Senior Staff Engineer(Senior DevOps Engineer)

Must have Skills : Cloud development (Strong)

Job Summary

We are seeking an experienced and highly skilled Senior DevOps Engineer to join our Cloud Infrastructure and Platform Engineering team supporting enterprise-scale applications and cloud platforms for a leading global hospitality organization.

The ideal candidate will have strong hands-on experience with Alibaba Cloud Terraform Harness Open Policy Agent (OPA) and Kubernetes with a proven ability to design implement automate and maintain secure scalable and highly available cloud infrastructure and DevOps platforms.

This role requires deep technical expertise in cloud infrastructure CI/CD pipeline engineering Infrastructure as Code (IaC) Kubernetes platform management and policy-driven security automation.

The successful candidate will work closely with global Development Cloud Infrastructure Security Architecture and Operations teams to ensure reliable application delivery infrastructure stability and continuous improvement of enterprise DevOps capabilities.

Key Responsibilities

1. Cloud Infrastructure Engineering Design provision operate and optimize enterprise cloud infrastructure on Alibaba Cloud. Manage cloud resources including ECS VPC SLB/ALB NAT Gateway Cloud Enterprise Network (CEN) storage and security services. Develop and maintain reusable Terraform modules to automate cloud infrastructure provisioning and configuration. Implement Infrastructure as Code best practices including version control remote state management infrastructure testing and configuration consistency. Ensure cloud infrastructure meets enterprise requirements for availability scalability security performance and cost efficiency. Troubleshoot complex infrastructure issues across cloud compute networking storage and application environments.

2. DevOps & CI/CD Engineering Design implement maintain and optimize enterprise CI/CD pipelines using Harness. Configure and manage Harness pipelines connectors environments infrastructure definitions deployment strategies and approval workflows. Integrate Harness with source code repositories artifact repositories container registries Kubernetes and cloud infrastructure. Implement automated application deployment validation rollback and release management processes. Support advanced deployment strategies such as blue-green deployments canary releases and progressive delivery. Troubleshoot pipeline failures and improve deployment reliability security and efficiency. Collaborate with Development and Operations teams to standardize DevOps practices and accelerate application delivery.

3. Kubernetes & Container Platform Engineering Deploy operate maintain and troubleshoot Kubernetes clusters and containerized applications. Manage Kubernetes resources including Deployments StatefulSets Services Ingress ConfigMaps Secrets RBAC and autoscaling. Support Alibaba Cloud Container Service for Kubernetes (ACK) and enterprise Kubernetes environments. Develop maintain and customize Helm charts to support standardized application deployments. Troubleshoot Kubernetes networking resource allocation scheduling storage application availability and performance issues. Work with Kubernetes Operators and controllers to automate application lifecycle management and platform operations. Implement Kubernetes security monitoring capacity management and high-availability best practices.

4. Security Automation & Policy Management Design implement and maintain policy-based security and governance controls using Open Policy Agent (OPA). Develop and manage OPA policies using Rego to enforce enterprise security compliance and operational requirements. Integrate OPA with Kubernetes admission control CI/CD pipelines and infrastructure deployment workflows. Implement Policy as Code to automate compliance checks and prevent unauthorized or non-compliant deployments. Collaborate with Security and Architecture teams to establish and maintain infrastructure and application deployment standards. Support access control secrets management vulnerability remediation and secure configuration management.

5. Platform Reliability & Operational Excellence Maintain the reliability availability performance and security of cloud infrastructure and DevOps platforms. Support production incident investigation root cause analysis and permanent corrective actions. Identify opportunities to improve platform stability deployment efficiency and operational automation. Develop and maintain technical documentation operational runbooks deployment procedures and infrastructure standards. Collaborate with globally distributed teams to support production releases infrastructure changes and platform upgrades. Support business-critical applications operating in a 24x7 global hospitality environment.

