DevOps Engineer

• Design, deploy, and manage production‑grade AWS cloud infrastructure including EKS, EC2, RDS, Lambda, and Step Functions
• Manage multi‑tenant Kubernetes clusters with a focus on autoscaling, workload isolation, network policies (Calico), and policy governance (Kyverno)
• Implement and maintain Infrastructure as Code using Terraform with reusable, version‑controlled modules across multiple environments
• Build, own, and continuously improve CI/CD pipelines using Git Lab CI and ArgoCD, following Git Ops declarative deployment principles
• Establish and maintain end‑to‑end observability using Prometheus, Grafana, Loki, Thanos, Datadog, and Dynatrace for real‑time alerting and performance insights
• Configure and enforce secure AWS networking (VPC, VPN, NAT, Transit Gateway) and implement IAM, WAF, and KMS security governance
• Manage Linux‑based environments (Amazon Linux, RHEL) including system configuration, networking, and automated patching via Ansible
• Lead cost optimization initiatives through right‑sizing, autoscaling policy design, and resource utilisation analysis
• Perform troubleshooting and root cause analysis for production incidents, ensuring rapid resolution with minimal service impact
• Contribute to security observability initiatives including SIEM integration (Wazuh or equivalent) and LLM‑enabled operational tooling where applicable
• Collaborate closely with program delivery teams, solution architects, and SITA stakeholders to align infrastructure with program objectives

Skill Area

Required Proficiency

AWS Cloud Services: EKS, EC2, RDS, Lambda, Step Functions, Route
53, Cloud Front, WAF, KMS, IAM — hands‑on deployment and governance

CI/CD & Git Ops:
Git Lab CI, ArgoCD declarative deployments, AWS Code Build/Code Deploy;
Git Ops workflow ownership end‑to‑end

Monitoring & Observability:
Prometheus, Grafana, Loki, Thanos, Cloud Watch, Datadog, Dynatrace — full‑stack observability and alerting

Networking & Security: VPC, VPN, NAT Gateway, Transit Gateway configuration; IAM, WAF, KMS governance;
Wazuh SIEM or equivalent

Linux Administration:
Amazon Linux, RHEL/CentOS — system configuration, networking (ufw/firewalld), scripting

Scripting & Automation:
Bash scripting for system administration;
Ansible for configuration management and patching

AI/LLM Integration:
Desirable: on‑prem or cloud LLM deployment (Open Shift/Kubernetes), prompt engineering, AI‑enabled workflows

• Minimum 4 years of hands‑on Dev Ops / Cloud Infrastructure engineering experience in production environments
• Demonstrated experience managing production EKS clusters with Terraform IaC — portfolio evidence or verifiable project history required
• Proficiency in Git Ops methodology with ArgoCD and Git Lab CI as primary toolchain
• Strong AWS services knowledge across compute, networking, security, and serverless (EKS, EC2, RDS, Lambda, IAM, WAF, KMS, Route
  53)
• Full observability stack experience:
  Prometheus + Grafana + Loki minimum;
  Datadog or Dynatrace highly preferred
• Linux administration proficiency (Amazon Linux / RHEL) with Bash scripting and Ansible automation

• Experience with LLM/AI platform deployment on Kubernetes or Open Shift (on‑prem or cloud)
• Familiarity with Wazuh SIEM, Sysdig, or equivalent security event monitoring tooling
• Experience with Rook CEPH or distributed storage management for persistent workloads
• Serverless migration experience (on‑prem to AWS Lambda / Aurora / Step Functions)
• Karpenter node provisioner experience for cost‑efficient EKS autoscaling
• Aviation or travel industry domain exposure (not mandatory)

A Bachelor's or Master's degree in Computer Science, Software Engineering, or a related technical discipline is preferred.

Relevant certifications will strengthen an application:

• AWS Certified Dev Ops Engineer – Professional or AWS Certified Solutions Architect
• Hashi Corp Terraform Associate or Professional