DevOps Engineer

<p>Role overview</p><p>We are hiring a DevOps Engineer to build and run our cloud platform, primarily on AWS with workloads on GCP. You will own infrastructure as code, Kubernetes on Amazon EKS, networking, security and cost, and keep production reliable across multiple accounts and regions.</p><p><br></p><p>Key responsibilities</p><ul><li>Design, deploy and manage AWS infrastructure across multiple accounts and regions, and support workloads running on GCP.</li><li>Build, upgrade and operate Amazon EKS clusters across dev, stage, QA and production environments.</li><li>Write, maintain and review Terraform modules for repeatable, version-controlled infrastructure provisioning.</li><li>Manage AWS networking, including VPCs, subnets, Transit Gateways, NAT Gateways, VPC endpoints, VPC peering and hybrid connectivity.</li><li>Implement IAM best practices: least-privilege policies, cross-account roles and EKS Pod Identity.</li><li>Drive cloud cost optimization through right-sizing, Savings Plans and Reserved Instances, load balancer consolidation, and reduced NAT and data transfer costs.</li><li>Set up monitoring, logging and alerting with CloudWatch, Datadog, CloudTrail and GuardDuty.</li><li>Automate build and deployment workflows with CI/CD pipelines in GitLab CI and Jenkins.</li><li>Take part in incident response, on-call rotation and production troubleshooting, including post-incident reviews.</li><li>Work directly with clients to understand requirements, present infrastructure designs, give status updates and handle escalations.</li><li>Work in rotational shifts, including night shifts, to support production systems.</li></ul><p>Required skills and experience</p><ul><li>7–8 years of hands-on experience running production infrastructure on AWS, in a multi-account and multi-region setup.</li><li>Working experience with GCP (for example GKE, Compute Engine, Cloud Storage, VPC and IAM).</li><li>Strong Infrastructure as Code skills with Terraform: writing reusable modules, managing remote state, and reviewing changes through pull requests.</li><li>Production experience building, upgrading and operating Amazon EKS clusters, including node groups, add-ons and cluster upgrades.</li><li>Solid Kubernetes fundamentals: deployments, services, ingress, autoscaling, Helm charts and troubleshooting workloads.</li><li>Deep knowledge of AWS networking: VPC design, subnets, route tables, Transit Gateway, NAT Gateway, VPC endpoints, peering, and VPN or Direct Connect.</li><li>Hands-on IAM experience: least-privilege policies, cross-account role assumption, and EKS Pod Identity or IRSA.</li><li>Proven record of reducing cloud spend using right-sizing, Savings Plans, Reserved Instances and data transfer optimization.</li><li>Experience with observability and security tooling: CloudWatch, Datadog, CloudTrail and GuardDuty.</li><li>Experience building and maintaining CI/CD pipelines in GitLab CI and Jenkins.</li><li>Scripting skills in Bash and Python, and comfort working in Linux.</li><li>Calm, structured approach to incident response and root-cause analysis.</li><li>Excellent verbal and written communication skills, with the ability to explain technical topics to non-technical stakeholders.</li><li>Proven experience working directly with clients, including requirement gathering, client calls and managing expectations.</li><li>Willingness to work rotational shifts, including night shifts, and to work from the office 3 days a week when on day shifts.</li></ul><p>Nice to have</p><ul type="disc"><li>AWS Certified Solutions Architect (Associate or Professional) or AWS Certified DevOps Engineer – Professional.</li><li>Google Cloud Professional Cloud Architect or Professional Cloud DevOps Engineer certification.</li><li>Certified Kubernetes Administrator (CKA).</li><li>Experience with GitOps tools such as Argo CD or Flux.</li><li>Familiarity with AWS Organizations, Control Tower and Service Control Policies.</li><li>Experience with secrets management (AWS Secrets Manager, HashiCorp Vault).</li><li>Exposure to policy-as-code or IaC scanning tools such as OPA, Checkov or tfsec.</li><li>Ownership of a modern, multi-cloud platform with real impact on reliability and cost.</li></ul><div><br></div>