Senior DevOps Engineer / SRE

About Us

Step into the wild world of OneDayOnly – South Africa's OG daily deals hub. We're the pioneers of cool discounts, hitting you for just one day because, well, why overcomplicate things? We've got the big names, top suppliers, and a dash of our secret sauce to make you feel like a BIG DEAL. Not to brag, but we have over a million potential savvy shoppers getting our daily dose every 24 hours.

We're not fussy – if the price is right and the quality checks out, we're selling it. That's what makes us the go-to for both the smart buyer and the eager seller. Toss in the urgency of our deals, and boom, success happens quicker than you can blink. So, jump in, where FOMO meets killer deals, and let's turn every day into a retail party!

About You

We are looking for a Senior DevOps / SRE who cares deeply about keeping things running smoothly and securely. You're the person who spots problems before they happen and builds systems that just work.

You're comfortable jumping between PHP backends, Next.js frontends, and React Native mobile apps and you take security seriously. You don't just "keep the lights on"; you make sure the whole house is solid, locked up tight, and ready for a million visitors at once.

Responsibilities

Building & Managing Our Infrastructure

• We run on Azure and Google Cloud, and you'll be the one making sure we're getting the most out of both.
• You'll use Terraform to keep everything codified and repeatable - no manual clicking, no "works on my machine" surprises. Whether it's AKS or GKE, you'll keep our clusters happy and healthy.

Keeping Our Code Flowing

• We use Bitbucket and you'll be the architect of our CI/CD pipelines.
• You'll help us move toward a more unified approach while keeping things running smoothly in the meantime.
• From PHP builds to React Native mobile releases, you'll make sure code gets from commit to production safely and efficiently.

Looking After Our Apps

• PHP applications: You'll optimize containers, tweak PHP-FPM, sort out caching (Redis, Varnish), and keep our databases (MySQL, PostgreSQL) running sweet.
• Next.js websites: You'll figure out the best way to build and serve them - whether that's static, server-rendered, or somewhere in between.
• React Native mobile app: You'll own the deployment pipelines for iOS and Android, managing code signing, certificates, and automated releases via Fastlane.

Security & Audits

• Integrate security scanning into our pipelines (SAST/DAST, dependency checks).
• Manage secrets properly - no hardcoded passwords, no accidental exposures.
• Prepare for and support regular security audits and penetration tests, working with external testers to close gaps and fix findings.
• Ensure our cloud environments follow security best practices (IAM, network policies, encryption).
• Stay on top of compliance requirements and help us pass any reviews with confidence.

Watching Things & Fixing Stuff

• You'll build real visibility into our systems with tools like Prometheus, Grafana, or Datadog.
• You'll set up meaningful alerts (not noise) and help the team understand what "healthy" actually looks like. When things go wrong, you'll lead the charge on root cause analysis and make sure we learn from it.

Making Life Easier for Developers

• At the end of the day, you're building a platform that lets our dev team move fast without breaking things.
• You'll automate the boring stuff, document the important stuff, and always be looking for ways to level up our tooling and processes.

Experience and Qualifications

Essentials

• 5+ years in a DevOps, SRE, or similar role.
• Solid experience with Azure and Google Cloud - you know your way around both.
• Strong Terraform skills (you write it, you review it, you sleep soundly knowing it worked).
• Comfortable with Bitbucket Pipelines.
• Experience containerising PHP applications and running them in Kubernetes.
• Worked with Next.js deployments (SSR, static, CDN caching, the works).
• Built React Native CI/CD pipelines including Fastlane, code signing, and store submissions.
• Know your way around Linux, Docker, and cloud VM orchestration (Azure Compute, GCP Compute Engine).
• Familiar with databases like MySQL or PostgreSQL.
• Understand networking basics - DNS, load balancers, VPCs, that sort of thing.
• Experience integrating security scanning into CI/CD pipelines.
• Familiarity with secrets management tools (Vault, Key Vault, etc.).
• Worked with external penetration testers and managed the fix process.
• Been through security audits and know what auditors look for.
• Understand cloud security basics: IAM roles, network policies, encryption at rest and in transit.

Nice-to-Haves

• Certifications (Azure, GCP, or security-related).
• Experience with feature flags or A/B testing tools.
• MLOps or data pipeline exposure.

Values

• Challenge Accepted: We actively seek ownership, embrace complexity, and hold ourselves accountable for delivering high-quality, reliable code.
• Solve Smart: We find the simplest, most effective path to a solution. We use data to inform our decisions, challenge assumptions, and build for the long-term.
• Character Counts: We act with integrity in all that we do. We communicate with transparency, give and receive feedback constructively, and take accountability for our mistakes and our successes.
• Customer Obsessed: We build with empathy for our users. We strive to understand their needs and challenges, making them the central focus of every feature we ship and every line of code we write.
• Seriously Unserious: We take our work seriously, but not ourselves. We bring energy and humor to our collaborations, celebrate our successes together, and support each other through challenges.