Cloud infrastructure (AWS primary, Azure secondary). Provision and maintain cloud resources via infrastructure-as-code - VPCs, subnets, IAM, compute, storage, and managed services - with reproducibility and cost awareness built in.
Networking and connectivity. Manage platform-level network plumbing — CNI configuration, ingress and service routing, network policies, and secure cross-cluster and on-prem connectivity via VPN tunnels, peering, and transit paths.
Automation and tooling. Build the glue that makes the harness self-service — CLIs, scripts, operators, and internal tooling that reduce toil and let engineers get work done without filing tickets.
Observability and reliability. Maintain the metrics, logging, and tracing pipeline; set and tune alerts; and participate in incident response and postmortems so the platform keeps getting better.
Provisioning and infrastructure-as-code. Keep environments standing reproducibly — Terraform / Crossplane, image management, and multi-vendor cluster bring-up alongside the team.
What We’re Looking For
3+ years in DevOps, SRE, or platform / infrastructure engineering, with hands-on ownership of systems you ran and improved - not just scripts that worked once.
Kubernetes fluency - you can operate clusters day-to-day, understand the scheduler and API machinery well enough to debug failures, and have written or maintained operators, Helm charts, or controllers.
Cloud proficiency - solid AWS (VPC, EC2, EKS, IAM, storage, networking) with working knowledge of Azure equivalents; comfort provisioning via Terraform or similar IaC.
Networking depth - practical understanding of CNI, ingress, service routing, network policies, and VPN / tunneling (IPsec, WireGuard, site-to-site) for secure multi-cluster and hybrid connectivity.
CI/CD experience - you have built and maintained pipelines (GitLab CI, GitHub Actions, Argo CD, Flux, or similar) and understand release engineering at a level beyond “it deploys on push.”
DevOps tooling chops - comfort across the toolchain: container runtimes, Helm / Kustomize, Prometheus / Grafana, ELK or Loki, and the judgment to pick the right tool for the job.
Strong software engineering fundamentals - Python or Go preferred; you write maintainable automation, not throwaway scripts.
A product mindset toward internal users - you measure success by adoption and reduced toil, not by tickets closed.
Bonus Points
Experience with on-premise infrastructure and deployments.
Experience operating in air-gapped or restricted-network environments - offline package management, image registries, and disconnected cluster bring-up.
Multi-cluster or multi-tenant Kubernetes in production, including RBAC and isolation as self-service.
Open-source contributions to Kubernetes, CI/CD, or infrastructure tooling.