Welcome to KTO Group, where innovation drives excitement in iGaming. Founded in 2018 by Andreas Bardun, we’re transforming online gaming with a focus on transparency and player satisfaction.
At KTO.com, we blend the thrill of sports betting with online casino entertainment, tailored to local markets and powered by our proprietary platform for a seamless, personalized experience. KTO is a rising leader in LATAM, proudly ranked among Brazil’s top 10 iGaming brands. Join us as we set new standards in trust, innovation, and the future of iGaming.
Role Overview
We are looking for a
Senior DevOps & Node.js Engineer to take ownership of both our cloud infrastructure and application backend. This is a hands-on role responsible for maintaining, securing, and scaling our iGaming platform. The ideal candidate is equally comfortable writing Terraform modules and debugging
Node.js microservices, with strong security awareness given the financial and regulatory nature of the business.
Our platform handles real-money transactions, integrates with third-party wallet and payment providers, and operates in regulated gambling markets. It runs on Google Cloud Platform and consists of 10+ TypeScript/
Node.js microservices deployed on Kubernetes through a multi-tenant architecture serving multiple brands.
Key Responsibilities
Own and maintain the Terraform-managed GCP infrastructure (GKE, Cloud SQL, Memorystore Redis, Cloud CDN, Cloud Armor, VPC networking, Cloud NAT)
Manage Kubernetes cluster operations — deployments, autoscaling (HPA), ingress routing, secrets management, pod disruption budgets, and network policies
Design and implement CI/CD pipelines for automated testing, building, and deploying microservices to GKE
Monitor platform health, configure alerting (uptime, resource utilization, error rates, financial transaction failures), and respond to incidents
Manage database operations — PostgreSQL administration, backup verification, connection pooling, query performance, and read replica management
Implement and maintain security controls — Cloud Armor WAF rules, network isolation, TLS certificate management, and secrets rotation
Plan and execute capacity management, cost optimization, and disaster recovery procedures
Maintain infrastructure-as-code standards with remote state management, modular Terraform, and environment parity (staging/production)
Maintain and improve 10+ TypeScript/Node.js microservices built with Express.js, TypeORM, and GraphQL
Identify and resolve performance bottlenecks — N+1 queries, blocking operations, unbounded queries, and connection pool tuning
Implement proper error handling and retry logic for financial transaction flows (wallet deposits, withdrawals, multiplayer payouts)
Address security vulnerabilities — SQL injection, broken encryption, authentication weaknesses, input validation, and missing security headers
Manage real-time WebSocket services for multiplayer game functionality
Maintain and optimize the PostgreSQL database — migrations, indexing, query optimization, and archival strategy
Ensure Redis caching layer is properly configured and resilient
Work with GraphQL APIs including federation, query cost limiting, and depth/complexity controls
Remediate identified security findings across infrastructure and application layers
Implement least-privilege access controls (database users, service accounts, Kubernetes RBAC)
Ensure encryption standards meet regulatory requirements for financial data handling
Maintain audit trails and request tracing across microservices
Support gaming license compliance efforts by maintaining platform integrity, fairness verification systems, and data isolation between tenants
Requirements
5+ years in a combined DevOps + backend engineering role
Strong Node.js (v18+) + TypeScript skills (async/await, event loop fundamentals, production debugging)
Solid experience with Express.js (REST APIs, middleware patterns)
Hands-on PostgreSQL expertise (administration, migrations, indexing, query tuning, connection management)
Working knowledge of Redis (caching, pub/sub, distributed locking, sessions)
Strong Terraform skills (modules, remote state, workspaces, lifecycle management)
Proven experience on Google Cloud Platform, especially: GKE, Cloud SQL, Memorystore, Cloud CDN, Cloud Armor, VPC, Cloud NAT, IAM, Cloud Monitoring
Deep Kubernetes operations knowledge (deployments, ingress, HPA, secrets/configmaps, RBAC, network policies, PDBs)
Strong Docker experience (building/optimizing images, registries)
Experience designing and maintaining CI/CD pipelines (GitHub Actions/GitLab CI/Cloud Build or similar)
Strong security fundamentals: OWASP Top 10, secure coding, encryption basics (AES-GCM, HMAC-SHA256), JWT, WAF concepts
Monitoring/observability experience (Prometheus/Grafana and/or GCP Cloud Monitoring, dashboards + alerting)
Proficient with Git workflows (branching, PRs, code reviews)
Comfortable with Linux administration and troubleshooting
Ability to operate in regulated / financial-transaction environments (reliability, auditability, incident response)
At KTO, diversity isn't just a buzzword – it's our strength. We're all about creating an inclusive environment where everyone feels valued and empowered. Together, we're not just working on projects – we're making a real impact in our communities. Join us in celebrating diversity and driving meaningful change!