Tech Lead - DevOps

About Rupeek:

Rupeek, established in 2015 and headquartered in Bangalore, stands as India's leading asset-backed digital lending fintech platform. Committed to making credit accessible to Indians in a fair and convenient manner, Rupeek pioneers innovative financial products focused on monetizing India's $2 trillion gold market. Leveraging state-of-the-art technology and an automated asset-light supply chain, Rupeek is transforming the gold loan disbursal landscape across 40+ cities in India. With a customer base exceeding 5,00,000+, the company's strategic partnerships with top banks and financial institutions underscore its commitment to building gold-backed assets through low-risk, low-touch, and friction-free processes.

Rupeek's impressive journey is supported by key investors such as Sequoia Capital, Accel Partners, Bertelsmann, and GGV Capital. In Apr 2024, Rupeek turned profitable and raised $25 in equity capital from Manipal Group and Elevation Capital to fund its next phase of growth. Join us in redefining the future of finance through innovation, technology, and a commitment to financial inclusivity.

About the Role:

Rupeek's infrastructure spans RFPL and RCPL — customer-facing apps, lending core, ledger systems, and operations — running on AWS with EKS as the primary compute plane. DevOps is a horizontal function serving all engineering pods, and also owns the interface with Infosec on audits, RBI/DPDP compliance evidence, and incident response.

The Tech lead Devops is the senior-most engineer in the team and its technical lead. This person sets standards, mentors the team, and owns infrastructure vision.

Job Title: Tech Lead - Devops

Experience: 5 to 8 years of experience

Location: Bangalore

Key Responsibilities:

• Senior-most DevOps engineer; technical lead for the DevOps team
• Sets vision and direction for Rupeek's infrastructure — cloud architecture, Kubernetes platform, CI/CD, observability, cost, and reliability.
• Owns infrastructure-as-code standards — Terraform module design, state management, drift detection, and review process.
• Owns the production readiness bar — every service that ships production traffic clears standards this person defines.
• Partners with Infosec to pass audits (RBI IT Outsourcing, SOC 2, ISO 27001, DPDP) and due diligence (lender, investor, partner).
• Leads incident response from the infra side — the person on the call when the blast radius is large.
• Mentors junior and mid DevOps engineers; runs design and code reviews for the team.
• Represents DevOps in architecture reviews for major product initiatives.
• Sets AI-fluency standards for the DevOps team — tooling, prompt patterns, safe use of AI in production workflows.
• Peer to senior SDE IIIs across product pods.

Must have skills:

Cloud & Kubernetes

• Deep AWS — VPC design, IAM, EKS, RDS/Aurora, S3, KMS, cost architecture, multi-AZ / multi-region trade-offs.
• EKS operations — node group strategy, cluster upgrades, addons lifecycle, admission controllers, network policies, PSA.
• Comfortable debugging at layers others can't — kernel/OS, container runtime, CNI, etcd, control plane.

Infrastructure as Code

• Terraform mastery — module design, remote state, workspaces vs directories, provider version discipline, testing (terratest, tflint, checkov).
• Has designed and enforced IaC standards across a team — including PR review process, plan/apply gating, and drift detection.
• Opinion on Terraform vs Pulumi vs CDK, and why they picked what they picked.

CI/CD & SDLC

• Has built and operated production CI/CD pipelines with strong controls — immutable artifact tagging, signed artifacts (cosign or equivalent), promotion gates, per-environment approvals.
• Familiar with supply chain security — SLSA levels, SBOMs, dependency pinning, supply chain (npm/PyPI) incident response.
• Comfortable with GitOps patterns

Observability & Reliability

• Deep in Prometheus, Grafana, Alertmanager, and PagerDuty — from scrape config to SLO-driven alerting
• Has designed on-call rotations, runbooks, and blameless post-mortem culture.
• Comfortable with distributed tracing (OpenTelemetry, Jaeger, or similar) and structured logging.

Security & Compliance

• Has partnered with Infosec through at least one major audit (SOC 2, ISO 27001, RBI, or equivalent).
• Strong on secrets management (Vault, AWS Secrets Manager, KMS), workload identity (IRSA), and least-privilege IAM
• Understands regulated-industry constraints — data localization, PII handling, audit trails, evidence collection.
• Has responded to real security incidents — DDoS, credential leaks, supply chain compromise, or similar.

Scripting & Automation

• Strong in Python or Go — writes production-quality automation, not just glue scripts.
• Bash fluency; comfortable with the standard Linux toolchain.

AI Fluency

• Uses AI tools (Claude Code, Cursor, or similar) as part of daily workflow.
• Has opinions on where AI helps and where it hurts in the DevOps SDLC.
• Can articulate what AI-safe infrastructure change management looks like.

Leadership

• Has mentored junior and mid engineers; visible track record of growing people.
• Writes well — runbooks, RFCs, post-mortems
• Insists on high standards; can hold the line on production readiness without becoming a bottleneck.
• Comfortable pushing back on product timelines when infra risk is real.

Persona:

• Engineering degree in Computer Science or related
• Has held a senior-most DevOps / SRE / Platform role at least once before, in a company where the infra actually mattered.
• Fintech, payments, or regulated-industry background strongly preferred.
• Recent hands-on work — has written Terraform and touched a cluster in the last month.
• Comfortable being the escalation point at 2am.