DevOps Engineer (Senior)

•

• Own and evolve the Terraform monorepo , including reusable modules for AWS services such as EKS, RDS, S3, IAM, VPC, Secrets Manager, and CloudWatch.
• Maintain consistent infrastructure patterns across development, staging, and production environments.
• Implement Terraform best practices including remote state in S3, module versioning, plan/apply governance, and PR-based reviews .
• Integrate Crossplane for Kubernetes-native cloud resource provisioning alongside Terraform.
• Continuously refactor infrastructure code, eliminate duplication, and document architecture decisions.

•

• Design, deploy, and operate production workloads on Kubernetes / AWS EKS .
• Author Helm charts from scratch , including templating, schema validation, values design, and sensible defaults.
• Maintain and customize upstream Helm charts while keeping configurations clean and documented.
• Manage the Helm chart release lifecycle including versioning, changelogs, and OCI-based repositories in Harbor .
• Build and maintain ArgoCD ApplicationSets for consistent deployment across environments.
• Introduce automated Helm chart testing into CI pipelines.
• Manage Traefik ingress configuration including routing, middleware, TLS termination, and protected routes.

•

• Develop production-quality Python tools and internal CLI utilities for infrastructure provisioning, deployment triggers, and operational workflows.
• Build reusable and composable GitHub Actions workflows and custom actions.
• Develop Kubernetes Operators / Controllers to automate provisioning, health management, and operational workflows.
• Automate operational activities for self-hosted Apache Kafka , including topic provisioning, consumer-lag monitoring, and related tooling.
• Automate Harbor registry workflows including image scanning policies, lifecycle management, and robot-account administration.

•

• Own end-to-end CI/CD workflows using GitHub Actions , from code validation and testing through Docker image creation, registry push, ArgoCD sync, and EKS deployment.
• Develop and maintain Argo Workflows for multi-step pipeline orchestration, batch processing, and post-deployment activities.
• Enforce GitOps practices where environment and infrastructure changes are managed through version-controlled repositories.
• Build environment promotion workflows with approval gates, rollback mechanisms, and deployment-status reporting.
• Integrate identity and access controls using Keycloak and Microsoft Identity Provider / Azure AD / Entra ID .

•

• Implement Prometheus metrics, alerts, and Grafana dashboards for platform visibility, SLO monitoring, and capacity planning.
• Integrate AWS GuardDuty and Security Hub findings into automated alerting and remediation workflows.
• Manage secrets securely using AWS Secrets Manager .
• Implement and maintain least-privilege IAM policies.
• Embed security checks and container image scanning into CI/CD workflows.
• Support reliable and secure production infrastructure through proactive monitoring, debugging, and automation.

•

• Work closely with full-stack engineers, data engineers, and product teams to deliver reliable platform capabilities.
• Participate in architecture discussions, code reviews, troubleshooting, and postmortems.
• Create and maintain clear runbooks, architecture decision records, technical documentation, and onboarding material.

•

• Production-grade Terraform modules covering core AWS platform infrastructure.
• A structured and reusable Helm chart library with versioning, validation, CI testing, and ArgoCD-managed delivery.
• Reusable GitHub Actions workflows and custom actions adopted across engineering teams.
• Internal Python CLI tools, operators, and automation utilities that reduce manual operational effort.
• Reliable GitOps-based deployments across development, staging, and production environments.
• Automated infrastructure and operational workflows using Terraform, Crossplane, ArgoCD, and Argo Workflows .
• Observable and alert-ready Prometheus/Grafana monitoring for critical platform components.
• Secure secrets, identity, and access-management workflows.
• Well-maintained runbooks, architecture documentation, and operational procedures.

•

• 5–8 years of professional experience in DevOps, Platform Engineering, SRE, or infrastructure engineering with a strong software-development focus.
• Strong Python programming skills with the ability to write clean, tested, maintainable, and reviewable production code.
• Hands-on Terraform experience including module authoring, monorepo patterns, remote state using S3, and code-review discipline.
• Experience authoring Helm charts from scratch , including templating, schema validation, values design, and release management.
• Deep experience with GitHub Actions , including custom actions, reusable workflows, composite actions, and secrets management.
• Strong production experience with Kubernetes / AWS EKS , including deployments, RBAC, networking, debugging, and Helm-based release management.
• Hands-on exposure to Crossplane for Kubernetes-native cloud provisioning.
• Experience with ArgoCD and Argo Workflows for GitOps-based delivery and workflow orchestration.
• Solid understanding of Docker and container-image best practices.

•

• Terraform — monorepo, reusable modules, remote state using S3
• Crossplane — Kubernetes-native cloud provisioning
• AWS — EKS, EC2, RDS (PostgreSQL), S3, IAM, VPC, Secrets Manager, CloudWatch, GuardDuty, Security Hub

•

• Docker
• Kubernetes / AWS EKS
• Helm — chart authoring, versioning, OCI registry
• ArgoCD — GitOps, ApplicationSets
• Argo Workflows — pipeline orchestration and batch jobs
• Traefik — ingress, middleware, TLS
• Harbor — private container registry and image scanning

•

• GitHub Actions — custom actions, reusable workflows, composite actions
• Python — CLI tooling, operators, and automation
• Kubernetes Operators / Controllers — controller-runtime / kubebuilder

•

• Apache Kafka — self-hosted cluster operations, topic management, and consumer-lag monitoring

•

• Prometheus
• Grafana
• Metrics, dashboards, alerting, and platform monitoring

•

• Keycloak — SSO, OIDC
• Microsoft Identity Provider — Azure AD / Entra ID
• AWS Secrets Manager
• AWS IAM
• GuardDuty
• Security Hub

•

• Strong analytical and problem-solving mindset with the ability to troubleshoot complex production systems.
• Strong ownership and accountability for infrastructure and platform reliability.
• Clear written and verbal communication skills.
• Ability to collaborate effectively with engineering, product, and cross-functional teams.
• Strong code-review and documentation discipline.
• Proactive approach toward automation and continuous improvement.
• Ability to design developer-friendly platforms and self-service tooling.

• Strong focus on reliability, security, scalability, and maintainability.