The Multi Geo / Multi Cloud Application Architect at OpenFX owns the design and integrity of a payments and FX platform that must operate across multiple geographic regions and cloud environments without compromising on availability, data sovereignty, latency, or regulatory compliance. This is not a role that designs architecture in the abstract. You are responsible for decisions that determine whether a settlement clears in London during an AWS eu-west-1 degradation, whether a client in the UAE can transact without their data leaving the region, and whether OpenFX can migrate between cloud providers without a full platform rewrite.

Cross-border payments and FX are inherently distributed problems. Transactions originate in one jurisdiction, clear through correspondent networks in another, and settle in a third. The infrastructure that supports this must match that complexity with equivalent architectural rigour. You are the person who ensures it does.

You operate at the intersection of distributed systems engineering, cloud infrastructure, and financial regulatory compliance. You work closely with the Principal Architect, Platform team, pod-level Tech Leads, and the Security and Compliance functions to define standards, validate designs, and resolve the hardest architectural trade-offs the organisation faces.

Key Skills

Distributed Systems & Cloud Architecture

• Deep expertise in multi-region application design: active-active and active-passive topologies, global load balancing, regional failover, and cross-region replication strategies
• Strong hands-on experience with at least two major cloud providers (AWS, GCP, Azure) and a clear understanding of where provider capabilities diverge in ways that matter for financial workloads
• Proficiency in cloud-agnostic infrastructure patterns: Kubernetes (multi-cluster federation, cross-region networking), service mesh architectures, and infrastructure-as-code tooling (Terraform, Pulumi)
• Solid understanding of networking fundamentals at scale: BGP, Anycast, CDN strategies, private interconnects, and east-west traffic management across regions
• Familiarity with distributed data consistency models: eventual consistency, strong consistency trade-offs, CRDTs, and conflict resolution strategies in globally distributed databases

Financial Domain & Compliance Architecture

• Understanding of data residency and sovereignty requirements across key OpenFX operating jurisdictions: UAE (ADGM / DFSA), UK (FCA), EU (GDPR / PSD2), and other relevant frameworks
• Ability to design data partitioning and routing architectures that enforce jurisdictional boundaries without fragmenting the platform into isolated silos
• Familiarity with financial infrastructure concepts: payment rail latency, settlement finality, FX liquidity provider connectivity, and correspondent banking dependencies
• Experience ensuring audit logging, data lineage, and access controls work coherently across multi-cloud, multi-region environments

Engineering Craft & Architecture Practice

• Ability to produce ADRs, reference architectures, and design documents that are precise enough for engineers to implement from and clear enough for product and compliance to validate against
• Strong systems thinking: able to reason about failure modes, blast radius, and cascade effects in complex distributed systems
• Experience running architecture review processes across multiple independent teams

Collaboration & Communication

• Communicates complex architectural constraints and trade-offs clearly to non-technical stakeholders
• Influences through reasoning and evidence, not authority; builds consensus across pod-level Tech Leads and EMs
• Comfortable operating with significant ambiguity at the frontier of what the platform needs to become

Roles & Responsibilities

Multi-Region Architecture Design & Ownership

• Define and maintain the reference architecture for multi-region deployment: traffic routing, data replication, failover behaviour, and regional isolation boundaries
• Own architectural decisions that govern how services are deployed, scaled, and failed over across regions; ensure those decisions are documented and revisited as the platform evolves
• Design for regional independence: the ability to isolate a region for regulatory or operational reasons without degrading global capability
• Define standards for how new services must be designed to operate in a multi-region context from day one, not as a retrofit

Multi-Cloud Strategy & Portability

• Maintain an architecture that avoids hard coupling to any single cloud provider for critical platform functions
• Evaluate where to leverage managed cloud services versus cloud-agnostic alternatives, with explicit reasoning about portability, cost, and operational overhead
• Lead design of abstraction layers and platform primitives (with the Platform pod) that allow services to run across cloud environments without service-level re-engineering
• Define and test cloud provider failover runbooks; ensure provider-level degradation can be responded to within defined RTO and RPO targets

