DevOps Engineer (Senior)

<strong>Qualifications<br><br></strong><ul><li>5–8 years of professional experience in DevOps, platform engineering, or infrastructure with a strong software development focus.</li><li>Strong Python programming skills — you write clean, tested, reviewable code, not just one-off scripts.</li><li>Hands-on Terraform experience: module authoring, monorepo patterns, remote state (S3), and code review discipline.</li><li>Helm chart authoring from scratch — templating, schema validation, values design, and release management.</li><li>Deep GitHub Actions experience: custom actions, reusable workflows, composite actions, and secrets management.</li><li>Production Kubernetes/EKS experience: deployments, RBAC, networking, debugging, and Helm-based release management.</li><li>Crossplane for Kubernetes-native cloud resource provisioning.</li><li>ArgoCD and Argo Workflows for GitOps delivery and pipeline orchestration.</li><li>Solid understanding of Docker and container image best practices.<br><br></li></ul><strong>Technologies You Will Work On<br><br></strong><strong>Infrastructure & IaC<br><br></strong><ul><li>Terraform (monorepo, modules, remote state — S3)</li><li>Crossplane (Kubernetes-native cloud provisioning)</li><li>AWS — EKS, EC2, RDS (PostgreSQL), S3, IAM, VPC, Secrets Manager, CloudWatch, GuardDuty, Security Hub<br><br></li></ul><strong>Containers & Orchestration<br><br></strong><ul><li>Docker</li><li>Kubernetes / AWS EKS</li><li>Helm (chart authoring, versioning, OCI registry)</li><li>ArgoCD (GitOps, ApplicationSets)</li><li>Argo Workflows (pipeline orchestration, batch jobs)</li><li>Traefik (ingress, middleware, TLS)</li><li>Harbor (private container registry, image scanning)<br><br></li></ul><strong>CI/CD & Automation<br><br></strong><ul><li>GitHub Actions (custom actions, reusable workflows)</li><li>Python (CLI tooling, operators, automation scripts)</li><li>Kubernetes Operators / Controllers (controller-runtime / kubebuilder)<br><br></li></ul><strong>Messaging & Data<br><br></strong><ul><li>Apache Kafka (self-hosted — topic management, consumer lag monitoring)<br><br></li></ul><strong>Observability<br><br></strong><ul><li>Prometheus + Grafana (metrics, dashboards, alerting)<br><br></li></ul><strong>Security & Identity<br><br></strong><ul><li>Keycloak (SSO, OIDC)</li><li>Microsoft Identity Provider (Azure AD / Entra ID)</li><li>AWS Secrets Manager</li></ul>