Platform and Security Operations Engineer

Job description

ABOUT FIRST CRYPTO EXCHANGE LLC

First Crypto Exchange LLC (FCE) is a digital asset trading platform enabling individuals and institutions to buy, sell, and manage cryptocurrencies securely and efficiently. FCE operates under a VARA license in Dubai, UAE.

FCE is building a trusted, well-governed exchange with strong market infrastructure, financial controls, regulatory compliance, and operational transparency.

JOB OVERVIEW

We are looking for a Platform & Security Operations Engineer to take ownership of FCE’s production infrastructure, Kubernetes environments, infrastructure automation, security monitoring, and incident response.

You will work closely with the CTO and a small, strong engineering team, with a high level of autonomy and direct influence on infrastructure and security architecture.

KEY RESPONSIBILITIES

- Own production infrastructure and Kubernetes clusters.

- Develop infrastructure using Terraform/Terragrunt, including network, data, and identity.

- Support and develop GitOps processes.

- Build and maintain security monitoring, including alerts, detection rules, and false-positive tuning.

- Develop incident runbooks and launch an on-call process.

- Respond to production and security incidents and conduct postmortems.

- Develop CI/CD and software supply-chain security.

- Set up scanning of dependencies and container images, as well as artifact signing.

- Formalize infrastructure standards, procedures, and processes.

- Prepare technical evidence for external audits.

QUALIFICATIONS & SKILLS

- Strong production experience with Kubernetes, including upgrades, workload identity, network policies, autoscaling, and incident investigation.

- Experience with Terraform and Terragrunt, Atlantis, or similar tools.

- Practical experience with GitOps, using Flux, Argo CD, or similar tools.

- Deep knowledge of AWS, including VPC, multi-AZ, KMS, OIDC federation, and DNS.

- Experience with external audits, such as ISO 27001, SOC 2, PCI DSS, HIPAA, or equivalent.

- Practical experience with security monitoring and detection engineering, including alerting, rule tuning, and reducing false positives.

- Experience working with production systems where failures or data leaks can have significant financial and regulatory consequences.

- Experience with AI development tools and understanding of the limitations of AI-generated code.

- English - C1 working proficiency; Russian - international team language.

WORKING CONDITIONS & BENEFITS

- Employment: Full-time, permanent contract

- Location: Dubai, UAE

- Work format: Hybrid, with regular presence in the office

- Reporting to: CTO

- Team: Small, strong engineering team

- Infrastructure: Modern cloud-native environment with no legacy

- Responsibility: High level of autonomy and influence on architectural decisions

- Compensation: Competitive compensation based on experience

- Vacation: 20 working days per year

- Sick Leave: 10 days per year

- Days Off: 5 days per year

- Public Holidays: 8-10 days per year, depending on the holiday calendar of different countries