Lead SRE / Technology Operations (DevSecOps)

We are looking for a hands-on Lead SRE / Technology Operations professional to own production infrastructure, reliability, security operations and operational controls for a licensed platform. This is a highly technical role requiring strong production experience within a regulated or audited environment.

Key Responsibilities

• Own production infrastructure, cloud operations, monitoring, observability and access controls for a licensed platform.
• Lead incident response, on-call operations, root cause analysis, runbooks, business continuity and disaster recovery testing.
• Manage backup/restore, failover, RTO/RPO and recovery validation.
• Work closely with the outsourced CISO, SOC and security providers on vulnerabilities, penetration testing, remediation and security controls.
• Oversee IAM/PAM, privileged access, secrets management, certificate lifecycle and security hardening.
• Maintain operational controls around wallets, keys, custody, access reviews and reconciliation integrity.
• Own audit and regulatory evidence, ensuring controls are properly documented, dated, assigned and signed off.

Reliability & Incident Management

• Hands-on experience with monitoring and observability, including metrics, logs, traces and alerting.
• Proven experience developing and maintaining on-call processes, runbooks and escalation procedures.
• Experience managing production incidents from detection and triage through restoration, stakeholder communication, RCA and corrective actions.
• Practical experience with backup and restore testing, not just configuration.
• Strong understanding of disaster recovery, RTO/RPO, failover testing and business continuity.

Security Operations

• Experience working as the internal technical counterpart to an outsourced CISO, SOC or managed security provider.
• Experience managing the vulnerability lifecycle, including vulnerability scanning, penetration testing, remediation, retesting and release gating.
• Hands-on knowledge of secrets management, certificate management and infrastructure security hardening.
• Strong understanding of security and change controls within a regulated production environment.

Crypto / Wallet Infrastructure – Advantage

• Experience with wallet operations, hot/warm/cold wallet structures, signer access, key ceremonies, key revocation and access reviews.
• Exposure to custody platforms such as Fireblocks or BitGo, including withdrawal approval policies and multi-signature controls.
• Knowledge of deposit/withdrawal pipelines, blockchain nodes/RPC operations and KYT/blockchain analytics tools.
• Crypto experience is an advantage, not a mandatory requirement. Strong candidates from regulated fintech, banking, exchange or brokerage environments will also be considered.

Governance, Controls & Compliance

• Experience working in environments subject to external audit, regulatory oversight and formal change control.
• Ability to produce and maintain audit/regulatory evidence, control documentation, sign-offs and operational records.
• Experience with vendor oversight, SLAs, audit/access rights and material incident escalation.
• Understanding of reconciliation across ledger, custody and banking feeds, including exception handling.
• ISO 27001, SOC 2 or regulated audit experience is a strong advantage.
• C1-level English required, with the ability to communicate effectively with auditors, SOC teams and senior stakeholders.

Desired Candidate Profile

Technical Requirements

SRE / DevOps / Infrastructure

• 6+ years of hands-on experience in SRE, DevOps, DevSecOps, Platform Engineering or Infrastructure Engineering.
• Strong production-level experience with AWS or equivalent cloud platforms, including compute, networking, VPC, segmentation and capacity planning.
• Proven hands-on experience with Kubernetes in production.
• Strong Infrastructure as Code (IaC) experience using Terraform, Ansible or equivalent.
• Experience designing and managing IAM/PAM, including least privilege, role separation, privileged access workflows and periodic access reviews.
• Strong understanding of CI/CD pipelines, deployment automation and approval/change-control gates.

Important: This is a Hands-On Role!

This position is not a pure management or platform oversight role. The successful candidate must have personally performed the technical work and be comfortable being the person responsible when production issues occur.

Candidates should have:

• Hands-on production ownership rather than primarily supervisory/NOC experience.
• Proven experience operating within a regulated, audited or controlled environment.
• A strong understanding of the relationship between technology, security, reliability and regulatory compliance.
• The discipline to document incidents, controls and evidence as part of normal operational practice.

Candidates seeking a pure platform engineering role without operational, security or compliance responsibilities may not be suitable for this position.