Platform engineer in fintech

We are looking for a Senior Platform Engineer to own the hands-on, day-to-day engineering and reliability of Kubernetes-based application platforms. You will enable development and vendor teams to deploy microservices safely, consistently and independently through Helm, GitLab CI/CD, Argo CD and HashiCorp Vault. This is an operational engineering role that requires direct production experience. It is not solely architecture, coordination or traditional infrastructure support.

• Own hands-on day-to-day engineering and reliability of Kubernetes-based application platforms. Enable development and vendor teams to deploy microservices safely, consistently and independently through Helm, GitLab CI/CD, Argo CD and HashiCorp Vault. This is an operational engineering role requiring direct production experience—not solely architecture, coordination or traditional infrastructure support.
• Partner with developers and vendors to onboard microservices. Troubleshoot build, deployment, configuration, networking, ingress, secret and runtime issues across environments.
• Create, maintain, review and roll out Helm charts and values. Standardize reusable templates, environment-specific configuration, health probes, resource requests/limits and rollback procedures.
• Operate self-hosted GitLab CI/CD pipelines, runners and deployment workflows. Automate testing, packaging, promotion, releases and recovery where practical.
• Build and maintain Argo CD applications and projects, GitOps repositories, sync policies, RBAC and drift detection. Resolve failed syncs and deployments.
• Administer Kubernetes clusters (including OKE/GKE): namespaces, RBAC, service accounts, storage classes, ingress controllers, networking and essential add-ons.
• Engineer resilient workload placement and scaling: HPA, cluster autoscaling, topology spread constraints, node/pod affinity and anti-affinity, PodDisruptionBudgets, probes and graceful termination.
• Plan, test and execute Kubernetes control-plane, node-pool and add-on upgrades with compatibility checks, rollback plans and minimal downtime.
• Integrate HashiCorp Vault with Kubernetes for authentication and secret delivery. Operate policies, roles, Kubernetes auth, and Vault Secrets Operator/CSI or equivalent. Support troubleshooting of the dynamic-secret lifecycle.
• Own production incident investigation for platform-related failures using logs, events, metrics and traces. Perform root-cause analysis, document fixes and automate repetitive recovery.
• Build and operate shared PaaS-style platform capabilities. Improve self-service, observability, reliability, security and operational runbooks.

• 5+ years in DevOps/SRE/platform engineering with meaningful production ownership; 3+ years of hands-on Kubernetes operations and microservice deployments
• Strong Kubernetes administration and troubleshooting: kubectl, scheduling, networking, DNS, ingress, persistent volumes, upgrades and high availability
• Proven Helm chart authoring, templating, release management and troubleshooting
• Production GitOps with Argo CD and CI/CD with GitLab, preferably self-hosted GitLab and runners
• Practical HashiCorp Vault integration with Kubernetes, policies, auth methods, secrets management and secure delivery
• Comfortable with Linux, Bash/Python scripting, Git, containers, Terraform/IaC fundamentals and cloud infrastructure basics
• Experience supporting application developers directly and resolving complex live deployment incidents
• Experience in FinTech, banking, accounting, or payment systems.
• English B2/C1.
• Будет плюсом: Keycloak or ForgeRock identity and access management operations, SSO/OIDC/SAML integration and troubleshooting; Oracle Kubernetes Engine (OKE) and Google Kubernetes Engine (GKE), multi-cloud operations and disaster recovery; Prometheus/Grafana, Loki, network policies, service meshes, image registries and security scanning

• 20 billable days off in the first year of cooperation, all next years - 25 billable days off
• Fair and competitive compensation
• Friendly team and enjoyable working environment
• Clearly described business processes in the company that really work
• Regular updates on company news, Q&A sessions with top management
• Flexible work schedule
• Remote work mode
• Ability to transfer unused vacation to the next year