Junior Software Engineer — DevOps, Build & Release, Platform Reliability

• CI/CD pipelines: Designs and maintains Jenkins pipelines (Slack-notified build / test / deploy stages) and GitHub Actions YAML workflows (SSH-based production deploy via appleboy/ssh-action) for the live SaaS platform app.niftyhq.ai; workflow structure maps cleanly to GitLab CI/CD multi-stage job patterns.

• Linux & runtime operations: Administers production Ubuntu VMs (Azure-hosted); Docker containers with PM2 process management; implements /api/health liveness endpoints and graceful shutdown (SIGTERM handling) to eliminate 502s during rolling redeploys.

• Observability & incident triage: Sentry on Express backend (error capture, performance tracing, profiling) and React SPA (React Router tracing, session replay, web vitals); Winston structured JSON logging; RCA habits on build and deploy failures; runbook documentation for environment handoff.

• Security hardening: Secrets managed via GitHub Actions Secrets and VM .env (never committed); Helmet, express-rate-limit, CORS locked to frontend origin; OAuth2 boundary enforcement across Stripe, Xero, and QuickBooks webhooks.

• Release discipline: Health checks, graceful shutdown, and deploy sequencing aligned with rolling and blue/green release patterns; Bash and Python scripts for deploy, backup, and operational automation.

• IaC & collaboration: Terraform and Ansible for provisioning and configuration management (hands-on); works with development and QA on environment parity, release readiness, and post-deploy validation.