Middle+ / Senior DevOps Engineer (Kubernetes / GitOps / Cloud Infrastructure)

About the Position

We are seeking a Middle+ / Senior DevOps Engineer with expertise in Kubernetes, GitOps, and cloud infrastructure to join our team. You'll be responsible for developing and supporting our infrastructure, automating delivery processes, and ensuring the stability of our services.

About the Company

We develop a high-load platform with a microservices architecture. Our main development stack includes Node.js (NestJS), PHP, PostgreSQL, Redis, RabbitMQ, and Elasticsearch. The infrastructure is built on a self-managed Kubernetes cluster in DigitalOcean using the GitOps approach and modern automation tools.

Responsibilities

• Support and development of the self-managed Kubernetes cluster.
• Development of the GitOps approach based on ArgoCD.
• Building and optimizing CI/CD processes.
• Support and development of monitoring, logging, and alerting systems.
• Ensuring the resilience and security of the infrastructure.
• Automation of routine processes and infrastructure operations.
• Participation in incident investigation and root cause analysis.
• Working with stateful services and high-load data storage systems.

Requirements

Kubernetes (Key Competency)

• Confident experience in managing self-managed Kubernetes clusters.
• Experience in servicing control-plane and worker nodes.
• Performing Kubernetes and cluster component updates.
• Deep understanding of:
  • Deployments
  • StatefulSets
  • DaemonSets
  • Services
  • ConfigMaps
  • Secrets
  • HPA
  • PodDisruptionBudget
  • ResourceQuota
  • RBAC
  • NetworkPolicy
• Working with persistent storage:
  • PV/PVC
  • StorageClass
  • NFS Provisioner and similar solutions
• Diagnostic skills:
  • Scheduling issues
  • Network issues
  • Resource shortages
  • OOMKilled
  • Evictions
  • Node and service degradation

GitOps and ArgoCD

• Practical experience with ArgoCD:
  • Application
  • ApplicationSet
  • App-of-Apps
  • Sync Policies
  • ArgoCD Image Updater
• Organizing feature environments for branches and Pull Requests.
• Building processes where Git is the single source of truth (GitOps).
• Working with separate infrastructure repositories.

Helm

• Developing and maintaining Helm charts.
• Creating reusable templates.
• Chart versioning.
• Supporting multiple environments:
  • Development
  • Stage
  • Production
• Managing configuration through values files.

CI/CD (GitLab)

• Experience in building complex GitLab CI/CD pipelines.
• Using:
  • include
  • reusable templates
  • workflow
  • rules
  • artifacts
  • cache
• Implementing release strategies:
  • dev
  • stage
  • main
  • semver tags (vX.Y.Z)
  • release candidate (rc-X.Y.Z)
• Working with:
  • GitLab Container Registry
  • private npm Registry in GitLab
  • authorization via tokens

Docker

• Creating optimized multi-stage Dockerfiles.
• Experience in containerizing:
  • Node.js
  • PHP/FPM
• Building for linux/amd64.
• Minimizing image size.
• Using Alpine Linux.
• Working with private npm packages inside containers.

Networking, Ingress, and TLS

• Practical experience with:
  • Envoy Gateway
  • Kubernetes Gateway API
  • Gateway
  • GatewayClass
  • HTTPRoute
  • ReferenceGrant
• Experience operating nginx-ingress.
• Configuring cert-manager:
  • Let's Encrypt
  • Automatic certificate renewal
  • Certificate validity control
• Understanding:
  • DNS
  • Load balancing
  • DigitalOcean Load Balancers

Observability (Mandatory)

• Experience operating kube-prometheus-stack:
  • Prometheus
  • Grafana
  • Alertmanager
• Creating:
  • ServiceMonitor
  • PodMonitor
  • Alert Rules
  • Grafana Dashboards
• Working with logging:
  • Loki
  • Promtail
• Experience setting up exporters:
  • PostgreSQL Exporter
  • Elasticsearch Exporter
  • RabbitMQ Exporter
  • x509 Exporter
• Understanding and implementing:
  • SLI
  • SLO
  • Incident Management
  • Root Cause Analysis

Databases and Stateful Infrastructure

• PostgreSQL in Kubernetes.
• Configuring and supporting PgBouncer.
• Organizing backups.
• Basic PostgreSQL performance tuning.
• Experience with:
  • Redis
  • RabbitMQ
  • Elasticsearch
  • Kibana
  • ECK Operator
• Experience with data-heavy services will be a plus:
  • Pelias
  • Nominatim
  • Similar indexing and geodata systems

Automation

• Proficiency in Bash.
• Python or Go for developing internal utilities and automation.
• Fluency in YAML.
• Experience using:
  • Reloader
  • Reflector
  • Similar Kubernetes operators

Security and Operations

• Managing secrets:
  • Kubernetes Secrets
  • External Secrets
  • Sealed Secrets
  • Vault
• Configuring RBAC.
• Securing container registries.
• Securing CI/CD processes.
• Building a Disaster Recovery strategy.
• Organizing Kubernetes cluster backups.

Nice to Have

• Terraform and Infrastructure as Code.
• Experience migrating from nginx-ingress to Gateway API.
• Jenkins.
• Understanding the specifics of operating:
  • Node.js (NestJS)
  • PHP-FPM
• Configuring:
  • readiness probes
  • liveness probes
  • graceful shutdown
  • resource requests/limits
• Experience working with monorepos or infrastructure with 10+ microservices.

We Offer

• A modern technology stack.
• Influence on architectural decisions.
• Minimal bureaucracy and quick decision-making.
• Opportunities to develop infrastructure and implement best practices.
• Flexible schedule and remote work format.
• Competitive salary based on interview results.

Work Format

• Remote.
• Full-time.
• Long-term cooperation.

When applying, please provide links to your GitHub, GitLab, or examples of implemented infrastructure projects.