Sr DevOps Engineer

Key Responsibilities

• 1) CI/CD Pipeline Ownership
• Design, build, and maintain robust CI/CD pipelines using Jenkins and Gradle to support developer productivity and automated quality gates across dev, test, staging, and production environments.
• Manage container image builds, versioning strategies, and publishing workflows to Nexus artifact repositories; enforce image scanning and dependency hygiene.
• Own end-to-end pipeline reliability: fast feedback loops, deterministic builds, and clear failure diagnostics for development teams.
• 2) Kubernetes & Cloud-Native Platform Engineering
• Administer and evolve Kubernetes clusters on Azure (AKS), ensuring high availability, auto-scaling, and operational reliability aligned with SLOs.
• Extend the platform to OpenShift, AWS, and GCI as the multi-cloud roadmap progresses; maintain environment parity across targets.
• Implement and maintain GitOps-based deployment workflows; manage configuration-as-code using Carvel toolchain components (ytt, kapp-controller, imgpkg, vendir).
• Manage Kubernetes-native packaging and release workflows; enforce deployment standards across all environments.
• 3) Infrastructure Automation
• Own and evolve Ansible playbooks and roles for environment provisioning, configuration management, and platform component lifecycle management.
• Ensure secure, repeatable, and auditable provisioning across dev/test/stage/prod; treat infrastructure-as-code as a first-class deliverable.
• Build and maintain automation for platform component upgrades, patching cycles, and environment refresh workflows.
• 4) Secrets & Certificate Management
• Operate and extend External Secrets Operator (ESO) integrations with vaults and cloud-native secret stores to enforce zero-trust secret handling across all environments.
• Manage TLS certificate lifecycles: issuance, rotation, expiry monitoring, and automated renewal using cert-manager or equivalent tooling.
• Ensure no secrets, credentials, PCI data, or PII are embedded in code, pipelines, or container images; enforce policy-as-code controls.
• 5) Messaging & Data Infrastructure
• Support operational management and observability of NATS messaging clusters: configuration, topic management, monitoring, and failure recovery.
• Assist with PostgreSQL database infrastructure: provisioning, backup/recovery validation, connection pooling, and performance monitoring in Kubernetes-native deployments.
• Collaborate with application teams to ensure messaging and data infrastructure SLOs are met and operationalized with runbooks.
• 6) Test Orchestration & Quality Infrastructure
• Implement and maintain Testkube for Kubernetes-native test orchestration; integrate automated test execution into CI pipelines as a quality gate.
• Drive security and compliance testing as part of CI/CD: SAST, DAST, container vulnerability scanning, and dependency analysis.
• Maintain test environment infrastructure: provisioning, data seeding, isolation, and teardown automation.
• 7) Developer Enablement & Observability
• Serve as a force multiplier for development teams: reduce friction in the build-test-deploy cycle, document platform patterns, and provide self-service tooling where possible.
• Build and maintain observability infrastructure: logging pipelines, metrics collection, distributed tracing, and alerting for platform and application services.
• Contribute to runbooks, on-call playbooks, and incident response processes; participate in on-call rotation as the platform matures.