Tech Lead - DevOps

About Rupeek:Rupeek, established in 2015 and headquartered in Bangalore, stands as India's leading asset-backed digital lending fintech platform. Committed to making credit accessible to Indians in a fair and convenient manner, Rupeek pioneers innovative financial products focused on monetizing India's $2 trillion gold market. Leveraging state-of-the-art technology and an automated asset-light supply chain, Rupeek is transforming the gold loan disbursal landscape across 40+ cities in India. With a customer base exceeding 5,00,000+, the company's strategic partnerships with top banks and financial institutions underscore its commitment to building gold-backed assets through low-risk, low-touch, and friction-free processes. Rupeek's impressive journey is supported by key investors such as Sequoia Capital, Accel Partners, Bertelsmann, and GGV Capital. In Apr 2024, Rupeek turned profitable and raised $25 in equity capital from Manipal Group and Elevation Capital to fund its next phase of growth. Join us in redefining the future of finance through innovation, technology, and a commitment to financial inclusivity.

About the Role:Rupeek's infrastructure spans RFPL and RCPL — customer-facing apps, lending core, ledger systems, and operations — running on AWS with EKS as the primary compute plane. DevOps is a horizontal function serving all engineering pods, and also owns the interface with Infosec on audits, RBI/DPDP compliance evidence, and incident response.The Tech lead Devops is the senior-most engineer in the team and its technical lead. This person sets standards, mentors the team, and owns infrastructure vision.

Job Title: Tech Lead DevopsExperience: 6 to 8 years of experienceLocation: Bangalore

Key Responsibilities:Senior-most DevOps engineer; technical lead for the DevOps teamSets vision and direction for Rupeek's infrastructure — cloud architecture, Kubernetes platform, CI/CD, observability, cost, and reliability.Owns infrastructure-as-code standards — Terraform module design, state management, drift detection, and review process.Owns the production readiness bar — every service that ships production traffic clears standards this person defines.Partners with Infosec to pass audits (RBI IT Outsourcing, SOC 2, ISO 27001, DPDP) and due diligence (lender, investor, partner).Leads incident response from the infra side — the person on the call when the blast radius is large.Mentors junior and mid DevOps engineers; runs design and code reviews for the team.Represents DevOps in architecture reviews for major product initiatives.Sets AI-fluency standards for the DevOps team — tooling, prompt patterns, safe use of AI in production workflows.Peer to senior SDE IIIs across product pods.

Must have skills:Cloud & KubernetesDeep AWS — VPC design, IAM, EKS, RDS/Aurora, S3, KMS, cost architecture, multi-AZ / multi-region trade-offs.EKS operations — node group strategy, cluster upgrades, addons lifecycle, admission controllers, network policies, PSA.Comfortable debugging at layers others can't — kernel/OS, container runtime, CNI, etcd, control plane.Infrastructure as CodeTerraform mastery — module design, remote state, workspaces vs directories, provider version discipline, testing (terratest, tflint, checkov).Has designed and enforced IaC standards across a team — including PR review process, plan/apply gating, and drift detection.Opinion on Terraform vs Pulumi vs CDK, and why they picked what they picked.CI/CD & SDLCHas built and operated production CI/CD pipelines with strong controls — immutable artifact tagging, signed artifacts (cosign or equivalent), promotion gates, per-environment approvals.Familiar with supply chain security — SLSA levels, SBOMs, dependency pinning, supply chain (npm/PyPI) incident response.Comfortable with GitOps patternsObservability & ReliabilityDeep in Prometheus, Grafana, Alertmanager, and PagerDuty — from scrape config to SLO-driven alertingHas designed on-call rotations, runbooks, and blameless post-mortem culture.Comfortable with distributed tracing (OpenTelemetry, Jaeger, or similar) and structured logging.Security & ComplianceHas partnered with Infosec through at least one major audit (SOC 2, ISO 27001, RBI, or equivalent).Strong on secrets management (Vault, AWS Secrets Manager, KMS), workload identity (IRSA), and least-privilege IAMUnderstands regulated-industry constraints — data localization, PII handling, audit trails, evidence collection.Has responded to real security incidents — DDoS, credential leaks, supply chain compromise, or similar.Scripting & AutomationStrong in Python or Go — writes production-quality automation, not just glue scripts.Bash fluency; comfortable with the standard Linux toolchain.AI FluencyUses AI tools (Claude Code, Cursor, or similar) as part of daily workflow.Has opinions on where AI helps and where it hurts in the DevOps SDLC.Can articulate what "AI-safe" infrastructure change management looks like.LeadershipHas mentored junior and mid engineers; visible track record of growing people.Writes well — runbooks, RFCs, post-mortemsInsists on high standards; can hold the line on production readiness without becoming a bottleneck.Comfortable pushing back on product timelines when infra risk is real.

Persona:Engineering degree in Computer Science or relatedHas held a "senior-most DevOps / SRE / Platform" role at least once before, in a company where the infra actually mattered.Fintech, payments, or regulated-industry background strongly preferred.Recent hands-on work — has written Terraform and touched a cluster in the last month.Comfortable being the escalation point at 2am.