Sr DevOps Engineer

1) CI/CD Pipeline Ownership

• Design, build, and maintain robust CI/CD pipelines using Jenkins and Gradle to support developer productivity and automated quality gates across dev, test, staging, and production environments.

• Manage container image builds, versioning strategies, and publishing workflows to Nexus artifact repositories; enforce image scanning and dependency hygiene.

• Own end-to-end pipeline reliability: fast feedback loops, deterministic builds, and clear failure diagnostics for development teams.

2) Kubernetes & Cloud-Native Platform Engineering

• Administer and evolve Kubernetes clusters on Azure (AKS), ensuring high availability, auto-scaling, and operational reliability aligned with SLOs.

• Extend the platform to OpenShift, AWS, and GCI as the multi-cloud roadmap progresses; maintain environment parity across targets.

• Implement and maintain GitOps-based deployment workflows; manage configuration-as-code using Carvel toolchain components (ytt, kapp-controller, imgpkg, vendir).

• Manage Kubernetes-native packaging and release workflows; enforce deployment standards across all environments.

3) Infrastructure Automation

• Own and evolve Ansible playbooks and roles for environment provisioning, configuration management, and platform component lifecycle management.

• Ensure secure, repeatable, and auditable provisioning across dev/test/stage/prod; treat infrastructure-as-code as a first-class deliverable.

• Build and maintain automation for platform component upgrades, patching cycles, and environment refresh workflows.

4) Secrets & Certificate Management

• Operate and extend External Secrets Operator (ESO) integrations with vaults and cloud-native secret stores to enforce zero-trust secret handling across all environments.

• Manage TLS certificate lifecycles: issuance, rotation, expiry monitoring, and automated renewal using cert-manager or equivalent tooling.

• Ensure no secrets, credentials, PCI data, or PII are embedded in code, pipelines, or container images; enforce policy-as-code controls.

5) Messaging & Data Infrastructure

• Support operational management and observability of NATS messaging clusters: configuration, topic management, monitoring, and failure recovery.

• Assist with PostgreSQL database infrastructure: provisioning, backup/recovery validation, connection pooling, and performance monitoring in Kubernetes-native deployments.

• Collaborate with application teams to ensure messaging and data infrastructure SLOs are met and operationalized with runbooks.

6) Test Orchestration & Quality Infrastructure

• Implement and maintain Testkube for Kubernetes-native test orchestration; integrate automated test execution into CI pipelines as a quality gate.

• Drive security and compliance testing as part of CI/CD: SAST, DAST, container vulnerability scanning, and dependency analysis.

• Maintain test environment infrastructure: provisioning, data seeding, isolation, and teardown automation.

7) Developer Enablement & Observability

• Serve as a force multiplier for development teams: reduce friction in the build-test-deploy cycle, document platform patterns, and provide self-service tooling where possible.

• Build and maintain observability infrastructure: logging pipelines, metrics collection, distributed tracing, and alerting for platform and application services.

  • Contribute to runbooks, on-call playbooks, and incident response processes; participate in on-call rotation as the platform matures.