Finsana

Salary:

ENGLISH TEXT WILL FOLLOW

propos de nous

Nous sommes une entreprise fintech mondiale spcialise dans les services aux consommateurs sous-desservis et sous-bancariss. Notre organisation est anime par une forte volont daider les gens sur le plan financier grce des solutions technologiques, ce qui nous a permis de servir des millions de consommateurs lchelle mondiale.

Bass Montral, Canada, avec des bureaux aux tats-Unis et en Amrique latine, nous favorisons parts gales le dveloppement personnel et professionnel. Afin doffrir la meilleure exprience possible nos employs, nous investissons continuellement dans nos quipes et crons des opportunits de croissance.

Le poste

Nous recherchons un(e) ingnieur(e) DevOps intermdiaire pour contribuer la conception et lexploitation dinfrastructures cloud scurises, fiables et volutives pour une plateforme fintech.

Vous travaillerez en troite collaboration avec les quipes de dveloppement logiciel, de scurit et de conformit afin damliorer la vitesse de dploiement, renforcer la rsilience en production et rpondre aux exigences oprationnelles des services financiers rglements (disponibilit, auditabilit, protection des donnes et gestion des changements).

Il sagit dun rle trs oprationnel : vous dvelopperez de linfrastructure en tant que code, amliorerez les pipelines CI/CD, participerez la gestion des incidents et optimiserez en continu notre environnement de production.

Responsabilits

Fiabilit de la plateforme et oprations

• Exploiter et amliorer les systmes de production soutenant les flux financiers (paiements, prts, trading, identit/KYC, rapports, etc.)
• Dfinir et amliorer la disponibilit, la latence et les taux derreur laide de SLO/SLI
• Participer une rotation de garde (on-call), grer les incidents et piloter les analyses post-incident (RCA) ainsi que les actions correctives
• Mettre en place des stratgies robustes de sauvegarde, reprise aprs sinistre et continuit des activits (dfinition et tests des RTO/RPO)

Infrastructure as Code et ingnierie cloud

• Concevoir, dployer et maintenir des infrastructures cloud via Infrastructure as Code (Terraform/CloudFormation/Pulumi)
• Crer des environnements scuriss et volutifs (dev/stage/prod) avec des dploiements cohrents et reproductibles
• Optimiser la scalabilit et les cots (dimensionnement, autoscaling, plans dconomie, gestion du stockage)

CI/CD et soutien aux dveloppeurs

• Concevoir et maintenir des pipelines CI/CD (Jenkins/Bitbucket) pour des dploiements scuriss et reproductibles
• Amliorer la qualit des livraisons avec des stratgies de dploiement progressif (blue/green, canary, feature flags)
• Dvelopper des outils et automatisations pour rduire les tches manuelles et accrotre la fiabilit des livraisons

Scurit, conformit et audit

• Intgrer les meilleures pratiques de scurit : IAM privilges minimaux, segmentation rseau, images scurises, gestion des vulnrabilits
• Grer les secrets (Vault, AWS/GCP Secrets Manager) et les cls (KMS/HSM)
• Soutenir les exigences de conformit (SOC 2, PCI DSS, etc.) via la journalisation, la collecte de preuves et la gestion des changements
• Maintenir des traces daudit compltes (changements dinfrastructure, accs, dploiements)

Observabilit et performance

• Amliorer la surveillance, les logs, le traage et les alertes (Prometheus, Grafana, ELK, OpenTelemetry)
• Optimiser les alertes pour rduire le bruit et amliorer la pertinence
• Crer des runbooks et procdures oprationnelles standard

Profil recherch

• 3 6 ans dexprience en DevOps / SRE / ingnierie de plateforme
• Solide exprience avec un fournisseur cloud majeur (GCP de prfrence)
• Exprience pratique avec Infrastructure as Code (Terraform privilgi)
• Exprience en CI/CD et automatisation des dploiements
• Connaissance des conteneurs et orchestration : Docker, Kubernetes (GKE)
• Bonnes bases Linux, rseaux (DNS, TLS, load balancing) et scripting (Bash/Python)
• Esprit orient oprations : gestion dincidents, postmortems, amlioration continue
• Capacit collaborer avec diffrentes quipes et communiquer efficacement
• Bilinguisme franais et anglais requis

Atouts

• Exprience en environnement rglement (SOC 2, PCI, SOX, ISO 27001)
• Connaissance des pratiques de scurit fintech : tokenisation, chiffrement, IAM, rotation des cls
• Exprience avec lauthentification interservices (mTLS, OIDC/JWT) et politiques (OPA/Gatekeeper)
• Connaissance des systmes vnementiels (Kafka, SNS, SQS, Pub/Sub)
• Exprience avec bases de donnes (Postgres/MySQL), rplication et performance
• Comprhension des contrles de risque (sparation des tches, contrles daccs, gestion des changements)

Technologies

• IaC : Terraform (+ Terragrunt), Helm
• CI/CD : GitHub Actions, GitLab CI, Jenkins, Bitbucket
• Observabilit : Datadog, Prometheus, Grafana, ELK, OpenTelemetry
• Scurit : Vault, KMS, SAST/DAST, Trivy, SonarQube
• Conteneurs : Docker, Kubernetes

Indicateurs de succs (3 6 mois)

• Rduction des frictions de dploiement et amlioration de la fiabilit des releases
• Tableaux de bord et alertes clairs, meilleure exprience on-call
• Amlioration mesurable de la fiabilit (respect des SLO) et du MTTR
• Renforcement de la posture de scurit (IAM, gestion des secrets, vulnrabilits)
• Processus daudit simplifis avec des preuves et historiques facilement accessibles

____________________________________________________________________________________________

About us

We are a global fintech company that specializes in catering to underserved and underbanked consumers. Our organization has a passion for helping people financially through our technology solutions which has allowed us to serve millions of consumers globally.