Data Sovereignty & Regulatory Architecture

• Design data routing, storage, and processing architectures that enforce jurisdictional data residency requirements across all regions OpenFX operates in
• Work with Compliance and Legal to translate regulatory obligations into concrete architectural constraints enforced at infrastructure and application layer
• Define the data classification framework for multi-region environments: what replicates globally, what stays regionally isolated, what requires explicit consent to move
• Ensure observability infrastructure produces the evidence needed to demonstrate data residency compliance to regulators

Platform Reliability & Resilience

• Define availability and resilience targets; ensure the architecture is designed to meet them under realistic failure scenarios, not just nominal conditions
• Lead chaos engineering and failure mode analysis exercises to validate that failover, replication, and multi-cloud fallback behave as designed
• Own the observability architecture across multi-region, multi-cloud deployments: unified logging, distributed tracing, and alerting that works coherently regardless of where workloads run
• Establish SLO / SLA frameworks that reflect the availability and latency commitments OpenFX makes to clients and liquidity providers

Cross-Team Architecture Governance

• Conduct architecture reviews for significant features, integrations, and infrastructure changes across all pods; ensure multi-region and multi-cloud implications are addressed before build begins
• Maintain and evolve the ADR library; ensure decisions are current and discoverable by engineers across the organisation
• Work with pod Tech Leads to identify and address architectural drift where production systems have deviated from intended design
• Contribute to the Platform pod's roadmap: identify shared infrastructure investments that reduce the cost of multi-region operation for all pods

What Success Looks Like

• A regional cloud provider degradation does not cause a platform-wide outage; failover occurs within defined targets and clients are not materially impacted
• OpenFX can demonstrate to regulators in any operating jurisdiction that client data complies with local residency requirements, backed by architecture rather than manual controls
• Pod engineers have clear standards for building multi-region-ready features and do not re-solve distributed systems problems that have already been solved at the platform level
• The platform is not locked to any single cloud provider; a migration decision can be executed as an operational programme, not an architectural rewrite
• Architecture reviews are seen as a quality accelerator by engineering teams, not a bottleneck
• You are the person the organisation turns to when the hardest infrastructure trade-offs need to be resolved, and you resolve them with clarity and evidence

The Problem

OpenFX processes billions of dollars in transaction volume every month across global corridors. Our systems power pricing, transaction execution, settlement, reconciliation, and risk management. These systems must remain available, observable, and correct under retries, partial failures, external partner downtime, and sudden traffic spikes.

As volume scales from billions to tens of billions, operational complexity increases faster than headcount. Without strong DevOps ownership, we risk silent failures, slow incident response, fragile deployments, and growing operational debt.

We need DevOps Engineers who can own production reliability, design safe deployment systems, and reduce operational risk through automation and strong engineering judgment.

If we do not invest in this now, engineering velocity and system trust will degrade.

What You Will Actually Do & Own

In your first 6 to 12 months, you will:

1. Own reliability and operability of 1 to 2 production services, including services on the money path.
2. Design and maintain CI/CD pipelines that enable frequent, safe deployments.
3. Define and improve observability across metrics, logs, and alerts.
4. Participate in on call rotations and lead incident response when needed.
5. Identify and reduce operational risk by improving resilience and failure handling.
6. Automate repetitive operational workflows such as deployments, rollbacks, and recovery steps.
7. Partner with Backend, Security, and Infra teams to translate system requirements into infrastructure solutions
8. Improve reliability metrics such as availability, MTTR, alert quality, and incident frequency.

What Success Looks Like

You will be measured on:

• System reliability: Services meet defined SLOs for availability and latency
• Operational clarity: Issues are detected via monitoring rather than customer reports
• Incident handling: Incidents are mitigated quickly with limited blast radius
• Automation: Manual operational work decreases over time
• Judgment: Infrastructure tradeoffs are deliberate and defensible
• Trust: Engineering teams rely on the platforms you operate

Requirements

Required (Non negotiable)

• 3 to 7 years experience operating production systems
• Strong fundamentals in Linux, networking, and cloud infrastructure
• Experience running containerized workloads in production
• Hands on experience with CI/CD pipelines
• Experience designing monitoring and alerting systems
• Proven experience handling production incidents
• Ability to clearly explain operational decisions

Preferred (Accelerates ramp, not required)

• Experience with Kubernetes or similar orchestration platforms
• Infrastructure as Code experience (Terraform or equivalent)
• Operational experience with PostgreSQL, Redis, Kafka, or similar systems
• Experience in fintech or high transaction volume systems
• Security and compliance exposure
• Experience mentoring junior engineers

Why This Role

Impact: You operate systems that move real money.

