DevOps / SRE Engineer (Google Cloud, Kubernetes)

Project overview

iPay is looking for a DevOps/SRE Engineer to own the platform’s infrastructure and reliability. The infrastructure is fully defined as code; the role is to evolve and maintain it.

About iPay

iPay is a fintech platform in the neobank space that brings crypto and fiat together: a multi-currency wallet, exchange, payment card issuing, transfers, SEPA payments and an API for partners. The platform is live in production and serves several partner companies under their own brands (white label).

Platform architecture:

Architecture decisions are documented in the repository, every change ships with automated tests, and releases to production go through CI/CD. AI tools are part of our everyday development workflow.

• around 15 TypeScript (Node.js) microservices communicating over gRPC, each with its own PostgreSQL database;
• an in-house double-entry ledger: every money movement is posted and reconciled against provider data;
• event-driven communication via the transactional outbox pattern and Apache Kafka; integrations with external providers run on idempotent webhooks;
• integrations with an MPC custody provider, card issuers, a KYC/KYT provider and exchange venues;
• infrastructure on Google Cloud: Kubernetes, GitOps, service mesh;
• a React Native (Expo) mobile app, a web client and an admin panel built with React.

Responsibilities

• Evolve the Google Cloud infrastructure with Terraform: GKE, networking, access management, certificates, perimeter protection.
• Run GitOps processes: service Helm charts, ArgoCD, development and production environments.
• Evolve CI/CD on GitHub Actions: testing, image builds, vulnerability scanning, image signing and admission control into the cluster, release-branch deployments; mobile app builds on Bitrise.
• Configure the service mesh (Istio): mTLS and service-to-service access policies.
• Manage secrets and observability (metrics, logs, tracing, alerting); own backup and recovery.
• Ensure reliability: define SLOs, run incident reviews, apply safe rollout strategies, optimize cloud costs.

Requirements

• 3+ years as a DevOps/SRE engineer, running Kubernetes in production.
• Hands-on experience using AI tools (Claude Code, Cursor or similar) in infrastructure work: delegating tasks to AI agents, verifying generated configurations and scripts.
• Experience with Terraform, Helm and GitOps tools (ArgoCD or Flux).
• In-depth knowledge of GCP or AWS.
• Experience building CI/CD and securing the software supply chain: image scanning and signing, minimal base images.
• Strong knowledge of Linux, networking, TLS and DNS.
• English sufficient to read technical documentation.

Nice to have

Tech stack

GCP (GKE, Artifact Registry, Certificate Manager, Cloud Armor, Binary Authorization, Secret Manager), Terraform, Helm, ArgoCD, Istio, External Secrets, GitHub Actions, Trivy, distroless images, OpenTelemetry, Cloudflare, Bitrise.

What we offer

• Experience with Istio, Binary Authorization, Cloud Armor.
• Running PostgreSQL in production: replication, backups, point-in-time recovery (PITR).
• Running Apache Kafka in production.
• Knowledge of PCI DSS infrastructure requirements.
• Work on a product that is live in production, with real customers and real money movements.
• A modern tech stack with no legacy code: TypeScript across the board, microservices, Kubernetes, GitOps, infrastructure as code.
• Direct influence on product and architecture decisions in a compact team.
• AI tools built into development, code review and testing as part of the everyday workflow.

Project details

• Start: flexible
• Location: Warszawa, Al. Jerozolimskie, PL