Who we are

Moniepoint is an all-in-one financial services platform for emerging markets and the second-fastest-growing company in Africa. Since 2019, Moniepoint’s technology has powered over 3 million people, offering personal and business banking, payment, credit, and business management tools to help them succeed. Moniepoint processed $182 billion in 2023 and currently processes the majority of the POS transactions in Nigeria.

About the role

Engineering at Moniepoint is an inspired, customer-focused community dedicated to crafting solutions that redefine our industry. Our infrastructure runs on some of the cool tools that excite infrastructure engineers - kubernetes, docker etc.

We also make business decisions based on the large stream of data we receive daily, so we work daily with big data, perform data analytics and build models to make sense of the noise and give our customers the best experience.

Curious about what makes Moniepoint an incredible place to work?
Check out posts on how we cultivate a culture of innovation, teamwork, and growth.

Position Overview

We are seeking an experienced Cloud Engineer to design, implement, and manage our multi-cloud infrastructure. The ideal candidate will have deep expertise in cloud platforms, container orchestration, infrastructure automation, CI/CD pipelines, and observability solutions, ensuring scalable, reliable, and cost-effective cloud operations across multiple cloud providers.

Principal Duties and Responsibilities

Cloud Infrastructure Management

Design, deploy, and manage multi-cloud infrastructure across Google Cloud Platform (GCP), Amazon Web Services (AWS), Azure, and Oracle Cloud Infrastructure (OCI)
Architect and implement highly available, fault-tolerant, and scalable cloud solutions
Manage cloud resources including compute instances and networking components
Design and implement disaster recovery and business continuity plans for cloud workloads
Migrate on-premises applications and services to cloud environments with minimal disruption
Optimize cloud resource utilization and implement auto-scaling policies
Maintain comprehensive documentation of cloud architectures, configurations, and runbooks

Kubernetes & Container Orchestration

Design, deploy, and manage production-grade Kubernetes clusters across multiple cloud providers
Implement and maintain container orchestration strategies for microservices architectures
Configure and manage Kubernetes resource objects
Manage Kubernetes cluster upgrades, scaling, and performance optimization
Troubleshoot complex container and orchestration issues in production environments
Implement multi-cluster and multi-region Kubernetes deployments for high availability

Service Mesh & Advanced Networking

Design, deploy, and manage Istio service mesh for microservices communication and observability
Configure Istio traffic management, including virtual services, destination rules, and gateways
Implement advanced traffic routing (canary deployments, A/B testing, traffic splitting) using Istio
Deploy and manage Istio observability components (telemetry, distributed tracing, service graphs)
Implement circuit breaking, retries, timeouts, and fault injection for resilience testing
Configure Istio ingress and egress gateways for external traffic management
Monitor and optimize service mesh performance and resource utilization
Implement multi-cluster service mesh architectures across different cloud providers

Reverse Proxy & Load Balancing

Deploy, configure, and manage HAProxy for high-performance load balancing and reverse proxy
Implement HAProxy ACLs, backend routing, health checks, and session persistence
Design and implement Nginx as reverse proxy for web applications and API gateways
Configure Nginx for rate limiting and request filtering
Implement Nginx load balancing algorithms and upstream health monitoring
Manage Nginx Plus features for advanced traffic management and monitoring
Optimize HAProxy and Nginx performance for high-throughput environments

Infrastructure as Code & Configuration Management

Develop and maintain infrastructure as code using Terraform
Create reusable, modular Terraform configurations for various cloud resources and Implement Terraform state management and remote backends
Design and implement configuration management solutions using Ansible
Develop Ansible playbooks and roles for automated server provisioning and configuration
Integrate Terraform and Ansible workflows for end-to-end infrastructure automation
Implement infrastructure version control, code review processes, and GitOps practices
Manage infrastructure drift detection and remediation
Create and maintain infrastructure documentation and architecture diagrams
Implement policy-as-code using tools like OPA (Open Policy Agent) or Sentinel

CI/CD Pipeline Management

Design, implement, and maintain continuous integration pipelines using Jenkins and Harness
Optimize build times and pipeline efficiency
Integrate security scanning (SAST, DAST, container scanning) into CI/CD pipelines
Configure Jenkins jobs, pipelines, and shared libraries for automated build, configure build agents, runners, and execution environments
Implement Harness deployment pipelines for cloud-native applications
Integrate CI/CD pipelines with version control systems (Git, GitHub, GitLab)
Implement continuous deployment workflows using ArgoCD for Kubernetes-based applications
Design and implement GitOps workflows with ArgoCD for declarative application delivery
Manage ArgoCD application definitions, sync policies and multi-cluster deployments
Implement progressive delivery strategies (blue-green deployments, canary releases) using ArgoCD

Message Streaming & Event-Driven Architecture

Deploy and manage Apache Kafka clusters for real-time data streaming and event-driven architectures
Configure Kafka topics, partitions, replication factors, and retention policies
Implement Kafka Connect for data integration with various sources and sinks
Monitor Kafka cluster health, performance metrics, and consumer lag
Optimize Kafka performance for high-throughput and low-latency use cases
Troubleshoot Kafka producer and consumer issues

Database & Proxy Management

Deploy, configure, and manage ProxySQL for MySQL load balancing and high availability
Implement query routing, caching, and connection pooling strategies using ProxySQL
Optimize database performance through ProxySQL query analysis and optimization
Implement database failover and disaster recovery using ProxySQL
Monitor ProxySQL metrics and troubleshoot connection and performance issues
Integrate ProxySQL with database clusters and replication topologies
Implement database access security and audit logging through ProxySQL

