DevOps Engineer

DevOps Engineer

Hybrid in Tallinn or remote within the EU

Cachet builds the insurance infrastructure behind Europe’s platform economy. Our small engineering team works across product, data and AI. An external partner has run our infrastructure until now. With ISO 27001 certification underway, we’re bringing that work in-house, and we’re hiring our first DevOps Engineer to own it.

The role

You’ll own the AWS infrastructure our platform runs on. The foundations work: dev, staging and production are stable, and engineers deploy on their own. What’s been missing is someone to set direction. You’ll keep the setup current, secure and observable, and lead work on faster deploys, a more robust platform, and easier maintenance as we grow.

The stakes are real. We process around 100 GB of external data a month for major B2B clients, plus our own data and logs, and some services need to run around the clock. You’ll report to the CTO and have a real say in how the platform evolves.

Your first three months: a planned handover:

• Take over from our partner. Map the infrastructure, document it in runbooks, assess what works and what doesn’t, and build an action plan.
• Fix security and compliance findings from our ISO 27001 internal audit and Vanta tests, covering IAM, logging, encryption and network hardening.
• Bring monitoring in-house. Replace our reliance on AWS-native tooling with monitoring and alerting Cachet owns. The goal is to catch problems before our partners do, and the setup also serves as ISO 27001 evidence.
• Make recovery real. Design and test backup and restore for RDS and key services, and turn it into a repeatable recovery process.

Ongoing:

• Run and improve our EKS clusters and Helm deployments, and keep Kubernetes and service versions up to date.
• Improve our Terraform codebase and CI/CD pipelines so deploys are faster and safer.
• Manage cloud costs, right-size resources, and bring recommendations to leadership.
• Help us achieve ISO 27001, then maintain controls and evidence for the annual audit.
• Support the product engineering, data and AI teams, and set infrastructure standards they can build on.
• Own infrastructure incidents and write short, blameless reviews.

Our stack: AWS · EKS + Helm · ECS · Terraform · Bitbucket Pipelines · PostgreSQL (RDS) · Apache Airflow · Grafana · Vanta. Our apps are built with Python, Node.js, GraphQL and Angular.

What you bring:

• You’ve owned production cloud infrastructure end to end, ideally on AWS, and can walk us through the decisions you made.
• Hands-on Kubernetes experience, ideally EKS, including upgrades, networking, scaling and troubleshooting.
• Strong infrastructure as code, ideally Terraform (CloudFormation or Pulumi also count), including refactoring code you didn’t write.
• Hands-on security fundamentals: least-privilege IAM, secrets management, network hardening and logging.
• Experience designing monitoring and alerting for high-availability systems.
• Start-up or fast-changing experience. You work independently, prioritise your own backlog, and write things down.
• Fluent English.

Good to know:

• You won’t be on your own. You’ll be our only DevOps engineer, but the team is small and close, and the CTO is your technical sounding board.
• Compliance is part of the job. ISO 27001 is audited every year once we’re certified. As an insurer, we also handle large volumes of personal data under GDPR and strict retention rules.
• You’ll need to prioritise. Three teams will ask for your help, so you’ll sometimes need to say “not now.”
• You make the calls on infrastructure. Larger spend, changes affecting other teams, and anything needing downtime are agreed with the CTO first.

What we offer

• Full ownership of our infrastructure and real influence over how we build.
• Room to grow into data and AI infrastructure.
• Hybrid work in Tallinn or remote within the EU.
• Stebby or Confido health benefit, paid leave for the first school day and Defense Forces exercises, team events and weekly lunches.

We’ll share the salary range with your interview invite.

Hiring process

The process has four interviews:

1. Intro call with HR (45 min)
2. Technical conversation with the CTO (60–90 min, no take-home)
3. Optional meet-the-team session or Tallinn office visit
4. Leadership team (30–45 min)

After the interviews, we’ll check your references and run a background check, since the role has admin access to production systems. We’ll get back to you within 3 working days of each stage.

Cachet is an equal opportunity employer. All employment decisions are based on merit, qualifications and business needs.