GBSFO
Віддалено
За результатами співбесіди
We are building the infrastructure that powers restaurant ordering, real-time WebSockets, and multi-tenant CDN delivery for thousands of users across Eastern Europe. Our platform runs on AWS EKS with Karpenter-managed node pools, served through CloudFront edge, and backed by MySQL RDS, Redis, and SQS - all provisioned through Terraform across three environments (dev / staging / prod).
We are looking for a DevOps Engineer who takes ownership of production systems and builds things that last. Not someone who runs commands - someone who designs the pipeline, writes the module, monitors the result, and fixes the alert at 10PM if needed.
This role owns the Kubernetes platform at the cluster level - you will administer node pools, manage upgrades, design topology changes, and support engineering teams deploying PHP/Laravel and Next.js workloads daily.
What you’ll do
Infrastructure
Manage and evolve AWS infrastructure using Terraform - modules, multi-region, Terraform Cloud remote state across workspaces
Operate and tune Karpenter NodePools (spot + on-demand) for workload-specific isolation: backend, queue, transaction, websocket, and more
Own EKS cluster lifecycle - version upgrades, node group migrations (currently AL2 → AL2023), IRSA, Velero backups
CI/CD
Maintain Jenkins pipelines (EC2-hosted, x86 + ARM64 agents) with Groovy shared libraries
Enforce security gates: Trivy container scanning, Hadolint Dockerfile linting, SonarQube quality checks
Manage multi-arch Docker builds and ECR repositories per service
Observability
Operate the ELK stack - Filebeat, Metricbeat, Elasticsearch, Kibana
Maintain Grafana dashboards, Elastic APM, Pyroscope continuous profiling, and OpenTelemetry collector
Tune CloudWatch alarms and Falco runtime threat detection
Security & Edge
Manage CloudFront distributions with WAFv2 - IP allowlists, geo-blocking, rate limiting, origin header verification
Administer secrets via AWS Secrets Manager + External Secrets Operator
Maintain WireGuard VPN and network-level access controls
What we’re looking for
Required
3+ years of hands-on DevOps or platform engineering in production
Terraform at team scale: modules, remote state, peer review, deployed to production - not just local experiments
AWS: EKS, VPC, CloudFront, WAF, RDS, ALB, IAM, Secrets Manager, SQS, S3 - at depth, not surface level
Kubernetes: cluster-level thinking - RBAC, ingress, PodDisruptionBudgets, node group management, helm charts, troubleshooting OOMKills and failed rollouts
Jenkins or equivalent CI/CD tool with real pipeline ownership
Python or Bash scripting for automation
Nice to have
Karpenter (NodePool / EC2NodeClass design)
ELK stack operations (Filebeat, Metricbeat, Elasticsearch index lifecycle)
Velero, AWS Backup, disaster recovery playbooks
Falco or similar runtime security tooling
Experience deploying PHP/Laravel and Next.js workloads in containers
Maxwell CDC, RDS Proxy, or Redis operations experience
Our stack at a glance
Terraform · AWS EKS · Karpenter · Helm · Jenkins · Docker · ECR · CloudFront · WAFv2 · RDS MySQL · ElastiCache Redis · SQS · Elasticsearch · Grafana · Elastic APM · OpenTelemetry · Pyroscope · Falco · Velero · WireGuard
Відгукнутись на вакансію