Cloud Networking

Design and implement cloud networking architectures, including VPCs, subnets, and network segmentation
Configure and manage cloud load balancers (Application Load Balancers, Network Load Balancers, Cloud Load Balancing)
Implement VPN connections, Direct Connect/Interconnect, and hybrid cloud networking solutions
Implement network security controls, including security groups, network ACLs, and firewall rules
Implement network monitoring and traffic analysis
Troubleshoot complex networking issues across multi-cloud environments
Design and implement private connectivity between cloud providers

Secrets Management & Security

Configure and manage HashiCorp Vault for centralized secrets management across multi-cloud environments
Configure Vault secret engines (KV, database, PKI, AWS, GCP, Azure dynamic secrets)
Manage Vault high availability clusters and disaster recovery procedures
Implement dynamic database credentials and secret rotation strategies
Manage Vault encryption as a service for application-level encryption
Implement Vault agent and sidecar injectors for Kubernetes workloads
Migrate secrets from legacy systems to Vault

Qualifications, Competency & Skills Required

Education & Experience

Bachelor's degree or diploma in Computer Science, Information Technology, Engineering, or related field
Minimum of 5 years of proven experience in cloud engineering, DevOps, or platform engineering roles
Hands-on experience managing production workloads across multiple cloud platforms
Relevant cloud and technology certifications are highly desirable

Technical Skills

Cloud Platforms (Required)

Google Cloud Platform (GCP): Deep expertise in Compute Engine, GKE, Cloud Storage, Cloud SQL, VPC, Cloud Functions, Cloud Run, IAM
Amazon Web Services (AWS): Proficiency in EC2, EKS, S3, RDS, VPC, Lambda, ECS, CloudFormation, IAM
Microsoft Azure: Experience with Virtual Machines, AKS, Blob Storage, Azure SQL, Virtual Networks, Azure Functions, ARM templates
Oracle Cloud Infrastructure (OCI): Familiarity with Compute, OKE, Object Storage, networking, and OCI-specific services
Multi-cloud architecture design and implementation experience
Cloud migration strategies and execution (lift-and-shift, re-platforming, re-architecting)

Container & Orchestration (Required)

Expert-level Kubernetes knowledge, including cluster architecture, networking, storage, and security
Hands-on experience with managed Kubernetes services (GKE, EKS, AKS)
Proficiency in Docker containerization, image optimization, and registry management
Experience with Helm charts for application packaging and deployment
Knowledge of container runtime environments (containerd, CRI-O)

Service Mesh & Microservices (Required)

Istio: Deep expertise in Istio architecture, deployment, and operations
Istio traffic management (virtual services, destination rules, gateways, service entries)
Istio security features (mTLS, authorization policies, peer authentication, request authentication)
Istio observability and telemetry configuration
Multi-cluster and multi-mesh deployments
Service mesh troubleshooting and performance optimization
Understanding of sidecar proxy patterns and Envoy proxy
Experience with other service mesh solutions (Linkerd, Consul Connect) is a plus

Reverse Proxy & Load Balancing (Required)

HAProxy Advanced configuration and management for load balancing and high availability
Nginx Expert-level configuration as reverse proxy and API gateway
Nginx rate limiting, and performance tuning
Nginx load balancing algorithms and upstream configurations
Experience with Nginx modules and custom configurations
High availability configurations using keepalived, VRRP, or similar
Integration with Kubernetes ingress controllers (Nginx Ingress, Istio Ingress)

Infrastructure as Code (Required)

Advanced Terraform skills for multi-cloud infrastructure provisioning
Terraform module development, state management, and workspace strategies
Proficiency in Ansible for configuration management and automation
Ansible playbook development, roles, and inventory management
Experience with version control systems (Git) and GitOps workflows
Infrastructure testing frameworks (Terratest, Kitchen-Terraform)

CI/CD Tools (Required)

Jenkins: Pipeline development (declarative and scripted), shared libraries, plugin management
Harness: Deployment pipeline configuration, workflow creation, approval gates
ArgoCD: GitOps workflows, application synchronization, multi-cluster management
Integration of CI/CD tools with Kubernetes and cloud platforms
Automated testing and deployment strategies
Artifact repository management (Nexus, Artifactory, cloud-native registries)

Messaging & Streaming (Required)

Apache Kafka architecture, cluster management, and operations
Kafka topic design, partitioning strategies, and performance tuning
Kafka Connect experience
Experience with Kafka management tools (Kafka Manager, Cruise Control)
Understanding of event-driven architectures and patterns

Database & Proxy Technologies (Required)

ProxySQL configuration, management, and optimization
MySQL database administration basics
Understanding of database replication and clustering

Observability & Monitoring (Required)

Prometheus metrics collection, PromQL, and alerting rules
Grafana dashboard design and visualization techniques
Log aggregation and analysis

Networking (Required)

Deep understanding of TCP/IP, DNS, HTTP/HTTPS, and network protocols
Cloud networking concepts (VPC, subnets, routing tables, NAT, VPN)
Load balancing strategies and implementations
Service discovery and DNS-based routing
Network security and firewall configuration
Software-defined networking (SDN) concepts

Scripting & Programming

Proficient in scripting languages: Python, Bash
Go or python programming basics for tooling development
YAML and JSON for configuration management
Understanding of software development best practices

Secrets Management (Required)

HashiCorp Vault: Advanced knowledge of Vault architecture, deployment, and operations
Vault authentication methods and integration with cloud providers and Kubernetes
Vault secret engines (KV v1/v2, database, transit, cloud dynamic...

What we can offer you

Culture -We put our people first and prioritize the well-being of every team member. We’ve built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another. Above all, we are human.
Learning - We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.
Compensation - You’ll receive an attractive salary, pension, health insurance, annual bonus, plus other benefits.

What to expect in the hiring process

A technical interview with the Hiring Manager
A behavioural and technical interview with a member of the Executive team.