About the Role

We are looking for a highly skilled and motivated Senior DevOps Engineer to join our platform engineering team. In this role, you will be a key contributor to the design, delivery, and evolution of our cloud infrastructure and Kubernetes platforms. You are someone who thrives in ambiguity, brings a growth mindset to every challenge, and communicates clearly across engineering and business stakeholders.

Key Responsibilities

Design, build, and maintain scalable, secure, and highly available infrastructure across multi-account, multi-region, and multi-AZ AWS environments

Lead Infrastructure as Code practices using Terraform — authoring reusable modules, managing workspaces, and enforcing standards across teams

Administer and evolve Amazon EKS clusters including upgrades, secondary networking configurations, and cluster lifecycle management

Write and maintain Helm charts including umbrella charts and integration of OSS/community charts; troubleshoot complex Helm deployment issues

Develop and maintain custom Kubernetes controllers and operators using standard tooling

Define and champion multi-cloud architecture patterns and best practices

Analyze open-ended infrastructure and platform problems, propose well-reasoned solutions, and drive them to completion with minimal supervision

Collaborate closely with development, security, and architecture teams — communicating complex technical concepts clearly to diverse audiences

Mentor junior engineers and contribute to a culture of continuous learning and improvement

Required Skills & Experience

Core Competencies

Strong communication skills — written and verbal — with the ability to present technical proposals to both engineers and non-technical stakeholders

Proven ability to analyze ambiguous, open-ended problems and independently propose and deliver pragmatic solutions

Strong problem-solving mindset with a structured, methodical approach to debugging and root-cause analysis

Demonstrated growth mindset — actively learns from incidents, seeks feedback, and keeps up with evolving industry practices

Terraform

hands-on experience writing production-grade Terraform configurations and reusable modules

experience with Terraform workspaces for environment and account segregation

experience using Terraform providers to provision and manage AWS resources across multi-account, multi-region, and multi-AZ topologies

experience provisioning and managing EKS clusters, VPC networking, and related AWS services via HashiCorp Terraform modules

experience configuring EKS secondary networking (e.g., VPC CNI custom networking) via Terraform

Good understanding of multi-cloud infrastructure architecture and portability considerations

Kubernetes & EKS

hands-on experience in Amazon EKS administration — cluster provisioning, IAM integration, node group management, and day-2 operations

experience as a Kubernetes practitioner — workload management, RBAC, networking, storage, autoscaling, and observability

understanding of Custom Resource Definitions (CRDs) and consumption of OSS Helm charts and Kubernetes operators

experience managing and executing EKS cluster version upgrades with minimal disruption

Hands-on experience writing custom controllers and operators using frameworks such as controller-runtime or Kubebuilder

hands-on experience with AWS Load Balancer Controller — ingress and service configuration on EKS

hands-on experience with Kubernetes Gateway API — HTTPRoute, GatewayClass, and migration from Ingress

Helm

experience authoring Helm charts for complex, production workloads

experience building and managing umbrella charts for multi-component application deployments

understanding of CRDs and OSS Helm charts — including evaluation, customisation, and maintenance

experience troubleshooting Helm release failures, hook issues, and chart rendering problems

Istio

hands-on experience deploying and operating Istio in production Kubernetes environments

experience with both Istio Sidecar (proxy) and Ambient mesh deployment modes

understanding of Istio core concepts and traffic management — VirtualService, DestinationRule, Gateway, AuthorizationPolicy, mTLS, and observability integration

AWS

hands-on experience designing and operating multi-region, multi-AZ AWS architectures

Deep working knowledge across core AWS services, including:

EKS — cluster administration, networking, and integrations

VPC — subnets, route tables, security groups, VPC peering, Transit Gateway

EC2 — instance types, launch templates, Auto Scaling Groups

S3 — bucket policies, lifecycle rules, replication

AWS API Gateway

Networking — NAT, IGW, PrivateLink, VPN, Direct Connect concepts

ACM (AWS Certificate Manager) — certificate provisioning, renewal, and integration with AWS services

PCA (AWS Private Certificate Authority) — private CA management for internal TLS

Route 53 — DNS management, health checks, routing policies

Strong understanding of TLS — certificate chains, mTLS, termination strategies, and PKI fundamentals

Nice to Have

Experience with GitOps tooling (e.g., ArgoCD, GitHub Actions, Cloudbees Jenkins)

Familiarity with observability stacks (e.g., Prometheus, Grafana, OpenTelemetry)

Experience with CI/CD pipelines (e.g., GitHub Actions, Jenkins, Atlantis)

Exposure to service mesh technologies (e.g., Istio, Linkerd)