Senior DevOps Engineer

This is a fully remote position, open to applicants in Poland.

📋 Description

• Design, implement, and manage highly available cloud-native infrastructure on T-Cloud, including CCE Turbo clusters across three availability zones.

• Develop and support reusable OpenTofu modules for compute, networking, storage, and DNS functionalities.

• Facilitate self-service tenant networking capabilities, encompassing subnets, EIPs, SNAT, and namespaces, using Crossplane compositions.

• Deploy applications via GitOps utilizing Argo CD ApplicationSets and Helm charts.

• Create and manage GitLab CI/CD pipelines and runners, integrating JFrog Xray image scanning into all releases.

• Oversee the production application layer, including n8n Enterprise in queue mode with OIDC.

• Manage PostgreSQL on Kubernetes using CloudNativePG.

• Ensure end-to-end traffic security using Traefik, TLS 1.3, automated certificate management via cert-manager, workload security groups, VPC network ACLs, and controlled egress.

• Fortify containerized workloads through non-root execution, read-only filesystems, and Pod Security Admission in restricted mode.

• Manage backup and disaster recovery processes, including pgBackRest backups, WAL archiving, point-in-time recovery, EVS snapshots, disaster recovery runbooks, and routine recovery drills.

• Monitor and resolve complex infrastructure and production issues, driving them to resolution.

• Continuously enhance automation, documentation, security, platform reliability, and operational preparedness.

• Collaborate with software engineers, architects, and security teams to enhance the overall platform.

• Assume full ownership of infrastructure solutions and actively engage in the evolution of the platform.

⛳️ Requirements

• Commercial, hands-on experience with T-Cloud, specifically CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, and NAT.

• Practical experience with CCE workload security groups and VPC network ACLs.

• Senior-level expertise in operating Kubernetes in production within a DevOps, Platform Engineering, Cloud Engineering, or SRE role.

• Strong proficiency in Infrastructure as Code using OpenTofu or Terraform.

• Hands-on experience with GitOps delivery through Argo CD and Helm.

• In-depth knowledge of GitLab CI/CD, including pipeline design, stages, automation, and runner configuration.

• Good understanding of container security and hardening practices, including non-root workloads, read-only filesystems, and Kubernetes Pod Security Admission.

• Solid Linux administration capabilities, including systemd, SSH, and firewall management.

• Experience in production environments with backup, restoration, and disaster recovery processes.

• Strong analytical and troubleshooting abilities.

• Capacity to work autonomously and take ownership of technical solutions.

• Proactive attitude towards automation, documentation, and continuous improvement.

• Ability to collaborate effectively with development, architecture, and security teams in an international context.

• Proficiency in English.

• Familiarity with Crossplane, particularly compositions for infrastructure and networking provisioning.

• Experience running n8n Enterprise or similar workflow-automation platforms in production.

• Experience operating PostgreSQL on Kubernetes, preferably with CloudNativePG and pgBackRest.

• Knowledge of JFrog Xray / Artifactory, especially regarding container image scanning in CI/CD processes.

• Experience with Traefik and cert-manager.

• Understanding of OIDC-based authentication.

• Experience with AI-powered or cloud-native enterprise platforms.

• Familiarity with AI tools in daily workflows.

• Proficiency in the German language is a plus.

🏝️ Benefits

• Opportunity for contract extension.

• 100% remote work within the EU.

• Full-time workload.

• International working environment.

• Chance to shape, automate, secure, and continuously enhance a sophisticated production environment.

• Comprehensive ownership of infrastructure solutions.

• Opportunity to contribute to platform reliability, scalability, security, and developer experience.