Devops Engineer

Key Responsibilities

• Design, build, and maintain scalable, secure, and highly available infrastructure across multi-account, multi-region, and multi-AZ AWS environments
• Lead Infrastructure as Code practices using Terraform authoring reusable modules, managing workspaces, and enforcing standards across teams
• Administer and evolve Amazon EKS clusters including upgrades, secondary networking configurations, and cluster lifecycle management
• Write and maintain Helm charts including umbrella charts and integration of OSS/community charts; troubleshoot complex Helm deployment issues
• Develop and maintain custom Kubernetes controllers and operators using standard tooling
• Define and champion multi-cloud architecture patterns and best practices
• Analyze open-ended infrastructure and platform problems, propose well-reasoned solutions, and drive them to completion with minimal supervision
• Collaborate closely with development, security, and architecture teams communicating complex technical concepts clearly to diverse audiences
• Mentor junior engineers and contribute to a culture of continuous learning and improvement

Required Skills & Experience

Core Competencies

• Strong communication skills — written and verbal — with the ability to present technical proposals to both engineers and non-technical stakeholders
• Proven ability to analyze ambiguous, open-ended problems and independently propose and deliver pragmatic solutions
• Strong problem-solving mindset with a structured, methodical approach to debugging and root-cause analysis
• Demonstrated growth mindset — actively learns from incidents, seeks feedback, and keeps up with evolving industry practices

Terraform

• hands-on experience writing production-grade Terraform configurations and reusable modules
• experience with Terraform workspaces for environment and account segregation
• experience using Terraform providers to provision and manage AWS resources across multi-account, multi-region, and multi-AZ topologies
• experience provisioning and managing EKS clusters, VPC networking, and related AWS services via HashiCorp Terraform modules
• experience configuring EKS secondary networking (e.g., VPC CNI custom networking) via Terraform
• Good understanding of multi-cloud infrastructure architecture and portability considerations

Kubernetes & EKS

• hands-on experience in Amazon EKS administration — cluster provisioning, IAM integration, node group management, and day-2 operations
• experience as a Kubernetes practitioner — workload management, RBAC, networking, storage, autoscaling, and observability
• understanding of Custom Resource Definitions (CRDs) and consumption of OSS Helm charts and Kubernetes operators
• experience managing and executing EKS cluster version upgrades with minimal disruption
• Hands-on experience writing custom controllers and operators using frameworks such as controller-runtime or Kubebuilder
• hands-on experience with AWS Load Balancer Controller — ingress and service configuration on EKS
• hands-on experience with Kubernetes Gateway API — HTTPRoute, GatewayClass, and migration from Ingress

Helm

• experience authoring Helm charts for complex, production workloads
• experience building and managing umbrella charts for multi-component application deployments
• understanding of CRDs and OSS Helm charts — including evaluation, customisation, and maintenance
• experience troubleshooting Helm release failures, hook issues, and chart rendering problems

Istio

• hands-on experience deploying and operating Istio in production Kubernetes environments
• experience with both Istio Sidecar (proxy) and Ambient mesh deployment modes
• understanding of Istio core concepts and traffic management — VirtualService, DestinationRule, Gateway, AuthorizationPolicy, mTLS, and observability integration

AWS

• hands-on experience designing and operating multi-region, multi-AZ AWS architectures
• Deep working knowledge across core AWS services, including:
• EKS — cluster administration, networking, and integrations
• VPC — subnets, route tables, security groups, VPC peering, Transit Gateway
• EC2 — instance types, launch templates, Auto Scaling Groups
• S3 — bucket policies, lifecycle rules, replication
• AWS API Gateway
• Networking — NAT, IGW, PrivateLink, VPN, Direct Connect concepts
• ACM (AWS Certificate Manager) — certificate provisioning, renewal, and integration with AWS services
• PCA (AWS Private Certificate Authority) — private CA management for internal TLS
• Route 53 — DNS management, health checks, routing policies
• Strong understanding of TLS — certificate chains, mTLS, termination strategies, and PKI fundamentals

Nice to Have

• Experience with GitOps tooling (e.g., ArgoCD, GitHub Actions, Cloudbees Jenkins)
• Familiarity with observability stacks (e.g., Prometheus, Grafana, OpenTelemetry)
• Experience with CI/CD pipelines (e.g., GitHub Actions, Jenkins, Atlantis)
• Exposure to service mesh technologies (e.g., Istio, Linkerd)

What We Value

• Engineers who own problems end-to-end rather than passing tickets
• A culture of blameless post-mortems and continuous improvement
• Clear, concise documentation and knowledge sharing across the team
• Healthy engineering debate and peer review culture