The posting
The Role
We are a small DevOps team building and deploying cloud infrastructure to support wind-industry software and analytics. You will spend most of your time on live production: Linux and EC2, PostgreSQL and other data stores, large S3 data flows, ECS workloads, monitoring, backups, cost optimisation, and the change control that goes with them.
Infrastructure is delivered through Terraform and GitLab CI/CD across multiple AWS accounts. You will also support established production applications on EC2 and ECS, and help extend those same patterns over time - templates, modules, and pipeline automation - so operational change stays controlled and repeatable.
You will implement prioritised security improvements with our cyber team and support software teams with AWS access, environments, and deployments alongside planned infrastructure work.
What you will do
In your first few months
- Get tooling, AWS access, and GitLab working; learn how the team schedules production vs project work.
- Operate alongside others on production Linux, ingest pipelines, PostgreSQL backups, and monitoring.
- Pick up internal requests (access, envs, deploys) and planned improvement tasks.
- Ship security and hygiene work: patches, IAM optimisations, alerts, FinOps-style cost checks.
- Land reviewed Terraform or CI/CD changes, including templating or automation on established production applications.
Production
- Run and improve EC2/Linux systems and PostgreSQL (including backup/restore).
- Keep high-volume ingest and SaaS services running: capacity, fixes, and controlled upgrades.
- Investigate connectivity between remote site systems and cloud services when ingest or VPN paths fail - including internet and cellular links, latency, loss, and intermittent outages.
- Operate and rebuild ECS/Fargate services where production still depends on them.
Automation and CI/CD
- Write and refactor Terraform modules; respect state, review, and multi-account layout.
- Extend templating and automation for established production applications - more Terraform, standard builds, and GitLab pipelines, introduced incrementally with team review.
- Wire infrastructure changes through GitLab pipelines where that reduces manual deploy risk.
- Improve metrics, logs, alerts, and runbooks used during incidents.
Security and access
- Execute scoped remediation with cyber: OS and package fixes, rebuilds, hardening, networking and IAM tightening.
- Pick up identity and access tasks - role reviews, SSO/IAM Identity Centre patterns, VPN/zero-trust changes.
What you will bring
Essential
- 5+ years in DevOps, SRE, or cloud infra, on production AWS.
- Strong ability to explore and understand established infrastructure.
- Terraform you have written and operated (modules, state, rollbacks).
- Strong Linux debugging/troubleshooting experience, including Bash or Python scripting/automation.
- AWS networking and IAM you can explain (VPC, SGs, roles, least privilege, SSO) and troubleshoot in practice (routes, DNS, firewalls, VPN).
- PostgreSQL or similar in prod (backups, restore drills, basic performance).
Desirable
- Multi-account AWS and incremental automation on established workloads (creating Terraform for existing infra, rebuild templates, pipelines).
- Experience in compliance or regulatory environments (e.g. ISO 27001-style controls, audits, documented change, security expectations in energy or similar sectors).
- GitLab CI/CD (runners, deploy jobs, infra pipelines).
- Jenkins experience (pipelines, agents, Groovy or scripted jobs).
- Experience with data pipelines (processing data, dealing with large volumes of data).
- Security work on live systems (when to patch vs rebuild).
- Wiz or similar cloud security posture / vulnerability tooling (triage, remediation workflows).
- OpenVPN or similar SSL VPN (server operation, certificates, routing, troubleshooting).
- Networking for site-to-cloud data paths: remote equipment on the public internet (often cellular or other constrained links), VPN behaviour under load, and debugging connectivity (DNS, MTU, timeouts, asymmetric routes).
About ONYX
ONYX Insight is a growing technology and engineering organization in the renewable energy sector. Every day we monitor the performance of 32,000-plus wind turbines in 45+ countries, giving owner-operators the clarity and confidence to maximize reliability, minimize downtime, and increase annual energy production.
ONYX Insight is part of the Macquarie Group. Macquarie is a global financial services group operating in 34 markets in asset management, leasing and asset financing, market access, commodity trading, renewables development, specialist advisory services, capital raising and principal investment. The diversity of Macquarie Group operations, combined with a strong capital position and robust risk management framework, has contributed to a 54-year record of unbroken profitability.
For any further information, or to understand our products and services better, please feel free to look through our website: https://onyxinsight.com/
ONYX Insight is an equal opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
