R850 - R1400 p/h

Overview

The CardRails team is seeking a senior DevOps Engineer to support our card processing infrastructure that handles high-volume payment transactions across multiple markets.

This role offers deep exposure to production-grade payment rails architecture and the operational challenges of maintaining 99.99% uptime for critical financial infrastructure.

# Technical Environment

## Core Stack:

Application Layer: Java 17+, Spring Boot microservices, Maven/Gradle

Cloud Infrastructure: AWS (multi-AZ)

Infrastructure as Code: Terraform

Configuration as Code: Ansible, Packer

Secrets Management: HashiCorp Vault with dynamic secrets rotation

Service Discovery: Consul with service mesh capabilities

Container Orchestration: Nomad clusters with Docker/containerd

Observability: Prometheus, Grafana, ELK stack, distributed tracing, logz io

Message Queuing: RabbitMQ, Redis

## Key Responsibilities

### Infrastructure & Platform

• Maintain and enhance AWS infrastructure supporting daily card processing.
• Implement infrastructure as code using Terraform with proper state management and CI/CD integration
• Manage HashiCorp Vault clusters for secrets management across environments (dev/staging/prod)
• Operate Nomad clusters for container orchestration with proper resource allocation and scheduling
• Ensure cross-AZ resilience and disaster recovery capabilities

### Security & Compliance

• 
  
• Implement and maintain PCI DSS Level 1 compliance across all environments
• Manage network segmentation, encryption at rest/in transit, and access controls
• Support security audits and vulnerability assessments
• Maintain audit trails and compliance reporting automation

### Operational Excellence

• Design and implement zero-downtime deployment strategies for payment processing services
• Build and maintain comprehensive monitoring and alerting for transaction processing pipelines
• Participate in incident response and post-mortem processes
• Optimize system performance and capacity planning for transaction volume growth

### CI/CD & Development Support

• Maintain GitLab CI/CD pipelines with comprehensive testing stages
• Implement automated security scanning and compliance checks
• Support development teams with environment provisioning and troubleshooting
• Manage artifact repositories and dependency management

## Required Experience

• 5+ years DevOps/SRE experience with production systems at scale
• Strong proficiency in AWS services (EC2, RDS, ELB, VPC, IAM, KMS, CloudWatch)
• Production experience with HashiCorp stack (Terraform, Vault, Consul, Nomad)
• Java ecosystem understanding for application deployment and troubleshooting
• Linux systems administration and containerization (Docker, container registries)
• Infrastructure as Code practices with version control and testing
• Monitoring and observability tools implementation and maintenance

## Beneficial Experience

• PCI DSS implementation experience and compliance knowledge
• ISO 8583 messaging understanding and transaction flow knowledge
• Financial services or payment processing industry experience
• Kafka administration and message streaming architecture
• Database administration (PostgreSQL, Redis) in high-availability configurations
• Network security and firewall management
• Incident management and on-call experience

### What You'll Learn

### This role provides unique exposure to:

• Real-time payment processing architecture and transaction lifecycle management
• PCI compliance implementation in cloud environments at enterprise scale
• High-availability system design patterns for financial infrastructure
• Card network protocols and settlement processes
• Performance optimization techniques for sub-100ms transaction processing

## Team Structure

### You'll work closely with:

• CardRails development teams
• Information Security team

On-call rotation: Participation in 24/7 on-call rotation (1 week every 6 weeks)