Senior DevOps Engineer

About the role

Build a better way to borrow

Fig is a Canadian fintech making personal lending simpler, faster, and more accessible for Canadians. We offer fully digital personal loans, helping customers apply in minutes and receive decisions quickly, without paperwork, branch visits, or long delays .

Since launching in 2023, we’ve grown quickly and earned recognition including Consumer Lender of the Year and FinTech Startup of the Year. We’re proud to be consistently ranked among Canada’s Best Workplaces, with a 4.8/5 Trustpilot rating from our customers.

Supported by Fairstone Bank of Canada and Ontario Teachers’ Pension Plan, we combine deep lending expertise with the agility of a startup.

About the role Fig is expanding beyond lending and building a new generation of digital banking products. We're hiring a Senior Devops Engineer, reporting to the VP of Engineering, to build and operate the cloud platform our products run on.

As our first dedicated infrastructure engineer, you'll own our AWS environment end-to-end: account structure, infrastructure as code, CI/CD, networking, observability, and security controls. You're a hands-on builder who's comfortable inheriting an existing setup, improving it, and making it easy for product engineers to ship safely.

Today our platform runs on AWS Control Tower, with containerized services on ECS and RDS for PostgreSQL, all managed in Terraform and deployed through GitHub Actions. We're exploring the opportunities AI can bring to the platform, and want someone who'll help us pursue them with the right controls in place.

We're a small team, so breadth matters. You'll work closely with our backend engineers, our CISO, and our Risk and Compliance teams, and help set the standards and paved roads other engineers build on as we grow.

What you’ll do - Run and evolve our multi-account AWS environment on Control Tower, from account structure and access management to preventive and detective controls.

-

Manage our infrastructure in Terraform, with reusable modules and drift detection.

-

Make infrastructure changes safe and auditable through policy-as-code, automated plan checks, and approval gates.

-

Build and improve CI/CD on GitHub Actions so engineers can ship to ECS frequently and safely, with approvals and fast rollbacks.

-

Design and run our networking, including secure connectivity to banking partners and third-party providers.

-

Implement and operate security controls with our CISO, from secrets and encryption to logging and threat detection, and produce the evidence partners and auditors need.

-

Build reliability into the platform through observability, alerting, backups, and tested disaster recovery for our services and PostgreSQL databases.

-

Take part in our on-call rotation as the platform expert, and equip backend engineers to provide cover through runbooks, automation, and clear documentation.