INFUSE is looking for a Senior DevOps Engineer to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization. We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.
DevOps engineer
подготовься к отклику
ai-инструментыЧтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме
описание
задачи
- Design, build and run secure AWS infrastructure (EC2 with Docker Compose, EKS) with Terraform and Ansible; move suitable workloads from EC2 to EKS
- Build and maintain CI/CD in GitHub Actions; move remaining Jenkins jobs to GitHub Actions
- Keep new and existing services at our security baseline: Cloudflare proxy with WAF and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root
- Own monitoring, alerting and logs on our standard stack (Grafana, OpenTelemetry, Sentry); on-call, incident response, post-incident reviews
- Own backups and regular restore tests
- Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects
- Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket
- Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards
- Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review
- Work with internal teams and contractors
- set and enforce standards
- mentor other engineers
требования
- 5+ Years in DevOps / SRE: Proven background operating mission-critical production environments, including 3+ years of hands-on experience running AWS at scale
- IaC & CI/CD Mastery: Expert with Terraform, highly proficient with Ansible, and experienced in designing production workflows with GitHub Actions
- Containerization & Kubernetes: Strong production experience with Docker and Kubernetes (specifically managed AWS EKS and Helm)
- Production Security & Incident Management: Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and Cloudflare WAF/proxy configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills
- English proficiency at B2 level or higher.
- Application Ecosystem Familiarity: Experience supporting Node.js and Python microservices paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare
- Modern Observability: Practical setup and maintenance of Grafana, Prometheus, and OpenTelemetry pipelines
- Core Scripting & Systems: Deep fluency in Linux administration, Bash, and Python scripting.
- Collaborative Leadership: Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.
- AI-Augmented Workflow: Daily experience leveraging modern AI developer tools and agents (Claude Code preferred) to accelerate engineering output.
- Proactive & Autonomous Mindset: A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table.
- Будет плюсом: Kafka (MSK); Jenkins; ClickHouse; Backstage; Sentry; Langfuse; SonarQube/Trivy/gitleaks; Cloudflare Zero Trust; AIOps; leading a small DevOps team; AWS/CKA certifications
условия
- Fully remote work format
- Schedule: Monday–Friday, 2 PM – 11 PM Eastern European Time (including 1 hour break)
- A collaborative, innovation-first environment that values initiative and experimentation
- Paid time off and sick leave
- Reduced working hours on Fridays during the summer
- Days off on US national holidays and your birthday.
навыки
Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.