Backend & DevOps Engineer (Mid-Senior)

About the role

Go3 is the largest OTT platform in the Baltics, with several web products that handle subscriptions, payments, identity verification and e-signatures. This role turns a product need into a tested Python Lambda behind a Terraform-managed API Gateway route, shipped through a pipeline you maintain, into an AWS account you understand. There is no separate infrastructure team and no hand-off to another person.

Key responsibilities

• Build and maintain small, single-purpose Python Lambda functions for subscription, payment, identity verification and document signing, each with its own tests.
• Define the REST API contract used by the frontend team, with JWT/JWKS authentication enforced at the API Gateway layer.
• Integrate vendor APIs (billing, OTT identity, eID, e-signing) and own their authentication, error handling and retry behavior.
• Own the Terraform for API Gateway, Lambda, data store, KMS, CDN and storage, promoting changes safely across environments.
• Maintain the shared Terragrunt platform across AWS accounts, the OIDC trust between GitHub Actions and AWS, and onboarding of new services.
• Protect customer data with encryption at rest and least-privilege IAM for every function.
• Monitor, debug and fix production issues, and evolve the shared libraries and error conventions used by all functions.

Required profile

• Production Python experience, ideally with AWS Lambda/serverless.
• Designed REST APIs consumed by a separate frontend team.
• Integrated third-party APIs and handled their failure modes (timeouts, retries, idempotency).
• Provisioned real AWS infrastructure with Terraform (Lambda, API Gateway, IAM, KMS, S3/CloudFront, managed data store).
• Owned CI/CD pipelines (GitHub Actions or equivalent), including OIDC or similar cloud authentication.
• Worked across multiple AWS accounts or environments; unit testing as default practice.
• Knowledge of JWT authentication and encryption at rest.
• Openness to learning the vendors and account structure on the job, and honesty about when an infrastructure change is unsafe to ship.

Required skills

• AWS Lambda and Terraform (mid or senior level)
• REST APIs, JWT authentication, unit testing
• Nice to have: Terragrunt, multi-account AWS, DynamoDB, subscription billing, eID/e-signature providers, shared library design, media/OTT, AI-assisted development workflows

What we offer

• International team and mindset, internal/external events, online trainings and conferences.
• Free access to Go3 content.
• Health insurance after the probation period.
• Salary from 4,000 to 5,800 EUR gross, depending on competencies and experience.

Location: Tallinn (hybrid preferred), Vilnius or Riga (hybrid) also work, and remote within the Baltics or the EU may be considered. Applications are sent through the company's application process.