Platform & DevOps Engineer

About the Role

We are looking for an experienced Platform & DevOps Engineer to join a team responsible for operating and maintaining a highly available cloud platform built on Kubernetes. You will play a key role in ensuring the platform remains secure, reliable, and performant while supporting business-critical applications and APIs.

This position focuses on platform operations, lifecycle management, automation, incident response, and continuous operational improvement.

Key Responsibilities

Kubernetes & Platform Operations

• Operate and maintain Kubernetes clusters in production environments.
• Manage platform components such as ingress controllers, service discovery, and workload identity.
• Troubleshoot Kubernetes issues including pod lifecycle, networking, scheduling, resource utilization, and cluster performance.
• Execute controlled deployments, upgrades, and rollback procedures.

Reliability & Incident Management

• Participate in a 24/7 on-call rotation for critical platform services.
• Respond to incidents, perform troubleshooting, and restore services quickly.
• Conduct Root Cause Analysis (RCA) and implement preventive actions.
• Develop and maintain operational runbooks and documentation.

Observability & Monitoring

• Operate and enhance the platform's observability stack.
• Monitor platform health using metrics, logs, and distributed tracing.
• Improve alert quality while reducing false positives.
• Support incident investigations through telemetry analysis.

Change & Release Management

• Plan and execute platform maintenance and upgrades.
• Follow structured change management processes.
• Ensure platform changes are documented, auditable, and communicated effectively.

Security & Compliance

• Manage operational security controls including RBAC, network segmentation, and secrets management.
• Apply security patches and platform updates.
• Support vulnerability remediation and security audits.

Automation & Platform Improvement

• Automate repetitive operational tasks.
• Promote Infrastructure as Code and GitOps practices.
• Improve operational efficiency through standardization and documentation.

Required Technical Skills

Kubernetes

• Production-grade Kubernetes administration
• Multi-cluster management
• RBAC and least-privilege security
• Network Policies
• Stateful workloads and persistent storage (CSI, PV/PVC)
• Autoscaling (HPA/VPA)
• Pod Security Standards
• Admission Controllers
• Advanced troubleshooting and performance tuning

GitOps & CI/CD

• ArgoCD (advanced administration)
• App-of-Apps pattern
• Sync Waves & Hooks
• Drift detection
• Multi-environment deployment strategies
• Git-based deployment workflows
• YAML-based CI/CD pipelines
• Secure secrets integration using HashiCorp Vault

Packaging & Configuration

• Helm (advanced chart development)
• Library charts
• OCI registries
• Values layering
• Kustomize overlays

Container & Artifact Management

• Docker
• Harbor
• JFrog Artifactory
• Artifact lifecycle and version management

Security

• HashiCorp Vault
• Image vulnerability scanning
• Supply chain security concepts
• TLS and certificate lifecycle management
• RBAC governance

Observability

Experience with:

• OpenTelemetry
• Prometheus or VictoriaMetrics
• Loki
• Tempo
• Grafana
• SLI/SLO implementation
• Alert optimization

Networking

• TCP/IP
• DNS
• TLS / mTLS
• Kubernetes Services
• Ingress
• Reverse Proxies
• API routing
• Network Policies

Automation

• Advanced Bash scripting
• Infrastructure automation mindset

Nice to Have

• Kong API Gateway
• Redis
• PostgreSQL
• MongoDB
• Kargo with ArgoCD