DevOps Engineer – Cloud & Kubernetes Specialist

About the role

We are looking for a seasoned DevOps Engineer to design, deploy and operate production‑grade AWS cloud infrastructure. You will work closely with solution architects and program delivery teams to ensure our multi‑tenant Kubernetes environments are secure, scalable and cost‑effective.

Key responsibilities

• Design, deploy and manage AWS services (EKS, EC2, RDS, Lambda, Step Functions, Route53, CloudFront, WAF, KMS, IAM).
• Operate multi‑tenant Kubernetes clusters with autoscaling, Calico network policies, Kyverno governance and Karpenter node provisioning.
• Implement Infrastructure as Code using Terraform with reusable modules across environments.
• Build and maintain CI/CD pipelines with GitLab CI and ArgoCD following GitOps principles.
• Establish end‑to‑end observability using Prometheus, Grafana, Loki, Thanos, Datadog, Dynatrace and CloudWatch.
• Configure secure AWS networking (VPC, VPN, NAT, Transit Gateway) and enforce IAM, WAF and KMS policies.
• Automate Linux system configuration and patching with Ansible and Bash scripts.
• Lead cost‑optimization initiatives and perform production incident troubleshooting.
• Support security observability initiatives, including SIEM integration (Wazuh) and AI/LLM‑enabled tooling.

Required profile

• Minimum 4 years of hands‑on DevOps or Cloud Infrastructure engineering experience in production environments.
• Proven ability to manage complex, multi‑tenant Kubernetes clusters at scale.
• Strong problem‑solving skills and a focus on automation and reliability.

Required skills

• AWS services (EKS, EC2, RDS, Lambda, Step Functions, Route53, CloudFront, WAF, KMS, IAM).
• Kubernetes/EKS, Calico, Kyverno, Karpenter.
• Terraform (IaC), reusable module design.
• GitLab CI, ArgoCD, AWS CodeBuild/CodeDeploy.
• Prometheus, Grafana, Loki, Thanos, Datadog, Dynatrace, CloudWatch.
• VPC, VPN, NAT Gateway, Transit Gateway, IAM, WAF, KMS.
• Linux administration (Amazon Linux, RHEL/CentOS), Bash, Ansible.
• Rook CEPH or equivalent distributed storage.
• Optional: AI/LLM deployment, prompt engineering.