DevOps Engineer

Why Voca Voca is a leading gaming commerce and digital payments platform, connecting gamers, publishers, and partners across Southeast Asia through seamless payment, distribution, and monetization solutions.Our platform powers digital transactions for game top-ups, vouchers, prepaid products, digital goods, and other online services, serving millions of users across the region.As we continue to grow, we're building scalable technology and expanding our ecosystem to support the next generation of gaming and digital commerce.At Voca, we believe great products are built by great people. Our culture is rooted in ownership, collaboration, continuous learning, and a shared passion for solving meaningful problems.If you're looking to build products that reach millions of users and work alongside talented people who care deeply about their craft, we'd love to meet you

The Opportunity We're looking for aMid to Senior / Senior DevOps Engineer to take ownership of our hybrid infrastructure spanning AWS and dedicated bare-metal environments.In this role, you will be the key driver in streamlining our deployment automation, fortifying system security, and establishing end-to-end observability across all layers. You will build centralized logging and distributed tracing from the ground up to give engineering teams granular visibility into high-throughput payment and transaction flows, while acting as a trusted partner to our backend engineers for reliable service rollouts and server migrations.

Key Responsibilities:

• Maintain, secure, and optimize production workloads across a hybrid setup of AWS and Dedicated Linux Servers.
• Lead the deployment of new backend services, communicating proactively and collaborating closely with Backend Engineers to understand service dependencies, resource requirements, environment configurations, and rollout strategies.
• Plan and execute website and service migrations across servers with zero or minimal downtime, handling data synchronization, local database cutovers, reverse proxy routing, and seamless Cloudflare DNS switching.
• Design and implement modern, centralized Logging, Tracing, and APM pipelines (e.g., OpenTelemetry, Grafana Loki/Tempo, SigNoz, Vector, or ELK) to diagnose performance bottlenecks and errors in real time.
• Optimize edge traffic, caching, firewall rules, and DDoS protection utilizing Cloudflare (DNS, WAF, CDN, and Zero Trust/Tunnels).
• Manage containerized services using Docker Compose / Docker standalone and configure high-performance reverse proxies (such as Nginx, Traefik, or Caddy).
• Build, maintain, and optimize CI/CD pipelines (e.g., GitHub Actions) to achieve reliable, automated deployments.
• Monitor system health, database connections, and background message queues to ensure low latency and high availability during traffic spikes.
• Strengthen network and server security: implement strict SSH bastions, VPN/overlay networks, firewall policies (iptables/UFW), and automated backup/disaster recovery routines.
• Troubleshoot system-level issues, resolve OS kernel/network bottlenecks, and participate in incident response.

Qualifications:

• 3+ years of hands-on experience managing production Linux environments across cloud (AWS) and dedicated/on-premise bare-metal servers.
• Deep Linux administration and performance tuning skills (systemd, process isolation, storage I/O, memory management, TCP/IP stack tuning).
• Proven hands-on experience executing server-to-server migrations (moving web applications, handling live data syncs, rsync/dump migrations, and DNS cutovers without prolonged downtime).
• Strong hands-on proficiency with Docker and container lifecycle management outside of managed Kubernetes ecosystems.
• Proven experience building or maintaining observability stacks, specifically centralized logging (Loki, ELK, Fluentd/Vector) and distributed tracing / APM (OpenTelemetry, Tempo, Jaeger, etc.).
• Practical knowledge of Cloudflare configuration (WAF, DNS records, caching rules, SSL/TLS termination, edge security).
• Solid experience writing and maintaining automated CI/CD pipelines (e.g., GitHub Actions, GitLab CI).
• Strong scripting skills in Bash and at least one programming language (Python, Go, or Node.js) for operational automation.
• Excellent communication, cross-functional collaboration, and ownership skills, with empathy for developer workflows and the ability to bridge operations and software engineering smoothly.
• Pragmatic problem-solving mindset—prioritizing practical, stable, and cost-effective solutions over unnecessary infrastructure complexity.

Nice to have:

• Experience supporting high-traffic gaming top-up, fintech, or payment processing workloads.
• Familiarity with database operations and high-availability caching/queues (MySQL, Redis Sentinel/Replication, RabbitMQ).
• Hands-on experience configuring secure overlay networks and private mesh access (WireGuard, NetBird, and Cloudflare Zero Trust / Tunnels) across hybrid environments.
• Familiarity with configuration management tools (such as Ansible) to standardize and automate Linux server administration without disrupting running stateful databases.

Skills: MySQL, API Development, Redis Sentinel, Linux, Docker, Amazon Web Services (AWS), DevOps, CI/CD, Replication, Loki, Bash, Cloud Computing, ELK, RabbitMQ