Ownership: You own reliability outcomes, not just tooling.

Learning: You work on complex, failure prone systems.

Scope: You help define DevOps standards as the company scales.

Access: You work closely with senior engineers and leadership.

About Us

OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Faction, NfX, Accomplice, and other top-tier investors.

Role Overview

As an InfoSec Engineer, you will take ownership of securing OpenFX's applications, cloud infrastructure, and Kubernetes environments. You will design and enforce defenses across AWS and web applications, manage WAFs and firewalls, and drive security automation. This is a hands-on, high-impact role where you will directly strengthen the resilience of our financial infrastructure and shape our security posture as we scale. This role is ideal for a technically skilled security engineer with deep experience in application and cloud security, who thrives in high-growth environments and enjoys solving complex problems through both technical execution and collaboration.

Key Responsibilities

• Perform web application security testing (manual and automated), identify vulnerabilities, and provide remediation guidance
• Conduct manual and automated code reviews across backend and frontend services, focusing on authentication, authorization, cryptography, and data protection
• Secure AWS accounts and resources by implementing IAM best practices, network segmentation, encryption, and monitoring
• Harden Kubernetes clusters, secure workloads, and integrate tools for runtime protection and policy enforcement
• Configure and tune WAF security rules, monitor traffic, and ensure high availability of perimeter defenses (AWS WAF, Akamai, Cloudflare)
• Plan and execute targeted internal penetration tests, vulnerability assessments, and adversarial simulations
• Design and build in-house tools and scripts (Python, Bash, Go, etc.) for vulnerability scanning, log analysis, and automated alerting
• Partner with software and DevOps teams to remediate vulnerabilities, prioritize risks, and influence secure architecture decisions
• Contribute to security policies, standards, and incident playbooks to align with compliance requirements
• Research emerging threats, evaluate new tools, and proactively recommend improvements to strengthen defenses

What We're Looking For

Required

• 4+ years of professional experience in Information Security, Application Security, or Cloud Security
• Solid understanding of security fundamentals, networking, operating systems, and cloud infrastructure
• Hands-on experience with scripting/programming for automation (Python, Go, Bash, or similar)
• Strong problem-solving ability, able to analyze risks and propose pragmatic security solutions
• Clear communication and influencing skills: can explain risks, back opinions with context/data, and build trust with peers
• Demonstrated ability to work independently with minimal guidance, while collaborating effectively in a team

Preferred

• Experience with manual and automated AppSec testing tools (Burp Suite, ZAP, SAST/DAST)
• Familiarity with secure SDLC practices and developer enablement
• Strong hands-on exposure to AWS Security services (IAM, GuardDuty, Config, Security Hub, KMS)
• Practical experience with Kubernetes security tools (OPA/Gatekeeper, Kyverno, Falco, Aqua, Prisma)
• Familiarity with DevSecOps workflows and CI/CD pipeline integration
• Exposure to incident response or digital forensics
• Relevant certifications a plus (OSCP, OSWE, AWS Security Specialty, CISSP)

What We Offer

• Competitive salary and benefits package.
• Equity in a rapidly growing company.
• Opportunity to work in a fast-paced startup at the forefront of fintech innovation.
• Opportunity to make a significant impact on global financial infrastructure.
• Collaborative work culture with emphasis on personal and professional growth.

We are committed to building a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

About Us

OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Faction, NfX, Accomplice, and other top-tier investors.

Role Overview

OpenFX processes billions of dollars in transaction volume every month across global corridors, connecting banks, liquidity providers, and third-party systems in real time. As transaction volume and geographic footprint scale, so does our threat surface. We need a SOC Engineer who can build and own a high-performance security operations function—one that detects early, responds decisively, reduces systemic risk, and scales ahead of growth. In fintech, a delayed alert is money lost and a missed signal is reputational damage. Security must be operational, measurable, and deeply integrated into how we ship and scale.

