DevOps Engineer (Senior)

About the Role

Key Responsibilities

1. Infrastructure as Code & Cloud Infrastructure

• • Own and evolve the Terraform monorepo, including reusable modules for AWS services such as EKS, RDS, S3, IAM, VPC, Secrets Manager, and CloudWatch.
  • Maintain consistent infrastructure patterns across development, staging, and production environments.
  • Implement Terraform best practices including remote state in S3, module versioning, plan/apply governance, and PR-based reviews.
  • Integrate Crossplane for Kubernetes-native cloud resource provisioning alongside Terraform.
  • Continuously refactor infrastructure code, eliminate duplication, and document architecture decisions.

2. Kubernetes & Helm Management

• • Design, deploy, and operate production workloads on Kubernetes / AWS EKS.
  • Author Helm charts from scratch, including templating, schema validation, values design, and sensible defaults.
  • Maintain and customize upstream Helm charts while keeping configurations clean and documented.
  • Manage the Helm chart release lifecycle including versioning, changelogs, and OCI-based repositories in Harbor.
  • Build and maintain ArgoCD ApplicationSets for consistent deployment across environments.
  • Introduce automated Helm chart testing into CI pipelines.
  • Manage Traefik ingress configuration including routing, middleware, TLS termination, and protected routes.

3. Automation & Developer Tooling

• • Develop production-quality Python tools and internal CLI utilities for infrastructure provisioning, deployment triggers, and operational workflows.
  • Build reusable and composable GitHub Actions workflows and custom actions.
  • Develop Kubernetes Operators / Controllers to automate provisioning, health management, and operational workflows.
  • Automate operational activities for self-hosted Apache Kafka, including topic provisioning, consumer-lag monitoring, and related tooling.
  • Automate Harbor registry workflows including image scanning policies, lifecycle management, and robot-account administration.

4. CI/CD & GitOps

• • Own end-to-end CI/CD workflows using GitHub Actions, from code validation and testing through Docker image creation, registry push, ArgoCD sync, and EKS deployment.
  • Develop and maintain Argo Workflows for multi-step pipeline orchestration, batch processing, and post-deployment activities.
  • Enforce GitOps practices where environment and infrastructure changes are managed through version-controlled repositories.
  • Build environment promotion workflows with approval gates, rollback mechanisms, and deployment-status reporting.
  • Integrate identity and access controls using Keycloak and Microsoft Identity Provider / Azure AD / Entra ID.

5. Observability, Security & Reliability

• • Implement Prometheus metrics, alerts, and Grafana dashboards for platform visibility, SLO monitoring, and capacity planning.
  • Integrate AWS GuardDuty and Security Hub findings into automated alerting and remediation workflows.
  • Manage secrets securely using AWS Secrets Manager.
  • Implement and maintain least-privilege IAM policies.
  • Embed security checks and container image scanning into CI/CD workflows.
  • Support reliable and secure production infrastructure through proactive monitoring, debugging, and automation.

6. Cross-Functional Collaboration

• • Work closely with full-stack engineers, data engineers, and product teams to deliver reliable platform capabilities.
  • Participate in architecture discussions, code reviews, troubleshooting, and postmortems.
  • Create and maintain clear runbooks, architecture decision records, technical documentation, and onboarding material.

Key Deliverables

• • Production-grade Terraform modules covering core AWS platform infrastructure.
  • A structured and reusable Helm chart library with versioning, validation, CI testing, and ArgoCD-managed delivery.
  • Reusable GitHub Actions workflows and custom actions adopted across engineering teams.
  • Internal Python CLI tools, operators, and automation utilities that reduce manual operational effort.
  • Reliable GitOps-based deployments across development, staging, and production environments.
  • Automated infrastructure and operational workflows using Terraform, Crossplane, ArgoCD, and Argo Workflows.
  • Observable and alert-ready Prometheus/Grafana monitoring for critical platform components.
  • Secure secrets, identity, and access-management workflows.
  • Well-maintained runbooks, architecture documentation, and operational procedures.

Qualifications

• • 5–8 years of professional experience in DevOps, Platform Engineering, SRE, or infrastructure engineering with a strong software-development focus.
  • Strong Python programming skills with the ability to write clean, tested, maintainable, and reviewable production code.
  • Hands-on Terraform experience including module authoring, monorepo patterns, remote state using S3, and code-review discipline.
  • Experience authoring Helm charts from scratch, including templating, schema validation, values design, and release management.
  • Deep experience with GitHub Actions, including custom actions, reusable workflows, composite actions, and secrets management.
  • Strong production experience with Kubernetes / AWS EKS, including deployments, RBAC, networking, debugging, and Helm-based release management.
  • Hands-on exposure to Crossplane for Kubernetes-native cloud provisioning.
  • Experience with ArgoCD and Argo Workflows for GitOps-based delivery and workflow orchestration.
  • Solid understanding of Docker and container-image best practices.

Technical Skills

• • Terraform — monorepo, reusable modules, remote state using S3
  • Crossplane — Kubernetes-native cloud provisioning
  • AWS — EKS, EC2, RDS (PostgreSQL), S3, IAM, VPC, Secrets Manager, CloudWatch, GuardDuty, Security Hub

• • Docker
  • Kubernetes / AWS EKS
  • Helm — chart authoring, versioning, OCI registry
  • ArgoCD — GitOps, ApplicationSets
  • Argo Workflows — pipeline orchestration and batch jobs
  • Traefik — ingress, middleware, TLS
  • Harbor — private container registry and image scanning

• • GitHub Actions — custom actions, reusable workflows, composite actions
  • Python — CLI tooling, operators, and automation
  • Kubernetes Operators / Controllers — controller-runtime / kubebuilder

• • Apache Kafka — self-hosted cluster operations, topic management, and consumer-lag monitoring

• • Prometheus
  • Grafana
  • Metrics, dashboards, alerting, and platform monitoring

• • Keycloak — SSO, OIDC
  • Microsoft Identity Provider — Azure AD / Entra ID
  • AWS Secrets Manager
  • AWS IAM
  • GuardDuty
  • Security Hub

Soft Skills

• • Strong analytical and problem-solving mindset with the ability to troubleshoot complex production systems.
  • Strong ownership and accountability for infrastructure and platform reliability.
  • Clear written and verbal communication skills.
  • Ability to collaborate effectively with engineering, product, and cross-functional teams.
  • Strong code-review and documentation discipline.
  • Proactive approach toward automation and continuous improvement.
  • Ability to design developer-friendly platforms and self-service tooling.
• Strong focus on reliability, security, scalability, and maintainability.