описание
The role is responsible for architecting, deploying, and maintaining the company’s core infrastructure, focusing on automation, standardization, and high availability. It supports secure and scalable application delivery and improves the efficiency, reliability, and security of the software development lifecycle.
задачи
- Design, deploy, and maintain on-premise Kubernetes clusters, including upgrades, scaling, networking, ingress, and storage
- Manage infrastructure and application delivery using GitOps (ArgoCD) and Infrastructure as Code (Ansible, Terraform)
- Build and support CI/CD pipelines in GitLab CI, incorporating security scanning and quality gates
- Build and evolve the observability platform, including metrics, logs, traces, dashboards, and alerting
- Define and track SLI/SLOs for critical services and participate in incident response
- Manage container images and artifacts in Nexus and Harbor, including versioning, retention, and vulnerability scanning
- Manage secrets in HashiCorp Vault and deliver them to Kubernetes via the External Secrets Operator
- Ensure infrastructure security through network segmentation, TLS, access control, and policy enforcement
- Set up backup and disaster recovery procedures for clusters and stateful workloads
- Optimize resource usage and costs through requests/limits, autoscaling, and capacity planning
- Automate routine operations using scripts and AI-assisted tools and agents
- Write and maintain technical documentation and runbooks
- Work closely with Development, Data Platform, DBA, and InfoSec teams, supporting developers with platform onboarding
требования
- Experience with Kubernetes clusters (Kubespray, Calico VXLAN, MetalLB, NGINX Ingress Controller)
- Experience with GitOps (ArgoCD), Git, GitFlow, and Semantic Versioning
- Knowledge of monitoring and observability platforms: Prometheus, ELK/EFK, Grafana Loki, Grafana Tempo, Jaeger, OpenTelemetry
- Experience with registry and artifact repositories (Nexus, Harbor)
- Experience with containers (Docker, Helm Chart) and CI/CD tools (GitLabCI)
- Experience with secret management (HashiCorp Vault, External Secrets Operator) and Infrastructure as Code tools (Ansible, Terraform)
- Scripting and automation skills (Bash, Python)
- Deep knowledge of network security concepts (DMZ, firewall, TLS, Proxy) and Linux administration
- Strong analytical thinking, problem-solving, and teamwork skills
- High sense of responsibility and attention to detail
- Azerbaijani, English, and Russian language skills
- Higher or secondary specialized education
- Minimum 1 year of work experience in the relevant field
- Будет плюсом: Go, familiarity with SRE, DevSecOps, and AIOps practices, CKA certification, CKAD and/or CKS
условия
- Opportunity to contribute to the company’s success by participating in decision-making processes and driving positive change
- Professional, supportive, and collaborative team environment
- Access to learning and development opportunities
- Ideas and initiatives are valued, and professional growth is supported
