DevOps Engineer

• Design, provision, and manage cloud infrastructure using Pulumi and Infrastructure-as-Code best practices.
• Deploy and operate EKS clusters with keeping solid security, observability, cost efficiency compliant to best practices
• Manage Kubernetes workloads based on Helm, kustomize or custom Kubernetes operators
• Implement and maintain observability stacks - VictoriaMetrics, VictoriaLogs, Grafana, Alertmanager, Zipkin, and OpenTelemetry - for Node.js, python and golang based services.
• Build custom dashboards and alert rules for infrastructure and application performance monitoring.
• Automate operations and writing infrastructure-oriented code on Typescript or Golang.
• Administer GitLab CI/CD pipelines, runners, and environments for seamless multi-repo workflows.
• Support backend teams by integrating Node.js, Golang and Python microservices into unified deployment and monitoring pipelines.
• Apply strong security and compliance practices (RBAC, IAM, secrets management, mTLS).
• Contribute to disaster recovery, cost optimization, and reliability engineering strategies.

General skill

• System design, architecture and patterns understanding
• Proven experience in DevOps/SRE position
• Deep understanding of Linux basics and containers (cgroups, cpu scheduling, kernel parameters)
• OCI containers (docker/podman)
• Image build tools (buildkit, kaniko, buildah)
• Networking knowledge, according to CCNA level
• Backup and restore strategies, disaster recovery planning

Programming languages and frameworks

• JavaScript/Typescript basic level
• Understanding of NodeJS runtime
• Golang basics
• REST API implementations
• SOLID principles
• 12-factor app methodology
• Skills of bash scripting and perception, when bash should be replaced to programming language

Git, IaC, CI/CD

• Advanced git knowledge
• Gitlab CI/CD experience
• Pulumi basics and especially typescript implementation
• Understanding of cattle/pets infrastructure approaches,

Cloud technologies

• Experience with AWS basic services (EC2, S3, RDS, VPC, IAM, ALB)
• EKS clusters with worker nodes and networking administration, understanding of transparent IAM security (IRSA, Pod execution roles)
• Cloudfront cdn, WAF security

Kubernetes

• Understating of core concepts, such pods, replicasets, deployments, services, ingresses, secrets
• Experience with different deployment tools and concepts, such Helm, kustomize (overlays concept), ArgoCD/Flux, Pulumi Kubernetes provider
• Statedul/stateless concepts, difference between deployments and statefulsets, storage classes
• Internal Kubernetes networking, CNI like Cilium, AWS CNI, Flannel
• Cluster monitoring via Prometheus/VictoriaMetrics, logging via Loki/ViactoriaLogs
• Logging agents - vector, fluentbit

Security

• Source code and containers images security scanning - trivy, SonarCube, Artifactory
• OAuth and SAML implementations protocols, SSO concept
• SSL/TLS understanding
• Goteleport access security
• Keycloak IDM

Monitoring and Observability

• Understanding difference between metrics, logs, tracing
• Prometheus-like metrics solutions, Grafana dashboards
• Logging platforms based on Loki/VoctoriaMetrics/Graylog
• Alerting with alertmanager
• Distributed tracing systems like Zipkin, ElasticSearch APM

Bonus Points for Experience with

• Kubernetes service mesh (Istio, Linkerd)
• Kubernetes operator pattern (Kubebuilder, Operator SDK)
• OpenSearch and Redis cluster administration.
• RabbitMQ administration
• NoSQL solutions - MongoDB, DynamoDB
• Policy-as-Code (OPA, Kyverno) or security automation (Falco, Trivy, Snyk).
• Serverless architecture (AWS Lambda)
• Cost management, auto-scaling, and infrastructure benchmarking.
• Chaos engineering or resilience testing practices.