Devops - Senior Engineer

Job Description

Key Responsibilities
. Build and maintain CI/CD pipelines using GitLab CI for automated build, test, and deployment workflows.
. Containerize applications using Docker, optimize Dockerfiles, and manage image lifecycle (tagging, scanning, promotion).
. Deploy and operate applications on Kubernetes, including rollout strategies, scaling, self-healing, and resource optimization.
. Create, maintain, and version Helm charts for consistent and repeatable deployments across environments.
. Manage secrets and sensitive configuration using HashiCorp Vault (authentication methods, policies, secret engines, rotation workflows).
. Troubleshoot and resolve issues across the stack: pipeline failures, container runtime issues, cluster scheduling, and networking connectivity.
. Collaborate with developers to improve deployment reliability, observability, and release velocity.
. Apply infrastructure and platform best practices including least-privilege access, auditability, and secure configuration.
. Perform basic networking diagnostics (DNS, TLS/certs, routing basics, firewalls/security groups concepts, port troubleshooting).
. Support Linux-based systems administration tasks: process/service management, permissions, logs, package management, shell scripting.

Required Skills & Experience
. Docker: building images, multi-stage builds, registries, best practices for size/security.
. Kubernetes: core objects (Pods, Deployments, Services, ConfigMaps, Secrets), troubleshooting, namespaces, resource requests/limits.
. Helm: chart authoring, templating, values management, environment-specific overrides.
. GitLab CI: pipelines, jobs/stages, variables, artifacts, rules/only/except, runners, caching.
. Vault: secrets management, policies, authentication integration, secure secret retrieval in CI/CD or workloads.
. Linux: strong command-line usage, system/service troubleshooting, logs, permissions, scripting basics.
. Basic Networking: TCP/IP basics, DNS, HTTP/HTTPS, TLS/cert troubleshooting, connectivity debugging tools (curl, nslookup/dig, netstat/ss).

Nice-to-Have (Preferred)
. Observability tooling (Prometheus, Grafana, ELK/EFK, OpenTelemetry).
. IaC tools (Terraform / Ansible).

Sample Tooling / Tech Stack
. CI/CD: GitLab CI
. Containers: Docker
. Orchestration: Kubernetes
. Packaging: Helm
. Secrets: HashiCorp Vault
. OS: Linux
. Networking: DNS/TLS/HTTP troubleshooting

Mandatory Competencies