DevOps Engineer
join
Job Description
- Support GitOps-based application delivery with Argo CD (including Dex/OIDC SSO): help manage Argo CD applications, Helm charts, and Kubernetes manifests across development, staging, and production clusters.
- Assist in maintaining GitLab CI pipelines that build container images and keep upstream OSS image mirrors up to date in Docker Hub and GCP Artifact Registry (version upgrades, CVE patching).
- Help operate GKE clusters day to day: namespaces, Deployments, StatefulSets, DaemonSets, CronJobs, ConfigMaps and Secrets, PersistentVolumes/PVCs, and node pools.
- Support the ingress and API gateway layer: ingress-nginx controllers, the Kubernetes Gateway API with Envoy-based ingress (Envoy Gateway) including Gateway/HTTPRoute configurations, and Kong (hybrid CP/DP mode), with TLS certificate lifecycle managed via cert-manager.
- Assist with secrets management using HashiCorp Vault and the Vault Secrets Operator (syncing Vault secrets into Kubernetes).
- Help configure workload autoscaling with KEDA ScaledObjects and Kubernetes-native mechanisms.
- Monitor cluster and application health using the Prometheus Operator stack (Prometheus, Alertmanager, Grafana, node and blackbox exporters) and centralized logging with Loki and Grafana Alloy; assist in troubleshooting pod, networking, DNS, and storage issues.
- Support stateful data stores running in our clusters — PostgreSQL, MongoDB, Redis, Elasticsearch, MinIO, and PocketBase — including their Prometheus exporters and alerting.
- Contribute to platform security operations: RBAC, network policies, ClamAV-based file scanning, and container image vulnerability management.
- Contribute to infrastructure automation using Bash and Python scripting.
- Participate in backup, disaster recovery, and incident response procedures for cluster workloads.
- Document cluster configurations, deployment runbooks, and operational procedures, supporting audit and compliance requirements (SOC 2, GDPR, ISO 27001).