Senior DevOps Engineer

Spyrosoft Ltd · via Himalayas ·

TypeFull-time job
LocationAlbania, Andorra, Austria, Belarus, Belgium
Posted2 hours ago
We are looking for an experienced Senior DevOps Engineer to join a team building and operating modern cloud-native solutions, including enterprise and AI-powered platforms.
This is a hands-on senior role with real ownership of production infrastructure. You will work across Kubernetes, Infrastructure as Code, GitOps, networking, security, CI/CD, databases, and disaster recovery, while helping the team continuously improve automation, reliability, and operational readiness.

Tech Stack:

T-Cloud: CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, NAT

Kubernetes

OpenTofu / Terraform

Crossplane

Argo CD & GitOps

Helm

GitLab CI/CD

JFrog Xray / Artifactory

Traefik

cert-manager

PostgreSQL

CloudNativePG

pgBackRest

n8n Enterprise

Linux

OIDC

Container and network security

Required Qualifications:
We are looking for a senior engineer who combines strong cloud and Kubernetes expertise with hands-on production experience and an ownership mindset.

Commercial, hands-on experience with T-Cloud is a must-have, particularly with CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, and NAT

Practical experience with CCE workload security groups and VPC network ACLs

Senior-level experience operating Kubernetes in production in a DevOps, Platform Engineering, Cloud Engineering, or SRE role

Strong Infrastructure as Code experience using OpenTofu or Terraform

Hands-on experience implementing GitOps delivery with Argo CD and Helm

Strong knowledge of GitLab CI/CD, including pipeline design, stages, automation, and runner configuration

Good understanding of container security and hardening, including non-root workloads, read-only filesystems, and Kubernetes Pod Security Admission

Solid Linux administration skills, including systemd, SSH, and firewalls

Production experience with backup, restore, and disaster recovery processes

Strong problem-solving and troubleshooting skills

Ability to work independently and take ownership of technical solutions

A proactive approach to automation, documentation, and continuous improvement

Ability to collaborate effectively with development, architecture, and security teams in an international environment

Fluent English

Nice to Have:

Knowledge of Crossplane, including compositions for infrastructure and networking provisioning

Experience running n8n Enterprise or other workflow-automation platforms in production

Experience operating PostgreSQL on Kubernetes, ideally using CloudNativePG and pgBackRest

Knowledge of JFrog Xray / Artifactory, particularly container image scanning in CI/CD processes

Experience with Traefik and cert-manager

Knowledge of OIDC-based authentication

Experience with AI-powered or cloud-native enterprise platforms

Experienced in using AI tools in day-to-day workflow, for example to support automation, troubleshooting, documentation, or engineering productivity

German language skills

Project Description:
You will join a team developing and operating a modern cloud-native platform on T-Cloud, supporting enterprise and AI-powered applications.

The infrastructure is designed for high availability, security, and resilience, with CCE Turbo Kubernetes clusters distributed across three availability zones. The environment follows Infrastructure as Code and GitOps principles, using OpenTofu, Crossplane, Argo CD, Helm, and GitLab CI/CD to automate infrastructure provisioning and application delivery.

This is much more than an infrastructure maintenance role. You will have the opportunity to shape, automate, secure, and continuously improve a sophisticated production environment while taking ownership of solutions from design through deployment and ongoing operations.

You will work closely with software engineers, architects, and security specialists in an international environment, contributing directly to platform reliability, scalability, security, and developer experience.

Project Setup:

Start: ASAP

Contract until: 30 June 2027, with an opportunity for extension

Workload: Full-time

Location: 100% remote within the EU

Language: Fluent English; German is a plus

Scope of Services:
As a Senior DevOps Engineer, you will:

Design, build, and operate highly available cloud-native infrastructure on T-Cloud, including CCE Turbo clusters distributed across three availability zones

Develop and maintain reusable OpenTofu modules for compute, networking, storage, and DNS

Provide self-service tenant networking capabilities, including subnets, EIPs, SNAT, and namespaces, using Crossplane compositions

Deliver applications through GitOps using Argo CD ApplicationSets and Helm charts that you author and maintain

Design and maintain GitLab CI/CD pipelines and runners, integrating JFrog Xray image scanning into every release

Operate the production application layer, including n8n Enterprise in queue mode with OIDC

Operate PostgreSQL on Kubernetes with CloudNativePG

Secure traffic end to end using Traefik, TLS 1.3, automated certificates via cert-manager, workload security groups, VPC network ACLs, and controlled egress

Harden containerized workloads using non-root execution, read-only filesystems, and Pod Security Admission in restricted mode

Own backup and disaster recovery processes, including pgBackRest backups, WAL archiving, point-in-time recovery, EVS snapshots, DR runbooks, and regular recovery drills

Monitor and troubleshoot complex infrastructure and production issues and drive them through to resolution

Continuously improve automation, documentation, security, platform reliability, and operational readiness

Collaborate with software engineers, architects, and security teams to improve the overall platform

Take end-to-end ownership of infrastructure solutions and actively contribute to the evolution of the platform

Originally posted on Himalayas
devops-engineer cloud-engineer platform-engineer site-reliability-engineer
Apply on Himalayas →

Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.