Key Responsibilities

• Build and operationalize a fintech-grade SOC function with monitoring across cloud, infrastructure, identity, endpoints, and transaction systems
• Establish detection coverage aligned to MITRE ATT&CK and fraud threat models
• Lead incident response end-to-end: containment, eradication, recovery, and post-incident reviews with clear root cause analysis
• Minimize blast radius and reduce mean time to detect (MTTD) and respond (MTTR)
• Design high-signal alerting strategy to reduce noise and improve SIEM use cases, telemetry coverage, and correlation rules
• Define and track security KPIs and KRIs including detection coverage, false positive rate, and incident severity trends
• Integrate security review into new feature launches and ensure logging, telemetry, and auditability are designed upfront
• Align security monitoring with transaction flows, reconciliation pipelines, and money movement controls
• Detect abnormal patterns in account behavior, API misuse, and privilege escalation
• Hire, mentor, and level up analysts and detection engineers; define escalation paths and on-call processes
• Ensure SOC processes support ISO 27001, PCI DSS, NIST, and regulatory requirements with defensible evidence for audits

What We're Looking For

Required

• 8 to 12+ years in cybersecurity operations
• Proven experience building or maturing a SOC in a complex environment
• Deep experience in incident response and security investigations
• Hands-on experience with SIEM platforms and detection rule engineering
• Strong knowledge of cloud security (AWS/GCP/Azure), identity systems, and SaaS telemetry
• Experience defining KPIs, dashboards, and operational metrics
• Strong leadership and team management experience
• Ability to communicate risk clearly to executives and non-technical stakeholders

Preferred

• Experience in fintech, payments, or high-transaction financial systems
• Knowledge of SOC 2, ISO 27001, NIST, CIS
• Experience with EDR, SOAR, DLP, CASB, MDM, Email Security
• Familiarity with fraud detection models and transaction risk monitoring
• Experience in Product Security and CI/CD Security
• CISSP, CISM, CISA, or equivalent certifications

What We Offer

• Competitive salary and benefits package.
• Equity in a rapidly growing company.
• Opportunity to work in a fast-paced startup at the forefront of fintech innovation.
• Opportunity to make a significant impact on global financial infrastructure.
• Collaborative work culture with emphasis on personal and professional growth.

We are committed to building a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

About Us

OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Faction, NfX, Accomplice, and other top-tier investors.

Role Overview

OpenFX is expanding globally in a heavily regulated financial environment. As we scale into new regions, regulators, auditors, and enterprise partners expect provable, continuously operating security controls. We need someone who can turn regulatory requirements into real, running controls—and then prove to auditors that they work. You will own the security controls and evidence that regulators and auditors care about, end to end, ensuring compliance is built into the platform rather than bolted on after the fact.

Key Responsibilities

• Design, implement, and maintain technical and operational controls for SOC 2, ISO 27001, GDPR, DORA, and future regional requirements
• Ensure controls are not just documented, but actually enforced in AWS, Kubernetes, and application layers
• Translate regulatory language into concrete security mechanisms in partnership with Legal and Compliance
• Own audit preparation, evidence collection, walkthroughs, and remediation tracking
• Build repeatable, automated evidence pipelines instead of last-minute scrambles
• Work with engineering to design systems that are secure by default and defensible to regulators
• Ensure logging, access controls, encryption, monitoring, and change management meet regulatory expectations
• Build tooling and scripts to continuously validate controls (access reviews, logging coverage, config drift)
• Reduce manual compliance work over time by pushing checks into code and infrastructure
• Monitor new regulations and assess technical impact across the platform

What We're Looking For

Required

• 6+ years in security engineering, cloud security, or compliance-focused security roles
• Hands-on experience supporting SOC 2, ISO 27001, GDPR, DORA, or similar regulatory frameworks
• Ability to translate regulatory requirements into technical controls
• Strong working knowledge of AWS security fundamentals (IAM, logging, encryption, networking)
• Comfortable owning auditor interactions and explaining systems clearly
• Experience building or automating security/compliance processes (Python, Bash, Go, etc.)

Preferred

• Experience securing Kubernetes environments
• Familiarity with AppSec tooling (SAST/DAST, manual testing)
• Experience with AWS security services (GuardDuty, Config, Security Hub)
• Prior work in fintech, payments, or regulated infrastructure
• Security or compliance certifications (CISSP, CISA, ISO 27001 Lead Implementer, AWS Security)

What We Offer

• Competitive salary and benefits package.
• Equity in a rapidly growing company.
• Opportunity to work in a fast-paced startup at the forefront of fintech innovation.
• Opportunity to make a significant impact on global financial infrastructure.
• Collaborative work culture with emphasis on personal and professional growth.

