Senior DevOps Engineer
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Fig is a Canadian fintech making personal lending simpler, faster, and more accessible for Canadians. We offer fully digital personal loans, helping customers apply in minutes and receive decisions quickly, without paperwork, branch visits, or long delays .
Since launching in 2023, we’ve grown quickly and earned recognition including Consumer Lender of the Year and FinTech Startup of the Year. We’re proud to be consistently ranked among Canada’s Best Workplaces, with a 4.8/5 Trustpilot rating from our customers.
Supported by Fairstone Bank of Canada and Ontario Teachers’ Pension Plan, we combine deep lending expertise with the agility of a startup.
About The Role
Fig is expanding beyond lending and building a new generation of digital banking products. We're hiring a Senior Devops Engineer, reporting to the VP of Engineering, to build and operate the cloud platform our products run on.
As our first dedicated infrastructure engineer, you'll own our AWS environment end-to-end: account structure, infrastructure as code, CI/CD, networking, observability, and security controls. You're a hands-on builder who's comfortable inheriting an existing setup, improving it, and making it easy for product engineers to ship safely.
Today our platform runs on AWS Control Tower, with containerized services on ECS and RDS for PostgreSQL, all managed in Terraform and deployed through GitHub Actions. We're exploring the opportunities AI can bring to the platform, and want someone who'll help us pursue them with the right controls in place.
We're a small team, so breadth matters. You'll work closely with our backend engineers, our CISO, and our Risk and Compliance teams, and help set the standards and paved roads other engineers build on as we grow.
What You’ll Do
- Run and evolve our multi-account AWS environment on Control Tower, from account structure and access management to preventive and detective controls.
- Manage our infrastructure in Terraform, with reusable modules and drift detection.
- Make infrastructure changes safe and auditable through policy-as-code, automated plan checks, and approval gates.
- Build and improve CI/CD on GitHub Actions so engineers can ship to ECS frequently and safely, with approvals and fast rollbacks.
- Design and run our networking, including secure connectivity to banking partners and third-party providers.
- Implement and operate security controls with our CISO, from secrets and encryption to logging and threat detection, and produce the evidence partners and auditors need.
- Build reliability into the platform through observability, alerting, backups, and tested disaster recovery for our services and PostgreSQL databases.
- Take part in our on-call rotation as the platform expert, and equip backend engineers to provide cover through runbooks, automation, and clear documentation.
- Raise the bar through sound technical design, thoughtful code review, and mentoring.
- 6+ years in platform, DevOps, SRE, or infrastructure engineering, with deep hands-on experience of multi-account AWS, including networking and access management (Organizations or Control Tower, IAM Identity Center, SCPs).
- Production Terraform experience, including module design, state management, and change workflows.
- Hands-on experience running containerized services on ECS (or a comparable orchestrator) and building CI/CD pipelines, ideally with GitHub Actions.
- Experience keeping production systems reliable, including observability, on-call, and incident response, and operating PostgreSQL on RDS through backups, upgrades, and recovery.
- Experience using AI tools in operations work such as incident investigation, with the judgment to validate their output and keep their access tightly scoped.
- The ability to make pragmatic technical decisions and communicate trade-offs clearly.
- Make an impact: Rare opportunity to join early and help shape the future direction of a fast-growing fintech company.
- High ownership: Take on a high-impact role with direct exposure to senior leadership and company-building initiatives.
- Strong culture: Work in a team that values impact, accountability, curiosity, and collaboration.
- Hybrid work environment: Balance of remote and in-office work (currently one day a week in Toronto), while maintaining strong collaboration.
- Competitive compensation: Expected base salary range between $150,000 - $170,000, plus the opportunity to earn an annual incentive bonus tied to performance
- Retirement savings program: Employer matching to support your long-term financial goals.
- Comprehensive benefits: Medical, dental, and vision group insurance, as well as health and wellness spending accounts.
- Time off: Generous vacation and wellness time to support rest and recharge.
- Parental support: Parental leave top-up to support your growing family.
- Growth and Development: Continuing education stipend to support your professional development.
Fig is an equal opportunity employer committed to building a diverse and inclusive team.
We welcome applications from people of all backgrounds and do not discriminate based on race, religion, culture, sexual orientation, gender identity, or disability.
We’re focused on creating an environment where everyone feels respected, supported, and able to bring their full selves to work. We also provide accommodations throughout the recruitment process. If you need support, just let us know.
Next steps
We appreciate your interest in joining Fig. Our team will review applications and contact candidates selected to move forward in the process.
AI disclosure
We may use AI tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but do not replace human judgment, and all hiring decisions are ultimately made by people.
If you have questions about how your information is handled, feel free to reach out to us.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
More about this job
Responsibilities
Own and evolve Fig’s AWS platform, including its multi-account structure, Terraform infrastructure, CI/CD pipelines, networking, security controls, and reliability practices. Establish safe, auditable engineering standards and support product teams through operational guidance, on-call expertise, documentation, and mentoring.
Requirements
Requires 6+ years of platform, DevOps, SRE, or infrastructure engineering experience, with hands-on expertise in multi-account AWS, Terraform, containerized services, and CI/CD. Candidates should also have production reliability and PostgreSQL operations experience, sound technical judgment, clear communication, and experience using AI tools responsibly in operations.
Skills
- AWS Multi-Account Management
- AWS Control Tower
- Terraform
- Infrastructure as Code
- CI/CD
- GitHub Actions
- Amazon ECS
- AWS Networking
- IAM Identity Center
- Service Control Policies
- PostgreSQL on RDS
- Observability
- Incident Response
- Disaster Recovery
- Policy as Code
- Cloud Security
Benefits
- Performance-Based Annual Incentive Bonus
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Health and Wellness Spending Accounts
- Vacation and Wellness Time
- Parental Leave Top-Up
- Continuing Education Stipend
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Software
- Engineering
- Security & Safety
- Finance & Accounting
Keywords
- AWS
- AWS Control Tower
- AWS Organizations
- IAM Identity Center
- Service Control Policies
- Terraform
- Infrastructure as Code
- GitHub Actions
- CI/CD
- Amazon ECS
- Amazon RDS
- PostgreSQL
- Networking
- Access Management
- Policy as Code
- Drift Detection
- Secrets Management
- Encryption
- Logging
- Threat Detection
- Observability
- Alerting
- Backups
- Disaster Recovery
- On-Call
- Incident Response
- AI Operations
- Fintech
- Digital Banking
- Risk and Compliance