Tech Lead - DevOps

About Rupeek:
Rupeek, established in 2015 and headquartered in Bangalore, stands as India's leading asset-backed digital lending fintech platform. Committed to making credit accessible to Indians in a fair and convenient manner, Rupeek pioneers innovative financial products focused on monetizing India's $2 trillion gold market. Leveraging state-of-the-art technology and an automated asset-light supply chain, Rupeek is transforming the gold loan disbursal landscape across 40+ cities in India. With a customer base exceeding 5,00,000+, the company's strategic partnerships with top banks and financial institutions underscore its commitment to building gold-backed assets through low-risk, low-touch, and friction-free processes.
Rupeek's impressive journey is supported by key investors such as Sequoia Capital, Accel Partners, Bertelsmann, and GGV Capital. In Apr 2024, Rupeek turned profitable and raised $25 in equity capital from Manipal Group and Elevation Capital to fund its next phase of growth. Join us in redefining the future of finance through innovation, technology, and a commitment to financial inclusivity.
About the Role:
Rupeek's infrastructure spans RFPL and RCPL — customer-facing apps, lending core, ledger systems, and operations — running on AWS with EKS as the primary compute plane. DevOps is a horizontal function serving all engineering pods, and also owns the interface with Infosec on audits, RBI/DPDP compliance evidence, and incident response.
The Tech lead Devops is the senior-most engineer in the team and its technical lead. This person sets standards, mentors the team, and owns infrastructure vision.
Job Title: Tech Lead Devops
Experience: 6 to 8 years of experience
Location: Bangalore
Key Responsibilities:
Senior-most DevOps engineer; technical lead for the DevOps team
Sets vision and direction for Rupeek's infrastructure — cloud architecture, Kubernetes platform, CI/CD, observability, cost, and reliability.
Owns infrastructure-as-code standards — Terraform module design, state management, drift detection, and review process.
Owns the production readiness bar — every service that ships production traffic clears standards this person defines.
Partners with Infosec to pass audits (RBI IT Outsourcing, SOC 2, ISO 27001, DPDP) and due diligence (lender, investor, partner).
Leads incident response from the infra side — the person on the call when the blast radius is large.
Mentors junior and mid DevOps engineers; runs design and code reviews for the team.
Represents DevOps in architecture reviews for major product initiatives.
Sets AI-fluency standards for the DevOps team — tooling, prompt patterns, safe use of AI in production workflows.
Peer to senior SDE IIIs across product pods.
Must have skills:
Cloud & Kubernetes
Deep AWS — VPC design, IAM, EKS, RDS/Aurora, S3, KMS, cost architecture, multi-AZ / multi-region trade-offs.
EKS operations — node group strategy, cluster upgrades, addons lifecycle, admission controllers, network policies, PSA.
Comfortable debugging at layers others can't — kernel/OS, container runtime, CNI, etcd, control plane.
Infrastructure as Code
Terraform mastery — module design, remote state, workspaces vs directories, provider version discipline, testing (terratest, tflint, checkov).
Has designed and enforced IaC standards across a team — including PR review process, plan/apply gating, and drift detection.
Opinion on Terraform vs Pulumi vs CDK, and why they picked what they picked.
CI/CD & SDLC
Has built and operated production CI/CD pipelines with strong controls — immutable artifact tagging, signed artifacts (cosign or equivalent), promotion gates, per-environment approvals.
Familiar with supply chain security — SLSA levels, SBOMs, dependency pinning, supply chain (npm/PyPI) incident response.
Comfortable with GitOps patterns
Observability & Reliability
Deep in Prometheus, Grafana, Alertmanager, and PagerDuty — from scrape config to SLO-driven alerting
Has designed on-call rotations, runbooks, and blameless post-mortem culture.
Comfortable with distributed tracing (OpenTelemetry, Jaeger, or similar) and structured logging.
Security & Compliance
Has partnered with Infosec through at least one major audit (SOC 2, ISO 27001, RBI, or equivalent).
Strong on secrets management (Vault, AWS Secrets Manager, KMS), workload identity (IRSA), and least-privilege IAM
Understands regulated-industry constraints — data localization, PII handling, audit trails, evidence collection.
Has responded to real security incidents — DDoS, credential leaks, supply chain compromise, or similar.
Scripting & Automation
Strong in Python or Go — writes production-quality automation, not just glue scripts.
Bash fluency; comfortable with the standard Linux toolchain.
AI Fluency
Uses AI tools (Claude Code, Cursor, or similar) as part of daily workflow.
Has opinions on where AI helps and where it hurts in the DevOps SDLC.
Can articulate what "AI-safe" infrastructure change management looks like.
Leadership
Has mentored junior and mid engineers; visible track record of growing people.
Writes well — runbooks, RFCs, post-mortems
Insists on high standards; can hold the line on production readiness without becoming a bottleneck.
Comfortable pushing back on product timelines when infra risk is real.
Persona:
Engineering degree in Computer Science or related
Has held a "senior-most DevOps / SRE / Platform" role at least once before, in a company where the infra actually mattered.
Fintech, payments, or regulated-industry background strongly preferred.
Recent hands-on work — has written Terraform and touched a cluster in the last month.
Comfortable being the escalation point at 2am.

Work arrangement
No