DevOps Engineer Keep Our Platform Running, Secure, and Ready to Scale PayShepherd is a vertical SaaS company transforming how heavy industries, such as Oil and Gas, Pulp and Paper, Mining and Power Generation, manage contractor spend. Our cloud-based contractor management platform automates the previously manual review of paper-based vendor cost reports, and our anomaly detection engine ensures 100% contract compliance and the elimination of overbilling. We have real customers and a genuine moat. We're looking for a DevOps Engineer to own the day-to-day health of our AWS infrastructure; keeping it secure, reliable, cost‑efficient, and ready to scale. Why this role Our platform handles sensitive financial data for some of the largest industrial operators in North America. The security and reliability bar is high, and we need someone who treats it that way, not as paperwork, but as core craft. This isn't a role where you'll need to invent a brand-new platform from scratch. We need someone dependable who can step into our AWS environment, understand it quickly, keep it healthy, and make it better week over week. When the infrastructure is humming, we want someone who can roll up their sleeves and contribute to product code, internal tooling, or automation projects. That cross‑functional ability is a real asset on a small team. What we value Reliability and follow-through: when you own something, it works Security mindset: you think about blast radius, least privilege, and what could go wrong before it does Humility and ego-free collaboration: strong opinions, loosely held; quick to be wrong; quicker to learn Hard work in service of clear, measurable goals: output, not theatre Curiosity: you stay current on AWS, security, and tooling, and you're interested in how AI is changing the way we build Transparency and honesty in how we work and what we ship Driving and enabling value for clients and prospects Relentless attention to improvement Your Responsibilities AWS Infrastructure Operate, maintain, and improve our AWS environment (EC2, RDS, S3, Lambda, ALB, Auto Scaling, Route 53, CloudWatch, and the rest) Manage IAM policies, roles, and access boundaries with care Monitor performance, reliability, and cost; surface and act on issues before they become problems Build and maintain Infrastructure as Code (Terraform, CloudFormation, or CDK) Own backup, disaster recovery, and incident response procedures Security Apply AWS security best practices end-to-end: IAM with MFA, least‑privilege roles, network segmentation, secrets management, encryption in transit and at rest Review and harden the environment against common threats Maintain audit logging and observability so we can answer "what happened, when, and by whom." Respond to security questionnaires, vendor reviews, and customer compliance requests Stay current on AWS security advisories and apply patches and mitigations promptly CI/CD and Developer Productivity Maintain and improve our build, test, and deployment pipelines Make it easy for the engineering team to ship safely and quickly Automate the repetitive and error‑prone parts of the development lifecycle Database Operations Support our production MySQL databases: backups, monitoring, query performance, schema migrations Plan and execute consolidation, upgrade, and migration work as the platform evolves Cross‑Functional Contribution When DevOps work is light, contribute to product code, internal tools, or automation projects Pair with engineers to solve infrastructure‑shaped problems in the application layer Share what you know about observability, performance, and security with the rest of the team Collaboration and Communication Work closely with our Engineering Lead and the rest of the engineering team Participate in code reviews, technical discussions, and knowledge sharing Communicate progress, blockers, and recommendations clearly and early Requirements 3+ years of professional DevOps, SRE, or Cloud Engineering experience Strong hands‑on AWS experience. This is non‑negotiable; our entire platform runs on AWS. Strong security knowledge and instincts: IAM, network security, secrets management, common attack vectors, audit and compliance basics Comfortable with Linux, shell scripting, and at least one general‑purpose programming language (Python, Node.js, PHP, Go, or similar) Experience with Infrastructure as Code (Terraform, CloudFormation, or CDK) Experience with CI/CD tooling Familiarity with relational databases (MySQL preferred): backups, monitoring, basic tuning Solid communication skills and a willingness to write things down so others can follow Big bonuses Active experience using AI‑assisted tools (Claude Code, Cursor, Copilot, agentic workflows) in your daily work. This is a real differentiator for us. Application development background that lets you jump into product or tooling code when DevOps work is light Experience operating SaaS environments at scale, ideally with multiple production instances Experience responding to SOC 2, ISO 27001, or similar compliance/audit programs Experience with cost optimization at a meaningful scale Your Benefits Meaningful stock options: we expect ownership, and we share the upside. Excellent medical, dental, and vision plans Real autonomy and real accountability New MacBook and accessories Location We're looking for candidates based in Vancouver, BC or Calgary, AB. PayShepherd is committed to achieving workforce diversity and creating an inclusive working environment. Diversity makes sense for us, for our customers, and for our future. We value different perspectives, skills, and experiences, and welcome applications from all sectors of the community. We welcome candidates with disabilities and will make accommodations throughout all stages of the recruitment and selection process. If you require a disability‑related accommodation, please contact us directly. All candidates must satisfy a background check. We thank all applicants for their interest, and only those selected for an interview will be contacted. #J-18808-Ljbffr