Backend & DevOps Engineer (Mid-Senior)

About the job

Here’s the whole job in one sentence: take a product need and turn it into a tested Python Lambda behind a Terraform-managed API Gateway route, shipped through a pipeline you maintain, into an AWS account you understand. No separate infra team, no hand-off halfway. If you’ve ever waited a week for someone else to provision what your code needed, you’ll see why we set it up this way.

Go3 is the largest OTT platform in the Baltics - bigger than Netflix across Lithuania, Latvia, and Estonia combined. Several of our web products turn content into real transactions - plan selection, checkout, payments, identity verification, and e-signature - each wired into external billing, identity, and e-signing platforms.

That’s where it gets interesting. Vendor APIs fail in creative ways, sensitive customer data has to be protected properly, and many small, independent functions need to behave as one consistent system across dev, staging, and production.

What you will do

• Build and maintain small, single-purpose Python Lambda functions for subscription, payment, identity-verification, and document-signing flows - each with its own tests.
• Define the REST API contract the frontend team builds against, with JWT/JWKS-verified auth enforced at the API Gateway layer.
• Integrate vendor APIs (billing, OTT identity, eID, e-signing) and own their auth, error handling, and retry behavior.
• Own the Terraform behind your products - API Gateway, Lambda, data store, KMS, CDN, storage - and promote changes safely through environments.
• Maintain the shared Terragrunt platform across AWS accounts, the OIDC trust between GitHub Actions and AWS, and onboarding of new services.
• Protect customer data: encryption at rest and least-privilege IAM for every function.
• Run what you build - monitor, debug, and fix production issues, and evolve the shared libraries and error conventions every function relies on.

What we expect

We care far more about how you operate than which AWS services you’ve memorised. Our vendors, our account structure, the streaming business - learnable on the job. Not learnable: treating a vendor’s failure mode as your problem, not theirs, writing the test before calling it done, and saying plainly when an infrastructure change isn’t safe to ship.

I n practice:

• Production Python experience, ideally with AWS Lambda / serverless.
• Designed REST APIs consumed by a separate frontend team.
• Integrated third-party APIs and handled their failure modes (timeouts, retries, idempotency).
• Provisioned real AWS infrastructure with Terraform - Lambda, API Gateway, IAM, KMS, S3/CloudFront, a managed data store.
• Owned CI/CD pipelines (GitHub Actions or equivalent), including OIDC or similar cloud authentication.
• Worked across multiple AWS accounts or environments.
• Unit testing as default practice, and working knowledge of JWT auth and encryption at rest.

Mid or senior?

This is one opening that can be filled at either level. At mid-level, you own a function and its infrastructure end-to-end, with senior support on ambiguous vendor or multi-account decisions. At senior level, you set backend and infrastructure direction, lead a full vendor integration or platform change, and mentor around it. The salary band below covers both.

Nice to have

: Terragrunt or multi-account AWS organisations, DynamoDB or similar NoSQL modelling, subscription billing, eID / e-signature providers, shared library design across services, media/OTT, AI-assisted development workflows.

Where you’ll work

Tallinn, hybrid - preferred. Vilnius or Riga (hybrid) also work, and for the right person we’ll consider remote within the Baltics or the EU.

We offer

• An international team and mindset.
• Internal/external events, online trainings, conferences.
• Free access to Go3 content.
• Attractive health insurance package (after the probation period).
• Salary based on your competencies and experience, from 4000 to 5800 EUR gross.

Thank you for applying! Your CV will be carefully reviewed by our team. If we decide to move forward, one of our specialists will contact you to explain the next steps.

By applying, you agree to let AS Go3 Baltics use your personal information for this job application.