Senior DevOps Engineer (all genders)

Sunday Natural is one of Germany’s fastest-growing natural health brands, and our eCommerce platform is growing with it – today it serves 7 million monthly active users , runs on €400k of AWS per year , and supports a development organization of 30+ engineers . Every one of those numbers has moved sharply upward in the last few years, and all of them will keep moving. You would be our first dedicated in-house Senior DevOps Engineer – and the two biggest engineering projects of the next two years are yours to help define and drive: bringing our entire infrastructure under Terraform, and strengthening the scalability, security and compliance posture across our cloud environments. Your role You shape the infrastructure vision. How we run, deploy, monitor and scale is yours to define, propose and defend. You work alongside our two external partners as the in-house technical counterpart – building the architecture and standards together, and bringing the deep platform knowledge back into the company. As the platform grows, taking the technical direction of that group is a natural next step, and one we would actively support. You own our AWS spend – €400k a year that currently has no dedicated owner, including where it goes and how we bring it down. You are the escalation point. When production is at risk, you decide. You report directly to the Head of eCommerce Platforms , with direct access to leadership for the decisions that need it. What you'll own AWS infrastructure – EC2, RDS, Fargate, CloudFront, S3, IAM – plus Cloudflare, DNS and WAF Security & compliance – DevSecOps practices, system audits, patching and access reviews, and GDPR-compliant data handling across every environment Infrastructure as code – taking us from manually managed to fully Terraform-defined Data layer – MySQL under production load: tuning, replication, and backups you have actually restored from Cloud economics – a €350k annual AWS budget with real headroom for optimisation Delivery for 30+ developers – Bitbucket Pipelines, environments, and how fast and safely code reaches production Reliability at 7M MAU – monitoring, logging, alerting and incident response (New Relic, Sentry, CloudWatch, PagerDuty) Your profile 7+ years running production infrastructure , with deep hands-on AWS as the person accountable when it breaks Security-conscious infrastructure operations – DevSecOps practices, system audits and access reviews, comfortable being accountable for GDPR-relevant data handling Infrastructure as code at scale – Terraform as your default way of working, on an estate of comparable size Deep Linux (Debian/Ubuntu) – you can trace a slow system from the kernel up and explain what you found MySQL under real load – slow-query analysis, replication, indexing, tested recovery Ownership of monitoring and incident response at scale – you have built the alerting that catches problems before customers report them, using tooling like New Relic, Datatog, etc. and run the on-call a