Lead DevOps Engineer

We're looking for a Lead DevOps Engineer with 8+ years of experience who takes full technical ownership of our cloud infrastructure and developer platform. You'll be hands-on writing code, designing systems, and solving hard infrastructure problems directly.

Requirements:

• 8+ years in cloud infrastructure, with 3+ years hands-on AWS, owning complex systems end-to-end and driving technical decisions across engineering teams.

Cloud and Infrastructure:

• Deep expertise in AWS services, such as EC2 EKS, ECS, RDS, ElastiCache, S3 IAM, VPC, Route 53 and CloudFront.
• Expert-level Terraform (Terragrunt a strong plus), able to define custom internal modules to bootstrap complete solutions.
• Confident managing multi-account AWS environments.
• Strong Linux systems knowledge: kernel, networking, performance tuning, package management.
• Container expertise: Docker, Kubernetes, and Helm chart authoring.
• Kubernetes Topology: leverage Taints and tolerations, Affinities, and topology spreads to build reliable systems.

Automation and CI/CD:

• Strong scripting skills in Bash and at least one general-purpose language (Python preferred).
• Experience with CI/CD platforms: Jenkins, GitHub Actions, or CircleCI.
• Source control mastery: Git (GitHub), branching strategies, code review workflows, GitOps.
• Experience authoring reliable automation pipelines: from regular scripting to orchestration workflows using tools such as GitHub Actions or Step Functions.

Observability and Security:

• Hands-on experience with configuring monitoring/logging stacks: Prometheus/Grafana, ELK, and CloudWatch.
• Nginx configuration, SSL/TLS management, and certificate lifecycle automation.
• VPN implementation: OpenVPN.
• Zero Trust Implementation: Cloudflare Tunnels.
• Familiarity with cloud security best practices: IAM least-privilege, secrets management (Vault / AWS Secrets Manager), network segmentation.
• Experience with Containers and Kubernetes security: Network Policies, RBAC, Logs and events auditing, container hardening, Seccomp.

Data and Middleware:

• Experience supporting relational databases (PostgreSQL), caches (Redis, Memcache), and message buses (Kafka/RedPanda, RabbitMQ), NoSQL Databases (MongoDB, DynamoDB).
• Working knowledge of networking fundamentals: DNS, TCP/IP, load balancing, CDN.

AI Fluency:

• You actively use AI coding assistants (Copilot, Cursor, Claude, ChatGPT) as part of your daily workflow - not occasionally.
• You have applied LLMs or AI tooling to infrastructure problems: incident summarisation, code generation, IaC linting, runbook drafting.
• You understand the limitations of AI-generated infrastructure code and apply critical review before shipping to production.
• Curiosity about where AIOps, LLMOps, and platform engineering are heading and excitement to help Novo get there first.