Headquartered in Montreal, Canada with offices in the United States and Latin America, we encourage personal and professional growth in equal measures. To create the best possible experience for our employees, we continuously invest in our teams and provide opportunities for growth.

Were looking for a mid-level DevOps Engineer to help build and operate secure, reliable, and scalable cloud infrastructure for a fintech platform. Youll partner closely with software engineering, security, and compliance to improve deployment velocity, strengthen production resilience, and meet the operational expectations of regulated financial services (availability, auditability, data protection, and change control).

This is a hands-on role: youll ship infrastructure-as-code, improve CI/CD, support incident response, and continuously optimize our production environment.

What youll do

Platform reliability & operations

Operate and improve production systems that support financial workflows (payments, lending, trading, identity/KYC, reporting, etc.).
Own and improve availability, latency, and error-rate targets through SLOs/SLIs and proactive reliability work.
Participate in an on-call rotation, lead incident triage, and drive post-incident reviews (RCA) and remediation items.
Implement robust backup, disaster recovery, and business continuity practices (define and test RTO/RPO).
Infrastructure as Code & cloud engineering

Design, deploy, and maintain cloud infrastructure using Infrastructure as Code (Terraform/CloudFormation/Pulumi).
Build scalable and secure environments across dev/stage/prod, enabling consistent and repeatable deployments.
Improve platform scalability and cost efficiency (rightsizing, autoscaling, reserved instances/savings plans, storage lifecycle policies).
CI/CD and developer enablement

Build and maintain CI/CD pipelines to support safe, repeatable releases (Jenkins/BitBucket).
Improve release quality with progressive delivery patterns (blue/green, canary, feature flags) where appropriate.
Create developer tooling and automation that reduces manual work and increases delivery confidence.
Security, compliance & audit readiness

Embed security best practices into the platform: least privilege IAM, network segmentation, hardened images, and vulnerability remediation.
Implement and manage secrets management (Vault, AWS Secrets Manager, GCP Secret Manager) and key management (KMS/HSM concepts).
Support compliance requirements such as SOC 2, PCI DSS (if applicable), and internal controls through logging, evidence collection, and change management.
Maintain strong audit trails: infrastructure changes, access controls, deployment approvals, and production change history.
Observability & performance

Improve monitoring, logging, tracing, and alerting (Prometheus/Grafana/ELK/Open Telemetry).
Tune alerting to reduce noise and improve signal and ensure operational dashboards support on-call readiness.
Build operational runbooks and standard operating procedures for repeatable production support.
Who were looking for

36 years of hands-on experience in DevOps / SRE / Platform Engineering (or equivalent).
Strong experience with at least one major cloud provider preferably GCP.
Hands-on experience with Infrastructure as Code (Terraform preferred).
Experience building and supporting CI/CD pipelines and release automation.
Familiarity with containers and orchestration: Docker and Kubernetes (GKE).
Solid Linux fundamentals, networking basics (DNS, TLS, load balancing), and scripting (Bash/Python).
Strong operational mindset: incident response, postmortems, reliability improvements, and documentation.
Ability to work cross-functionally and communicate clearly with engineers and non-engineering stakeholders.

French and English is required
Nice to have

Experience in regulated environments (SOC 2, PCI, SOX, ISO 27001) and supporting audits/evidence collection.

Knowledge of fintech security patterns: tokenization concepts, encryption at rest/in transit, IAM boundary design, and key rotation.
Experience with service-to-service authentication (mTLS, OIDC/JWT) and policy enforcement (OPA/Gatekeeper).
Exposure to event-driven systems (Kafka/SNS/SQS/PubSub) and high-throughput data pipelines.
Experience with database operations (Postgres/MySQL) including replication, failover, performance monitoring.
Familiarity with risk controls: separation of duties, environment access controls, deployment approvals, and change windows.
Tech stack

IaC: Terraform (+ Terragrunt), Helm
CI/CD: GitHub Actions / GitLab CI / Jenkins /Bit bucket
Observability: Datadog / Prometheus + Grafana / ELK / OpenTelemetry
Security: Vault, KMS, SAST/DAST, container scanning (Trivy), dependency scanning, sonar cube
Containers: Docker, Kubernetes
What success looks like (first 36 months)

Reduced deployment friction and improved release safety (fewer rollbacks, faster recovery).
Clear, actionable dashboards and alerts; improved on-call experience (lower noise, better runbooks).
Measurable improvements in reliability (SLO adherence) and incident response (MTTR).
Stronger security posture (tightened IAM, improved secrets handling, faster vulnerability remediation).
Audit-ready evidence and change history are easier to produce and validate.