We are committed to building a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

About Us

OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Faction, NfX, Accomplice, and other top-tier investors.

Role Overview

OpenFX processes billions of dollars in transaction volume across global corridors. Every decision around pricing, risk, liquidity, reconciliation, and compliance depends on accurate, timely, and trustworthy data. We need Data Engineers who can build reliable data pipelines, ensure data correctness end to end, and make data usable for analytics, risk, and operations at scale. You will own critical data infrastructure that directly powers our financial operations.

Key Responsibilities

• Own 1 to 2 critical data pipelines that ingest, transform, and publish production data
• Design data models that are accurate, auditable, and easy to consume
• Build reliable ingestion pipelines from transactional systems and external partners
• Ensure data correctness and freshness through validation, monitoring, and backfills
• Handle late-arriving, duplicate, and inconsistent data safely
• Partner with Backend, Analytics, Risk, and Ops teams to translate requirements into robust data solutions
• Improve core data metrics such as pipeline reliability, data latency, and reconciliation accuracy
• Automate pipeline operations including retries, recovery, and backfills

What We're Looking For

Required

• 3 to 7 years experience in data engineering or backend data systems
• Strong SQL and data modeling fundamentals
• Experience building batch and/or streaming pipelines
• Experience working with relational databases and data warehouses
• Experience handling schema evolution and backfills
• Understanding of data quality, validation, and monitoring
• Ability to clearly explain data tradeoffs

Preferred

• Experience with Kafka, Spark, or Flink
• Experience with modern warehouses (BigQuery, Snowflake, Redshift)
• Experience with Airflow or similar orchestration tools
• Experience in fintech or regulated domains
• Familiarity with event-driven architectures
• Experience mentoring junior engineers

What We Offer

• Competitive salary and benefits package.
• Equity in a rapidly growing company.
• Opportunity to work in a fast-paced startup at the forefront of fintech innovation.
• Opportunity to make a significant impact on global financial infrastructure.
• Collaborative work culture with emphasis on personal and professional growth.

We are committed to building a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

About Us

OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Faction, NfX, Accomplice, and other top-tier investors.

Role Overview

As our systems grow in complexity and volume, we need an SDET Engineer who can go beyond writing scripts to architecting test frameworks that are scalable, stable, and AI-leveraged. You will ensure that our high-velocity deployment pipeline—moving real money—remains robust while reducing manual intervention to near zero. This is a hands-on, high-impact role where you will directly strengthen the reliability of our financial infrastructure.

Key Responsibilities

• Design and optimize high-performance automation frameworks using Java/RestAssured and JS/Playwright
• Own the integration of tests into CI/CD pipelines and manage containerized test environments (Docker/Kubernetes)
• Architect load and stress testing suites using JMeter or k6 to simulate high-traffic financial events
• Establish patterns for the team to use AI (Copilot, LLMs) for synthetic data generation and automated Root Cause Analysis
• Develop complex test scenarios for transaction idempotency, ledger consistency, and financial calculation validation
• Provide technical guidance and code reviews to ensure high standards of clean, reliable code
• Drive 100% automation coverage of critical-path financial flows within the same sprint
• Achieve 40%+ reduction in regression time through parallelization and AI-assisted scripting

What We're Looking For

Required

• 3 to 7 years of experience in SDET or Backend Development roles
• Expert proficiency in Java, JavaScript, or Python
• Proven experience building or significantly extending automation frameworks (RestAssured/Playwright)
• Strong understanding of relational databases (SQL) and API security (OAuth, HMAC signing)
• Expert knowledge of Maven, TestNG, and Git (complex branching/merging)
• Strong fundamentals in Data Structures and Algorithms

Preferred

• Deep familiarity with AWS (S3, CloudWatch, EKS)
• Experience managing test runners in Docker or Kubernetes
• Hands-on experience with JMeter or k6 for load testing
• Proactive use of AI tools to increase engineering velocity

What We Offer

• Competitive salary and benefits package.
• Equity in a rapidly growing company.
• Opportunity to work in a fast-paced startup at the forefront of fintech innovation.
• Opportunity to make a significant impact on global financial infrastructure.
• Collaborative work culture with emphasis on personal and professional growth.

We are committed to building a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.