Responsibilities

• Use Terraform and Ansible to create and provision servers and services. Build reusable modules, keep remote state safe, and run plan/apply from GitLab CI with approvals.
• Manage all configuration with Ansible: roles, inventories, group/host vars, idempotent playbooks. Protect secrets, lint/test with Molecule, and fix config drift.
• Run and secure Kubernetes: namespaces, RBAC, NetworkPolicies, storage, Ingress, quotas/limits. Keep Helm charts and releases consistent.
• Run GitOps with ArgoCD: app-of-apps, environment overlays, sync/health rules, PR-based promotions, and fast rollbacks.
• Own GitLab CI pipelines for build/test/scan, image build/push, Terraform, Ansible, and Argo CD deploys. Manage GitLab Runners.
• Keep legacy Docker Compose apps stable and move them to Kubernetes with no downtime and feature parity.
• Enforce good Git flow: branches, reviews, pre-commit hooks, tags/releases, and protected branches across all infra repos.
• Add observability: metrics, logs, and traces (Prometheus/Grafana + log stack). Define SLO/SLI, alerts, and clear runbooks.
• Improve security: manage secrets (SOPS/Sealed Secrets), scan images and IaC, sign and track SBOMs, apply CIS hardening, least‑privilege RBAC, and auditing.
• Ensure reliability: backups and DR (incl. ETCD and critical data), safe cluster/node upgrades, zero‑downtime deploys, blue/green and canary, autoscaling and capacity planning.
• Administer and harden Linux servers:

Skills and Qualifications

• 4+ years in DevOps/SRE running production systems.
• Strong Kubernetes: RBAC, Network Policies, storage, Helm.
• Docker and container build best practices; image scanning/signing.
• Terraform: modules, remote state, safe plan/apply from GitLab CI.
• Ansible: roles, inventories, idempotent playbooks; Molecule tests; secrets with SOPS/Sealed Secrets.
• GitLab CI: pipeline design, caching/artifacts, runners, approvals, environments.
• Argo CD and GitOps: app-of-apps, overlays, sync/health rules, rollbacks.
• Git: branching, reviews, tags/releases, pre-commit hooks.
• Observability: Prometheus, Grafana, log aggregation; SLO/SLI and alerting.
• Security: CIS hardening, least‑privilege RBAC, SBOM/signing, IaC and image scanning.
• Reliability: backups and DR (incl. ETCD), safe upgrades, blue/green and canary, autoscaling and capacity planning.
• Experience moving Docker Compose apps to Kubernetes with minimal downtime.
• Solid Linux administration, Hardening and shell scripting.
• Coding in Python or Go for tooling and automation. 

• Supplementary Health Insurance, including medical services and life insurance
• Monthly allowance for cultural and educational activities
• Monthly meal allowance
• Nutrition programs offering breakfast and healthy snacks
• Corporate loan options
• Team-building budgets and motivational programs
•  Support for psychological services