DevOps Engineer

Job description

We are looking for a DevOps engineer to join our company

Basic requirements for the DevOps Engineer:

- 7+ years of experience in DevOps / Platform Engineering / SRE

- 5+ years of hands-on AWS experience in production environments (EC2, VPC, S3, IAM, Route53)

- 3+ years of Terraform experience, including reusable modules, state management, and CI/CD integration

- 3+ years of Ansible experience - playbooks, roles, inventory management for multi-node deployments

- Strong hands-on experience with GitHub Actions CI/CD - workflows, Docker Buildx, automated builds, and deployments

- Proficiency in Bash and Python scripting - bootstrap automation, service auto-detection, idempotent deployment scripts

- Strong Linux administration skills in production (Ubuntu, Debian, CentOS, Rocky Linux)

- Networking, firewalls (iptables/ufw), VPN, SSH hardening, SSL/TLS certificate management

- Hands-on experience with Docker and Docker Compose at an advanced level - host networking, volume management, multi-service stacks, private registries (Harbor)

- Hands-on experience with Kubernetes and AWS EKS in production - Helm, cluster management, service mesh, ingress controllers

- Deep experience with Prometheus - configuration, file_sd_configs, PromQL, alerting rules, retention tuning

- Grafana - dashboard provisioning, datasources, alerting, service accounts, embedding

- Alertmanager - routing, receivers (Email, Telegram, Slack, MS Teams, SNMP, Webhooks)

- Experience with exporters ecosystem - node-exporter, process-exporter, cAdvisor, mysqld-exporter, JMX exporter

- Understanding of JVM metrics (HikariCP, heap, GC) - we monitor WildFly/Java application servers

- Nginx - reverse proxy, SSL termination, basic auth, WebSocket support, IP-based access control

- Database administration: MySQL/MariaDB (setup, user management, monitoring) plus at least one of PostgreSQL, Oracle DB, ClickHouse

- Experience with IAM, secrets management, and infrastructure security best practices

- Experience supporting production systems, incident response, and root cause analysis

- Confident Git skills (branching, tags, hooks, releases)

- Strong communication skills and ability to work across teams

- English level: B2+

Nice to Have

- AWS Certified DevOps Engineer – Professional or AWS Certified Solutions Architect – Associate

- CKA / CKAD

- Experience with Hetzner (Dedicated/Cloud)

- Experience with GitOps tools (Argo CD)

- Experience with AWS Organizations / multi-account environments

- Experience with cost optimization / FinOps

- Experience mentoring engineers and defining engineering standards

- Spring Boot Actuator - understanding Java microservice metrics

- SNMP - traps, MIB files, SNMPv2c/v3

- Hazelcast - cache clusters, native Prometheus endpoint

- Oracle DB - exporter setup, administration

- ELK/OpenSearch for centralized logging

- Cloud-to-cloud migration experience

Responsibilities

- Designing, building, and maintaining software delivery pipelines and infrastructure that support continuous integration, delivery, and deployment

- Building and maintaining Terraform modules and Ansible playbooks for automated product delivery to enterprise clients across AWS, Hetzner, and on-premise environments

- Collaborating with engineering teams to ensure that software is delivered with high quality, speed, and reliability

- Developing and maintaining monitoring and alerting systems (Prometheus, Grafana, Alertmanager, ~20 exporter types) to proactively identify and address issues in production environments

- Troubleshooting production issues, conducting root cause analysis, and implementing remediation plans

- Managing and scaling infrastructure resources - servers, databases, Docker services, EKS/Kubernetes clusters - to ensure optimal performance and cost-effectiveness

- Owning the full monitoring stack: Prometheus, Grafana, Alertmanager, Nginx reverse proxy, SNMP Notifier, and notification channels (Email, Telegram, Slack, MS Teams, Webhooks, SMS)

- Packaging and automating product deployments for client environments - repeatable, infrastructure-as-code driven delivery using Terraform and Ansible

- Implementing security best practices and ensuring compliance with industry standards and regulations

- Maintaining and improving deployment automation scripts (Bash) for multi-node bootstrap, service detection, and rolling updates

- Documenting infrastructure, deployment procedures, and runbooks - we maintain strict documentation standards

- Continuously learning and keeping up-to-date with new technologies and industry trends to improve system performance, security, and efficiency

Technology Landscape

Monitoring Stack: Prometheus, Grafana, Alertmanager, Nginx, SNMP Notifier

Application Servers: WildFly/FTACS, Hazelcast, Spring Boot microservices, IIS Windows

Databases: MySQL, PostgreSQL, Oracle, ClickHouse

Frontend: Angular, FastAPI (config UI)

Infrastructure: Hetzner Dedicated + Cloud, AWS (EKS, EC2, VPC, S3, Route53), Docker Compose, Kubernetes, GitHub Actions

IaC & Delivery: Terraform, Ansible

Notifications: Email (SMTP), Telegram, Slack, MS Teams, SNMP Traps, Webhooks, SMS

~20 exporter types: node, process, cAdvisor, MySQL, Oracle, JMX, ClickHouse, Postgres, Nginx, API metrics, and more