DevOps Engineer

About OpenNet

OpenNet is a fast-growing technology company with products reaching 20+ countries worldwide.

We bring together talented people who enjoy solving challenges, moving fast, and learning from one another. We value collaboration, flexibility, growth, and work-life balance — creating an environment where people can do great work and enjoy the journey along the way.

About the role

You will own the security posture of a high-traffic, multi-country consumer platform from the internet edge inward. This is a hands-on engineering role, not an advisory one: detections, guardrails, and access controls all ship as code through the same review-and-deploy path as everything else.

Alongside that, you'll pick up day-to-day DevOps work

CI/CD pipelines, infrastructure-as-code, and production deployments.

The scale you'd be working at

Dozens of EKS clusters and roughly 2,600+ nodes. Infrastructure partitioned per country across multiple African markets, each with its own regulatory surface. An in-house SIEM and bunch of security related detections.

If You

Are a self-driven DevOps Engineer with proven experience in large-scale micro-service systems hosted on AWS. Have a deep understanding of cloud architecture, AWS technologies and cloud security best practices. Follow the latest industry trends and are passionate about cloud computing and cybersecurity for large-scale systems

Key Responsibilities

• Platform and Delivery Work in a team of DevOps and DBA professionals.
• Improve existing infrastructure and CI/CD procedure.
• Holistically improve all aspects of our infrastructure: reducing cost, improving build and deployment times, streamlining environment provisioning, lowering load times, and incorporating new techniques and technologies.
• Take ownership of our cloud operations, including multi-account governance which account a resource belongs in, and how accounts reach each other safely.
• Help reconfigure existing architecture to allow rapid deployment to new countries.

Edge & network security

Own the edge protection layer.

Own network segmentation and exposure control

what is reachable from the internet, from the VPN, and from inside the cluster.

Own DNS and egress control

resolver query logging and DNS firewalling to detect and block command-and-control and data-exfiltration paths.

Detection & response

Own cloud security posture management, plus runtime and host detection. Detection engineering and security monitoring design. Security incident response. Contribute to the team's incident reporting cadence. Identity,

Access & secrets

Drive least-privilege across AWS IAM, SSO permission sets and Kubernetes RBAC Contribute to our zero-trust internal-access program. Own the secrets lifecycle.

Vulnerability & compliance

Own vulnerability and patch management. Liaise with external security agencies for annual audits, and run our own internal security sweeps. Treat compliance and audit as engineering work.

Our Stack

• Application Backend Framework: Spring Boot (Java Config + Embedded Tomcat)
• Frontend Framework: VueJS
• Micro Service Framework: Spring Cloud (Netflix Eureka + Ribbon + Feign)
• Distributed Scheduling: Elastic Job

We Care More About How You Work and Live

Some things are simply essential

MacBook Pro, large monitor, Sony noise-cancelling headphones, snacks, coffee and fresh fruit.

Some rewards are simply standard

holiday bonuses, , quarterly performance bonuses, and referral bonuses.

But what matters even more to us

• Flexible work hours & hybrid work
• Annual health check-ups, gym subsidy & monthly massages
• A nap room — because proper rest matters
• Learning & development allowance
• Team lunches, employee clubs & activities
• 12 weeks maternity leave & 14 days prenatal and paternity leave
• Annual Company Retreat — from Dubai and Phuket to Bali, Vietnam and Cebu
• Fully covered employee portion of Labor & National Health Insurance
• Enterprise AI tools, including ChatGPT

Great work matters. So does having a life outside of it. If that sounds like your kind of workplace, we’d love to meet you.