2 hours ago
Responsibilities
- Design and evolve GCP cloud architecture, including networking, interconnects, IAM, and high-availability topology, using Terraform.
- Build and own CI/CD pipelines for infrastructure planning, review, testing, policy enforcement, drift detection, and progressive rollout.
- Develop self-service platform capabilities and golden paths that enable engineers to provision infrastructure without hand-offs.
- Strengthen metrics, logging, tracing, and alerting through the Prometheus, Thanos, Grafana, Loki, Tempo, and Alertmanager observability stack.
- Operate GKE clusters, Helm-packaged workloads, RabbitMQ and IBM MQ message brokers, and data stores in production.
- Participate in follow-the-sun on-call from APAC hours, triage alerts, lead incident debugging and escalation, and drive post-mortem actions.
- Embed SRE practices including SLIs, SLOs, error budgets, and capacity planning into infrastructure operations.
Requirements
- At least 5 years of experience in DevOps, platform/infrastructure, or SRE roles operating large-scale, highly available, high-performance production systems.
- Deep hands-on experience designing Google Cloud Platform architecture, including landing zones, networking, IAM, and high-availability topology.
- Strong Terraform and Infrastructure-as-Code experience across multiple environments, with GitOps and least-privilege practices.
- Experience building CI/CD pipelines for infrastructure-as-code with automated plan/apply, code review, policy-as-code, drift detection, and safe rollout.
- Significant production experience with Kubernetes, preferably GKE, and Helm-based workload deployment.
- Strong cloud and L3/L4-L7 networking fundamentals, including VPCs, routing, load balancing, DNS, TLS, and interconnects.
- Hands-on experience with Prometheus, Thanos, Grafana, Loki, Tempo, and Alertmanager for metrics, logs, traces, and alerting.
- Operator-level familiarity with PostgreSQL and message brokers such as RabbitMQ or RedPanda.
- Understanding of SRE practices, platform-as-a-product principles, incident management, capacity planning, and error budgets.
- Willingness to participate in a follow-the-sun on-call rotation from APAC hours and work effectively in a distributed, async-first environment.
- Preferred experience includes OPA/Conftest, Checkov, tflint, Atlantis, Terraform state and module management, Backstage, Tilt, Alloy, Rootly, Go, Linux, Debian, Ubuntu, Docker, containerd, security and compliance, SOC 2, secrets management, audit logging, and regulated fintech or low-latency systems.
Benefits
- Competitive salary and stock options.
- Health benefits.
- One-time USD $500 new-hire home-office setup allowance.
- USD $150 monthly stipend through a Brex Card.
- Globally distributed, async-first work environment with a follow-the-sun on-call model from APAC hours.
Tech Stack
Categories
About Alpaca
Alpaca is a US-headquartered, self-clearing broker-dealer and a global leader in brokerage infrastructure APIs providing access to stocks, ETFs, options, fixed income, and crypto. Alpaca delivers embeddable finance solutions for tokenization, fully paid securities lending, high-yield cash, 24/5 trading, Shariah-compliant investing, and more. Today, Alpaca powers over 9 million brokerage accounts across hundreds of fintechs and institutions in 40+ countries, with over $320M in funding from top investors including Drive Capital, Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Derayah Financial, Horizons Ventures, Unbound, SBI Group, Elefund, and Y Combinator.