Company Description
OneCredit (One Future Technology Sdn Bhd) is Malaysia's newest Credit Reporting Agency registered under the Ministry of Finance.
We compile and maintain individual and business credit information to generate reports and scores to help businesses and consumers manage risk, make informed decisions, and achieve their financial goals. Beyond that, we are an information services and technology company specialising in big data analytics, delivering data-driven insights that support decision making in businesses and financial institutions.
Role Overview
We are looking for a Senior DevOps Engineer to own and evolve our infrastructure platform across staging and production. This role is hands-on with OpenTofu, AWS, GitHub, and platform automation, with direct responsibility for making infrastructure changes safe, repeatable, and reviewable through Atlantis-driven workflows.
What You Will Own
- Build, maintain, and improve infrastructure stacks across AWS using OpenTofu.
- Operate container platforms on Amazon ECS, including shared clusters, service deployments, autoscaling, and supporting IAM roles.
- Manage networking and traffic layers including internal and external ALBs exposing services within a VPC, Route 53, Cloudflare, and service routing.
- Support data and stateful platforms including PostgreSQL, Redis, S3, KMS, Secrets Manager, and Systems Manager Parameter Store.
- Maintain CI/CD and platform automation through Atlantis, GitHub Actions OIDC roles, and GitHub runner infrastructure.
- Improve reliability, security, and operability for services such as Dagster, MLflow, Metabase, Temporal, Twingate connectors, and internal backend workloads.
- Contribute to access management and governance across AWS IAM, GitHub organization configuration, and environment-level standards.
- Drive infrastructure changes through pull requests, reviewable plans, and production-safe rollout practices.
Core Description
- Own infrastructure-as-code changes across global, staging, and production environments.
- Create and update reusable patterns without breaking downstream consumers, and assess blast radius before module or stack changes.
- Keep Atlantis project configuration aligned with the repository so new stacks are automatically planned and validated in pull requests.
- Partner with application and data teams to provision compute, networking, databases, storage, secrets, and observability foundations, including Datadog.
- Troubleshoot infrastructure issues across ECS services, load balancers, PostgreSQL stacks, GitHub runners, and hybrid on-prem integrations.
- Enforce secure handling of credentials, remote state, secrets rotation, and least-privilege access patterns.
- Track infrastructure cost drivers, improve resource efficiency, and make cost-aware tradeoffs without compromising reliability or security.
- Raise the quality bar on documentation, terraform-docs coverage, formatting, and operational clarity.
Required Experience
- Strong experience with Terraform or OpenTofu in a production environment.
- Strong AWS experience across compute, networking, IAM, storage, and managed stateful services.
- Experience operating infrastructure across AWS and on-prem or other self-hosted environments.
- Experience running containerized workloads in production, such as Amazon ECS or similar platforms; Kubernetes is not required.
- Experience delivering infrastructure changes through pull-request-based workflows with automated planning, review, and controlled rollout.
- Practical understanding of networking, DNS, load balancing, access control, and troubleshooting across service boundaries.
- Practical understanding of secrets management, key management, and least-privilege access patterns.
- Experience monitoring infrastructure spend, identifying cost drivers, and improving cost efficiency in production environments.
- Clear written communication, disciplined operational documentation, and sound judgment around infrastructure risk.
Nice to Have
- Experience with GitHub Actions, OIDC-based cloud access, or GitHub administration.
- Experience supporting data or internal platforms such as PostgreSQL, Redis, Snowflake, Dagster, MLflow, or Metabase.
- Experience with hybrid networking, remote-access platforms, or site-to-site connectivity patterns.
- Experience with Proxmox, Ansible, or similar on-prem automation and systems-management tooling.
- Familiarity with platform teams that support multiple services with different risk profiles and scaling needs.
What Success Look Like
- Infrastructure changes are predictable, reviewable, and low-drama.
- New services can be onboarded quickly using existing patterns rather than one-off infrastructure.
- Production changes are promoted with strong staging confidence and clear operational context.
- Security, tagging, state management, and secrets handling remain consistent as the platform grows.
- Infrastructure cost is visible, understood, and managed proactively as the platform grows.
- The engineering organization trusts the platform because changes are understandable, auditable, and reversible.
Tech Stack in Scope
OpenTofu, Atlantis, AWS, ECS, EC2, ALB, Route 53, Cloudflare, IAM, GitHub Actions, GitHub organization management, PostgreSQL, Redis, S3, KMS, Secrets Manager, SSM Parameter Store, AWS Lambda, Datadog, Temporal, Snowflake, Twingate, Proxmox, Ansible, Dagster, MLflow, and Metabase.
What We Offer
- Competitive basic salary
- Attractive commission and incentive structure
- Opportunity to grow with a high-growth credit intelligence company
- Be part of a company transforming the credit intelligence industry in Malaysia
- Fast career progression for high performers
Why Join Us
- Be part of a fast-growing, innovative credit bureau shaping the future of data-driven lending in Malaysia.
- Work with a dynamic and collaborative team in a tech-driven credit management environment.
- Transform the credit management ecosystem and build the future of credit intelligence for Malaysia and the region
- Credit intelligence industry with huge market potential
- Solve real problems for businesses (bad debt & credit risk)
- Early team with leadership opportunities
