Need devops engineer to maintain CI/CD

About the Role We're launching a new web platform and mobile application and need a DevOps Engineer to own the entire CI/CD pipeline, cloud infrastructure, and deployment lifecycle. You'll be the single point of accountability for making sure code moves from repository to production safely, quickly, and without downtime. Key Responsibilities Maintain CI/CD pipelines (already built) for both the web application and mobile application across staging and production environments Ensure simultaneous staging and production deployments for the mobile app, with clear promotion gates and rollback procedures Implement automated testing, linting, and security scanning in every pipeline stage Create and document standard operating procedures for releases, hotfixes, and rollbacks Infrastructure & Cloud Management Administer and secure accounts across: GitHub (repos, Actions, secrets, branch protection, access control) AWS (compute, storage, networking, IAM, cost monitoring) DigitalOcean (Droplets, managed databases, load balancers) Cloudflare (DNS, CDN, WAF, DDoS protection, SSL/TLS) Vercel (frontend deployments, preview environments, edge config) Postmark (transactional email delivery, domain authentication, monitoring) Right-size and optimize server resources across all environments; set up auto-scaling where appropriate Maintain infrastructure-as-code (Terraform, Pulumi, or CloudFormation) for reproducible environments Mobile App Deployment Architect a seamless mobile app update experience for users: Over-the-air (OTA) update strategy if applicable (e.g., Expo Updates, CodePush) Phased rollouts via App Store Connect and Google Play Console Version compatibility management between mobile clients and backend APIs Forced-update and deprecation policies with user-friendly messaging Manage build signing certificates, provisioning profiles, and app store credentials securely Monitoring, Reliability & Security Implement uptime monitoring, alerting, and log aggregation (e.g., Datadog, New Relic, Grafana, or CloudWatch) Define and track SLAs/SLOs for web and mobile availability Manage secrets, environment variables, and credential rotation Enforce security best practices: least-privilege access, network segmentation, dependency scanning, and regular audits Documentation & Collaboration Write clear runbooks for on-call scenarios, incident response, and environment setup Work closely with engineering, QA, and product teams to define release schedules and deployment windows Maintain a changelog and deployment log for auditability Requirements 3+ years of hands-on DevOps or SRE experience in production environments Proven experience building CI/CD pipelines for both web and mobile applications Deep familiarity with GitHub Actions and at least one major cloud provider (AWS preferred) Experience with mobile app store release processes (iOS App Store, Google Play) including phased rollouts and OTA updates Strong Linux system administration and containerization skills (Docker, Kubernetes a plus) Proficiency with infrastructure-as-code tools and scripting (Bash, Python, or Go) Solid understanding of networking, DNS, SSL/TLS, CDN configuration, and web security Experience managing transactional email infrastructure and deliverability (Postmark, SendGrid, or similar) Nice to Have Experience with Expo, React Native, or Flutter build and deployment workflows Certifications: AWS Solutions Architect, Certified Kubernetes Administrator (CKA), or similar Experience with Terraform or Pulumi for infrastructure automation Background in setting up cost-monitoring and FinOps practices across multi-cloud environments Familiarity with feature-flag systems (LaunchDarkly, Unleash, etc.) for safer mobile rollouts