PayShepherd is a vertical SaaS company transforming how heavy industries, such as Oil and Gas, Pulp and Paper, Mining and Power Generation, manage contractor spend. Our cloud-based contractor management platform automates the previously manual review of paper-based vendor cost reports, and our anomaly detection engine ensures 100% contract compliance and the elimination of overbilling. We have real customers and a genuine moat.

We're looking for a DevOps Engineer to own the day-to-day health of our AWS infrastructure; keeping it secure, reliable, cost-efficient, and ready to scale.

Why this role

Our platform handles sensitive financial data for some of the largest industrial operators in North America. The security and reliability bar is high, and we need someone who treats it that way, not as paperwork, but as core craft.

This isn't a role where you'll need to invent a brand-new platform from scratch. We need someone dependable who can step into our AWS environment, understand it quickly, keep it healthy, and make it better week over week.

When the infrastructure is humming, we want someone who can roll up their sleeves and contribute to product code, internal tooling, or automation projects. That cross-functional ability is a real asset on a small team.

What we value

Reliability and follow-through: when you own something, it works
Security mindset: you think about blast radius, least privilege, and what could go wrong before it does
Humility and ego-free collaboration: strong opinions, loosely held; quick to be wrong; quicker to learn
Hard work in service of clear, measurable goals: output, not theatre
Curiosity: you stay current on AWS, security, and tooling, and you're interested in how AI is changing the way we build
Transparency and honesty in how we work and what we ship
Driving and enabling value for clients and prospects
Relentless attention to improvement

Your Responsibilities

AWS Infrastructure

Operate, maintain, and improve our AWS environment (EC2, RDS, S3, Lambda, ALB, Auto Scaling, Route 53, CloudWatch, and the rest)
Manage IAM policies, roles, and access boundaries with care
Monitor performance, reliability, and cost; surface and act on issues before they become problems
Build and maintain Infrastructure as Code (Terraform, CloudFormation, or CDK)
Own backup, disaster recovery, and incident response procedures

Security

Apply AWS security best practices end-to-end: IAM with MFA, least-privilege roles, network segmentation, secrets management, encryption in transit and at rest
Review and harden the environment against common threats
Maintain audit logging and observability so we can answer "what happened, when, and by whom."
Respond to security questionnaires, vendor reviews, and customer compliance requests
Stay current on AWS security advisories and apply patches and mitigations promptly

CI/CD and Developer Productivity

Maintain and improve our build, test, and deployment pipelines
Make it easy for the engineering team to ship safely and quickly
Automate the repetitive and error-prone parts of the development lifecycle

Database Operations

Support our production MySQL databases: backups, monitoring, query performance, schema migrations
Plan and execute consolidation, upgrade, and migration work as the platform evolves

Cross-Functional Contribution

When DevOps work is light, contribute to product code, internal tools, or automation projects
Pair with engineers to solve infrastructure-shaped problems in the application layer
Share what you know about observability, performance, and security with the rest of the team

Collaboration and Communication

Work closely with our Engineering Lead and the rest of the engineering team
Participate in code reviews, technical discussions, and knowledge sharing
Communicate progress, blockers, and recommendations clearly and early

Requirements

Required

3+ years of professional DevOps, SRE, or Cloud Engineering experience
Strong hands-on AWS experience. This is non-negotiable; our entire platform runs on AWS.
Strong security knowledge and instincts: IAM, network security, secrets management, common attack vectors, audit and compliance basics
Comfortable with Linux, shell scripting, and at least one general-purpose programming language (Python, Node.js, PHP, Go, or similar)
Experience with Infrastructure as Code (Terraform, CloudFormation, or CDK)
Experience with CI/CD tooling
Familiarity with relational databases (MySQL preferred): backups, monitoring, basic tuning
Solid communication skills and a willingness to write things down so others can follow

Big bonuses

Active experience using AI-assisted tools (Claude Code, Cursor, Copilot, agentic workflows) in your daily work. This is a real differentiator for us.
Application development background that lets you jump into product or tooling code when DevOps work is light
Experience operating SaaS environments at scale, ideally with multiple production instances
Experience responding to SOC 2, ISO 27001, or similar compliance/audit programs
Experience with cost optimization at a meaningful scale

Your Benefits

Meaningful stock options: we expect ownership, and we share the upside.
Excellent medical, dental, and vision plans
Real autonomy and real accountability
New MacBook and accessories

Location

We're looking for candidates based in Vancouver, BC or Calgary, AB.

PayShepherd is committed to achieving workforce diversity and creating an inclusive working environment. Diversity makes sense for us, for our customers, and for our future. We value different perspectives, skills, and experiences, and welcome applications from all sectors of the community.

We welcome candidates with disabilities and will make accommodations throughout all stages of the recruitment and selection process. If you require a disability-related accommodation, please contact us directly.

All candidates must satisfy a background check.

We thank all applicants for their interest, and only those selected for an interview will be contacted.

Apply now

See more open positions at Payshepherd

Powered by Getro.com