DevOps Engineer - Kubernetes

Tasks

Key Responsibilities

• Support GitOps-based application delivery with Argo CD (including Dex/OIDC SSO): help manage Argo CD applications, Helm charts, and Kubernetes manifests across development, staging, and production clusters.
• Assist in maintaining GitLab CI pipelines that build container images and keep upstream OSS image mirrors up to date in Docker Hub and GCP Artifact Registry (version upgrades, CVE patching).
• Help operate GKE clusters day to day: namespaces, Deployments, StatefulSets, DaemonSets, CronJobs, ConfigMaps and Secrets, PersistentVolumes/PVCs, and node pools.
• Support the ingress and API gateway layer: ingress-nginx controllers, the Kubernetes Gateway API with Envoy-based ingress (Envoy Gateway) including Gateway/HTTPRoute configurations, and Kong (hybrid CP/DP mode), with TLS certificate lifecycle managed via cert-manager.
• Assist with secrets management using HashiCorp Vault and the Vault Secrets Operator (syncing Vault secrets into Kubernetes).
• Help configure workload autoscaling with KEDA ScaledObjects and Kubernetes-native mechanisms.
• Monitor cluster and application health using the Prometheus Operator stack (Prometheus, Alertmanager, Grafana, node and blackbox exporters) and centralized logging with Loki and Grafana Alloy; assist in troubleshooting pod, networking, DNS, and storage issues.
• Support stateful data stores running in our clusters — PostgreSQL, MongoDB, Redis, Elasticsearch, MinIO, and PocketBase — including their Prometheus exporters and alerting.
• Contribute to platform security operations: RBAC, network policies, ClamAV-based file scanning, and container image vulnerability management.
• Contribute to infrastructure automation using Bash and Python scripting.
• Participate in backup, disaster recovery, and incident response procedures for cluster workloads.
• Document cluster configurations, deployment runbooks, and operational procedures, supporting audit and compliance requirements (SOC 2, GDPR, ISO 27001).

Education

Experience

Technical Skills

• Solid understanding of Linux system administration fundamentals.
• Familiarity with Git and version control workflows.
• Automation mindset: Ability to identify repetitive operational tasks and automate them using Bash, Python, Go, CI/CD pipelines, Terraform, or Kubernetes-native tooling.
• Hands-on experience with Docker: building images, writing Dockerfiles, and managing container lifecycles.
• Working knowledge of core Kubernetes concepts: Pods, Deployments, StatefulSets, Services, Ingress, ConfigMaps, and Secrets — this is the core of the role.
• Exposure to Helm or writing Kubernetes YAML manifests.
• Familiarity with at least one cloud platform, preferably GCP/GKE.
• Exposure to CI/CD tools, preferably GitLab CI.
• Basic knowledge of databases and data stores such as PostgreSQL, MongoDB, or Redis; exposure to Elasticsearch, MinIO, or PocketBase is a plus.
• Intermediate scripting skills in Bash and/or Python or Go .
• Understanding of networking fundamentals: HTTP/HTTPS, DNS, TLS/SSL certificates, load balancing, and Kubernetes Services/Ingress networking.
• Familiarity with monitoring and logging concepts (Prometheus, Grafana, Loki, or similar).

Preferred Skills

• Hands-on exposure to any of the following is a strong plus — we don't expect all of them at this level:
• GitOps workflows with Argo CD (or Flux) and app-of-apps / ApplicationSet patterns.
• Strong interest in automation, with the ability to identify repetitive operational tasks and automate them using Bash, Python, Go, CI/CD pipelines, APIs, or Infrastructure as Code.
• The Prometheus Operator / kube-prometheus-stack: ServiceMonitors, alerting rules, Grafana dashboards.
• Log aggregation with Loki and Grafana Alloy (or equivalent OpenTelemetry collectors).
• Secrets management with HashiCorp Vault or the Vault Secrets Operator.
• Event-driven autoscaling with KEDA.
• cert-manager and TLS certificate automation (Issuers, ClusterIssuers, ACME).
• API gateways (Kong) and ingress-nginx configuration; authentication concepts such as OAuth2, OIDC, and mTLS.
• Familiarity with the Kubernetes Gateway API (GatewayClass, Gateway, HTTPRoute) and Envoy or Envoy Gateway.
• Understanding of Kubernetes operators and CRDs.
• GKE specifics: node pools, Workload Identity, Cloud NAT, and VPC networking.
• Infrastructure as Code (Terraform) or configuration management (Ansible).
• Exposure to on-premise Kubernetes or OpenShift environments.
• Familiarity with deploying Node.js or Python applications on Kubernetes.
• Interest in AI/LLM platforms, conversational AI, or MLOps.
• Strong troubleshooting and problem-solving skills, with the ability to learn quickly in an Agile environment.

Benefits

• Be part of a rapidly growing company at the forefront of AI automation and conversational AI solutions used by leading global enterprises.
• Shape solutions that make a measurable impact for Fortune 500 clients and leading European enterprises.
• A culture comprised of diverse, global teams who have a passion for collaboration, creativity, and excellence in client service
• A competitive salary and scope for further advancement.
• A great environment that promotes open feedback and a flat hierarchy, working at Enterprise Bot is a refreshing mix of purpose, challenge, and fun.