Senior DevOps Engineer (AWS)

Blokotech

Location: Malta/hybrid. Applicants must already be based in Malta.

Relocation is not offered.

Reports to: CTO and CEO. The CEO sets business priorities; the CTO provides technical direction.

About Blokotech

Blokotech develops technology platforms for online casino and sportsbook operators. Our data supports both the operators using our platform and the management, commercial and financial decisions behind our own business.

We are looking for a Senior DevOps / SRE Engineer to take ownership of our AWS cloud platform end-to-end. You will design, build and operate the infrastructure that powers our iGaming products: highly available, autoscaled, secure, observable and cost-efficient. You will work across compute, networking, caching, CI/CD, observability and security, partnering with Development and DBA teams to deliver a platform that supports continuous deployment and absorbs traffic peaks without degradation.

This is a hands-on senior role: you will write Terraform, debug production incidents, optimise ElastiCache and Auto Scaling configurations, harden Kubernetes clusters and continuously raise the bar on reliability and developer experience.

Responsibilities

• Design and operate the AWS multi-account landing zone (AWS Organizations, Control Tower, SCPs, account vending).
• Build and maintain Infrastructure as Code using Terraform (modules, remote state on S3 + DynamoDB locking, workspaces/environments).
• Operate and scale our compute platform on EKS (Kubernetes), ECS Fargate and EC2 where appropriate; manage node groups, Karpenter / Cluster Autoscaler, HPA/VPA.
• Implement and tune Auto Scaling at every layer: EC2 ASGs, target tracking and step scaling policies, ECS service autoscaling, Kubernetes HPA/Karpenter, Aurora/RDS read replicas autoscaling, Lambda concurrency.
• Own the caching layer on Amazon ElastiCache (Redis / Valkey, and Memcached when relevant): cluster topology, replication, failover, eviction policies, sharding, sizing, performance and cost tuning.
• Design and operate networking: VPC, subnets, NAT, Transit Gateway, PrivateLink, Route 53, ACM, CloudFront, WAF, Shield, ALB/NLB, API Gateway.
• Build and maintain robust CI/CD pipelines (GitHub Actions / GitLab CI / Jenkins / ArgoCD) with automated testing, security scanning, canary and blue/green deployments.
• Implement GitOps workflows (ArgoCD or Flux) for Kubernetes applications and platform components.
• Drive observability: centralised logging (CloudWatch Logs, OpenSearch, Loki), metrics (Prometheus, CloudWatch, Grafana), tracing (OpenTelemetry, X-Ray, Tempo, Datadog APM), SLOs and error budgets.
• Define and run incident response: on-call rotation, alerting (PagerDuty/Opsgenie), runbooks, blameless post-mortems, reliability OKRs.
• Security and compliance: IAM (least privilege, roles, SSO via IAM Identity Center), KMS, Secrets Manager, GuardDuty, Security Hub, Inspector, image scanning (Trivy, ECR scanning), CIS benchmarks, secret rotation, network segmentation, WAF rules and DDoS protection – aligned with iGaming regulatory frameworks.
• Cost optimisation: Cost Explorer, Compute Optimizer, Savings Plans, Spot strategy, FinOps practices and reporting.
• Performance engineering for peak iGaming events (live sports, jackpots, marketing pushes): capacity planning, load testing, autoscaling validation, cache warm-up strategies.
• Continuously improve developer experience: golden paths, internal developer platforms, paved-road templates, self-service environments.

Requirements

• 7+ years in DevOps / SRE / Cloud Engineering, with at least 5 years deep on AWS in production.
• Expert in Amazon ElastiCache for Redis: cluster mode, replication, failover, eviction, persistence options, parameter groups, latency tuning, monitoring.
• Expert in AWS Auto Scaling across EC2 ASGs, ECS, Kubernetes (HPA, Karpenter / Cluster Autoscaler) and serverless.
• Strong production experience with Kubernetes (EKS preferred): networking (CNI), ingress controllers, service mesh basics, RBAC, secrets management, Helm.
• Strong Terraform skills: writing reusable modules, managing state safely, code review of IaC.
• Solid scripting in Bash and Python (Go is a plus).
• Hands-on experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, ArgoCD).
• Deep AWS networking: VPC, subnets, routing, security groups, NACLs, Transit Gateway, VPC endpoints, Route 53, ACM, CloudFront.
• Production experience with observability stacks (Prometheus + Grafana, Datadog, New Relic, OpenSearch, ELK) and distributed tracing.
• Strong understanding of Linux internals, systemd, networking, performance tools (top, htop, iostat, ss, tcpdump).
• Experience with load and chaos testing tools (k6, Locust, Gatling, AWS FIS, Chaos Mesh).
• Excellent English, comfortable in a distributed senior team and able to write clear technical documentation.

Nice to have

• Direct iGaming / online gaming / sportsbook / PSP experience – strongly preferred.
• AWS certifications: Solutions Architect – Professional, DevOps Engineer – Professional, Security – Specialty.
• Experience with service meshes (Istio, Linkerd, AWS App Mesh).
• Event-driven architectures: Kafka / MSK, Kinesis, SNS/SQS, EventBridge.
• Edge & anti-abuse stack: CloudFront, AWS WAF, Shield Advanced, bot management.
• Experience implementing FinOps practices at a company-wide level.
• Exposure to multi-region active/active or active/passive architectures.
• Familiarity with regulatory frameworks (MGA, ADM/AAMS, UKGC, Ontario AGCO) and their impact on infrastructure (data residency, audit, segregation).

Profile Skills

• Strong ownership and reliability mindset – you measure success in uptime, MTTR and developer velocity, not tickets closed.
• Pragmatic engineer – knows when to build vs. buy, when to automate vs. document.
• Excellent communicator across engineering, product and business stakeholders.
• Comfortable working autonomously in a remote, distributed environment.

Benefits

• Competitive package: gross salary aligned with senior market benchmarks (Malta / Italy / EU)
• Performance Bonus
• Private health insurance
• 24 days paid leave + national holidays and 10 days of Sick Leave

How to apply

Send your CV (PDF) to careers@blokotech.com, mentioning the role in the subject line.

Blokotech is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.