AWS DevOps Engineer

About Us:

Founded on the grounds of innovation – iXceed Solutions , is an ISO certified, leader in Talent and Digital recruitment solutions, serving fortune 100 companies globally. We have many global accolades to our credit – UK Enterprise Awards - HR Tech Startup of the year- Europe - 2022, UK IT Awards - Leading Talent & Digital Solutions of the Year 2022, Titan Awards- Entrepreneur of the Year -2023, Asia fastest growing HR tech companies in 2023, Iconic Brand of the Year in Staffing & Recruitment 2023, Top 4 The Most prominent Talent solutions firm to work with in 2024, Hottest HR Tech Startup by Business World, The Greatest Brands & Leaders Asia & GCC -2020 -2021 by AsiaOne and many more.

Website : www.ixceed-solutions.co.uk

Linkedin URL : https://www.linkedin.com/company/ixceed-solutions

Position: AWS DevOps Engineer (Kafka)

Location: Remote Poland (Candidate Must be from Poland only)

B2B Contract

The role will require managing and maintaining core AWS services including EC2, EKS, ECR, S3, KMS, VPC, SageMaker, and CloudWatch. Responsibilities include handling network configurations within AWS VPC, managing security groups, subnets, and transit gateways, and utilizing AWS CloudWatch to monitor and ensure system health and performance.

A significant part of the role will involve implementing and managing Kafka clusters to ensure high availability and performance, using Kafka MirrorMaker for data replication and synchronization across data centers. Security duties include enabling TLS/SSL mutual authentication and channel encryption for Kafka communications.

The role will require developing and maintaining Infrastructure as Code (IaC) using Terraform, creating and managing reusable Terraform modules for AWS resources. Additional responsibilities include managing containerized workloads using Kubernetes (EKS), implementing and troubleshooting service mesh solutions with Istio, and maintaining and optimizing image management within ECR.

Configuring and managing CI/CD pipelines using tools like ArgoCD and Jenkins, and automating deployments to ensure efficient and error-free delivery of new features and updates are also part of the role. Monitoring solutions will be developed and configured using AWS CloudWatch and Datadog, with logging and alerting frameworks implemented and maintained to ensure system uptime and performance.

Security and compliance are key aspects of this role. The role will require managing encryption and security keys using AWS KMS, ensuring compliance with security best practices to keep AWS environments secure, and assisting in vulnerability management and remediation following internal policies and standards.

Key projects and initiatives include enforcing mutual TLS (mTLS) between Kafka clients and brokers to ensure service communications are mutually authenticated and encrypted, logging full details of every request and response from external sources for perimeter auditing, and implementing Istio External Authorization Filter for user authorization. The role also involves ensuring all external services connect via the audited route and developing solutions for AuthZ services to ensure fine-grained permission policies and least privileged access.