Required Qualifications & Technical Skills

1. Alibaba Cloud Strong hands-on experience designing deploying and managing production infrastructure on Alibaba Cloud. Solid understanding of Alibaba Cloud services including ECS VPC SLB/ALB NAT Gateway RAM OSS and related infrastructure components. Experience implementing secure scalable and highly available cloud architectures. Ability to independently troubleshoot cloud infrastructure and platform-related issues.

2. Terraform Strong hands-on experience using Terraform for Infrastructure as Code. Proven experience developing reusable Terraform modules for cloud infrastructure provisioning. Familiarity with Terraform state management remote backends workspaces providers and dependency management. Experience integrating Terraform into automated CI/CD workflows. Ability to manage infrastructure changes safely across multiple environments.

3. Harness Strong hands-on experience designing implementing and maintaining CI/CD pipelines using Harness. Experience configuring Harness connectors environments deployment stages approval workflows and deployment strategies. Experience integrating Harness with Kubernetes Terraform Git repositories and container registries. Ability to independently troubleshoot and optimize complex deployment pipelines.

4. Open Policy Agent (OPA) Strong understanding of Open Policy Agent and Policy as Code principles. Hands-on experience developing testing and maintaining OPA policies using Rego. Experience integrating OPA with Kubernetes and/or CI/CD pipelines. Ability to implement automated security and compliance controls for infrastructure and application deployments.

5. Kubernetes Strong hands-on experience administering and troubleshooting production Kubernetes environments. Experience deploying and managing containerized applications using Docker and Kubernetes. Practical experience developing customizing and maintaining Helm charts. Understanding of Kubernetes Operators custom resources and controller-based automation. Strong knowledge of Kubernetes networking RBAC resource management scheduling storage and security. Experience with Alibaba Cloud ACK or equivalent managed Kubernetes services.

Preferred Qualifications & Technical Skills

1. CDN & Edge Computing Experience configuring and managing enterprise CDN solutions preferably Akamai or Tencent Cloud EdgeOne. Understanding of CDN caching strategies cache invalidation cache-control policies and content delivery optimization. Experience configuring CDN security policies WAF access control and edge security rules. Familiarity with edge computing edge rules and traffic routing optimization. Ability to troubleshoot CDN-related performance availability and security issues.

2. Scripting & Automation Experience developing automation scripts using Python Bash Shell or similar scripting languages. Ability to automate infrastructure operations deployment processes system configuration and routine maintenance activities. Experience improving DevOps backend platforms through automation integration and workflow optimization. Familiarity with REST APIs and integration between cloud platforms CI/CD tools and enterprise systems.

3. Cloud Networking Good understanding of enterprise cloud networking concepts including VPC vSwitch routing tables gateways NAT VPN DNS and load balancing. Experience designing or troubleshooting Alibaba Cloud Enterprise Network architectures. Familiarity with Cloud Enterprise Network (CEN) VPC connectivity hybrid-cloud networking and network segmentation. Understanding of network security traffic routing and connectivity between cloud and on-premises environments.

Professional Experience & Education Bachelors degree in Computer Science Information Technology Software Engineering or a related technical discipline.

7 years of experience in IT Infrastructure Cloud Engineering DevOps Platform Engineering or related technical roles.

3 years of hands-on experience in a senior DevOps or Cloud Platform Engineering role. Proven experience supporting enterprise-scale production environments and business-critical applications. Strong analytical troubleshooting and problem-solving skills.

Ability to independently investigate complex technical issues and deliver sustainable engineering solutions. Strong ownership collaboration and communication skills.

Good written and spoken English with the ability to collaborate effectively with international technical teams. Additional Advantages Experience supporting large-scale hospitality e-commerce travel financial services or other high-availability enterprise platforms.

Experience working with globally distributed Development Infrastructure Security and Operations teams. Familiarity with DevSecOps GitOps cloud security and enterprise change management. Relevant certifications in Alibaba Cloud Kubernetes (CKA/CKAD) Terraform or cloud security.

Remote Work :

No

Employment Type :

Full-time