DevOps Engineer

Main Responsibilities and Tasks

• Design, build, and maintain CI/CD pipelines in Azure DevOps and Jenkins (YAML pipelines, Jenkinsfile, shared libraries) from commit to production;
• Manage and scale Kubernetes clusters on AKS across dev, staging, and production; author Helm charts; manage namespaces, RBAC, configmaps, secrets, and ingress;
• Provision and version infrastructure with Terraform/Bicep and manage configuration with Ansible across multiple Azure environments;
• Enforce security gates in pipelines — Trivy container scans, Checkov IaC policies, SonarQube SAST quality gates; manage secrets via HashiCorp Vault and Azure Key Vault;
• Own observability — Prometheus/Grafana dashboards, ELK/OpenSearch log aggregation, OpenTelemetry instrumentation; define and track SLOs and error budgets;
• Manage network configuration — DNS, VPN, ingress controllers, load balancers, and network policies; lead blameless post-mortems.

Requirements

• Bachelor's degree in Computer Science, IT Engineering, or equivalent demonstrable experience;
• 3+ years of hands-on DevOps, Build & Release, or Cloud Engineering experience in production;
• Deep hands-on Azure: VMs, VNets, Storage, Azure AD, Load Balancers, AKS; Kubernetes day-2 operations; Docker image build, publish, and hardening;
• Azure DevOps (YAML pipelines, repos, artifacts, agent pools, branching policies) and Jenkins (Jenkinsfile, shared libraries); Git workflows (GitFlow or trunk-based);
• Terraform for infrastructure-as-code and Ansible for configuration management (playbooks, roles, inventories);
• Trivy, Checkov, and SonarQube as blocking pipeline gates; secrets management with HashiCorp Vault or Azure Key Vault;
• Scripting in Python and/or Bash/PowerShell; Prometheus + Grafana, ELK/OpenSearch; networking fundamentals (DNS, VPN, ingress, load balancers, network policies); English B2+.

Desired Qualifications

• Certifications: AZ-400, AZ-104 or AZ-305, CKA. Experience with GitHub Actions, Kustomize/advanced Helm, Bicep/ARM, OpenTelemetry, APM tooling (Dynatrace, Datadog, New Relic), service mesh (Istio/Linkerd), Nginx Ingress, cert-manager, external-dns.
• Multi-cloud exposure (AWS); database operations in pipelines (PostgreSQL, MySQL, Redis); message brokers (RabbitMQ, Kafka); high-availability, multi-region, or regulated-industry infrastructure.

Benefits

• Competitive full-time salary;
• Private Health Coverage on the Company’s group program;
• Flexible Working Hours;
• Top-of-the-Line Tools;
• Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities;
• Career Growth: Work with some of the most innovative and exciting specialists in the industry;
• Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth.