Staff DevOps Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Establish and lead the technical vision and quarterly infrastructure roadmap, ensuring clear trade-offs and measurable objectives.

• Manage and enhance AWS and Kubernetes (EKS) infrastructure, focusing on cluster management, autoscaling with Karpenter, policy enforcement through Kyverno, and maintaining zero-downtime operations.

• Take ownership of Infrastructure as Code using Terraform and AWS CDK in TypeScript.

• Oversee GitLab CI/CD, including the development of reusable/shared templates, OIDC, and self-managed GitLab environments.

• Develop and maintain practical observability solutions utilizing Prometheus, Grafana, OpenTelemetry, OpenSearch, CloudWatch, log pipelines, and APM.

• Ensure efficient blue-green deployment strategies and health-gated automated rollback processes.

• Manage zero-downtime PostgreSQL schema migrations and CI migration gating.

• Lead security engineering within a HIPAA-compliant environment, focusing on secrets hygiene, PHI-aware log and data handling, and Vault management as code.

• Collaborate directly with product engineering teams to alleviate infrastructure challenges and enhance the developer experience.

• Integrate agentic AI into core workflows and incorporate autonomous-agent outputs into production processes.

• Define technical direction, directly implement infrastructure solutions, and take responsibility for reliability, cost, security, performance, deployment health, and developer velocity outcomes.

⛳️ Requirements

• Over 6 years of experience in DevOps and infrastructure engineering.

• Strong foundational knowledge of systems and proficient in Linux administration and troubleshooting, including performance analysis, resource management, and process debugging.

• Hands-on experience with AWS services: EC2, EKS, RDS, ElastiCache, Lambda, SQS, EventBridge, API Gateway, ALB, and S3.

• Practical experience with Kubernetes/EKS in a production environment, including cluster management, node scaling, and policy enforcement; experience with Karpenter, Kyverno, or similar tools.

• Strong expertise in Infrastructure as Code using Terraform and AWS CDK in TypeScript.

• Proven ownership of CI/CD processes with GitLab CI/CD, reusable/shared templates, OIDC id_tokens, and self-managed GitLab.

• Experience in monitoring and observability practices using Prometheus, Grafana, OpenTelemetry, OpenSearch, CloudWatch, log shipping, and error tracking/APM solutions.

• Practical experience in security engineering, focusing on secrets rotation, short-lived credentials, leak scanning, and PHI-aware logging.

• Experience with HashiCorp Vault as code, including KV, JWT/OIDC authentication for CI, and policy design.

• Familiarity with blue-green deployment strategies and automated, health-gated rollback processes.

• Experience with PostgreSQL zero-downtime schema migrations utilizing expand/contract and migration gating in CI.

• Knowledge of containerization practices with Docker, ECR, immutable tags, and image lifecycle management.

• Understanding of network and protocol fundamentals, including load balancing, TLS, and DNS.

• Hands-on experience with agentic AI workflows, such as Claude Code or similar technologies.

• A developer-focused mindset with strong problem-solving abilities for complex systems and excellent technical writing skills, including docs-as-code, ADRs, and design documents via MRs.

• Proficiency in both Russian and English (B2 level).

• Experience working effectively within remote, distributed teams.

🏝️ Benefits

• Competitive compensation package.

• Fully remote long-term collaboration under a B2B model.

• Health insurance provided after the probation period.

• Compensation for sports and wellness activities.

• Personalized English lessons available through Preply.

• 19 paid vacation days annually.

• 4 additional wellness days each year.

• Paid sick leave for the first 5 working days.

• Thoughtful gifts for significant life events.

• Offline corporate events.