DevOps Database Reliability Engineer – AWS & Terraform

MUFG Investor Services is a trusted partner to many of the world’s largest public and private funds, providing asset servicing and operational solutions built for alternatives. With over $1 trillion in client assets under administration, we offer fund administration, banking, payments, fund financing, foreign exchange overlay, corporate and regulatory services, custody, business consulting, and more. Operating from 17 locations worldwide, we help clients mitigate risk, enhance efficiency, and navigate the operational complexities of today’s investment management landscape.

We are looking for a Database Reliability Engineer to join our team. This is not a traditional DBA role — you are a DevOps engineer who happens to have deep SQL and database knowledge. You think in code, manage infrastructure via Terraform, and treat database provisioning, patching, and performance as an engineering problem — not a manual task.

You will own the database infrastructure layer across our AWS environments: provisioning, scaling, observability, and reliability — all through Infrastructure-as-Code. Our current estate includes SQL Server running on Windows EC2 instances. You will partner with application teams to ensure databases are correctly provisioned, optimised, and monitored without becoming a gatekeeper.

You Will:

• Provision and manage AWS RDS instances entirely through Terraform — parameter groups, subnet groups, IAM authentication, secrets rotation, multi-AZ, and read replicas
• Own database reliability — design runbooks, define SLOs, set up alerting on slow queries, connection pool saturation, replication lag, and disk growth
• Automate database operations — schema migrations, backup validation, failover drills, and patching via CI/CD pipelines
• Improve performance — work with development teams on EXPLAIN ANALYZE, query tuning, indexing strategies, and connection pooling (PgBouncer/RDS Proxy)
• Secure the data layer — enforce encryption at rest/in transit, IAM database authentication, credential rotation via AWS Secrets Manager, and least-privilege access patterns
• Contribute to the platform — build reusable Terraform modules for database provisioning that application teams self-serve from the platform
• Participate in on-call rotation — respond to database incidents, drive RCAs, and implement permanent fixes to prevent recurrence

Qualifications You Have:

• AWS — RDS Aurora, Secrets Manager, IAM, CloudWatch, VPC networking for databases, KMS encryption
• Terraform — writing and maintaining modules, state management, remote backends, version pinning
• Scripting — Python or Bash for automation, operational tooling, and migration scripts
• CI/CD — GitLab CI or equivalent; using pipelines for infrastructure changes and database migrations
• Observability — experience with Datadog, CloudWatch, or Prometheus/Grafana for database metrics and alerting
• Linux — comfortable with system-level troubleshooting in production environments

Good to Have:

• PgBouncer or RDS Proxy — connection pooling configuration and tuning
• Kubernetes — understanding how workloads connect to databases, sidecar patterns, secrets injection
• Database migrations — zero-downtime schema migrations with tools like Flyway, Liquibase, or custom scripted approaches
• Financial services or regulated environments — familiarity with audit logging, data residency requirements, PCI DSS / SOC 2 controls
• AWS Aurora Global Database — cross-region replication, disaster recovery patterns

What We Don't Want:

• Traditional Oracle/MSSQL DBA focused on GUI-based administration
• Engineers who manage databases manually rather than through code
• Candidates whose primary experience is "advising" rather than building and operating

You Will Thrive Here If:

• You've written Terraform to provision an RDS cluster, not just clicked through the console
• You've debugged a production slow query using EXPLAIN ANALYZE and fixed it
• You think "how do I automate this" before "how do I do this manually"
• You're comfortable being on-call and leading database incident response
• You want to build platform capabilities other engineers self-serve, rather than being a bottleneck

What’s in it for you to join MUFG Investor Services? Take a look at our careers site and you’ll find everything you’d expect working with one of the fastest-growing businesses at one of the world’s largest financial groups. Now take another look. Because it’s how we defy expectations that really defines us. You’ll feel that difference in all kinds of ways. Our vibrant CULTURE. Connected team. Love of innovation, laser client focus.

So, why settle for the ordinary? Apply now for your next Brilliantly Different opportunity. We thank all candidates for applying; however, only those proceeding to the interview stage will be contacted.