DevOpsSRE Engineer SWF

Job Title: DevOps/SRE Engineer

Role Overview

DevOps/SRE who builds and operates cloud-native platforms with a focus on Kubernetes CI/CD observability and secure-by-default practices to enable reliable high-velocity releases.

Role Summary
Own environment setup and day-to-day operations for services on Kubernetes design and maintain CI/CD and GitOps workflows implement observability stacks and enforce security baselines. Lead small platform initiatives and production incidents with guidance from senior/staff.

Key Responsibilities

Platform Engineering (Kubernetes)
- Operate production-grade Kubernetes clusters (node pools upgrades backups) with guidance
- Manage Ingress controllers CNI and basic service mesh setup (Istio/Linkerd) including mTLS
- Configure autoscaling (HPA/VPA/KEDA) requests/limits affinity/anti-affinity and quotas
- Package and standardize deployments with Helm/Kustomize; maintain golden templates

CI/CD & GitOps
- Build and maintain CI/CD pipelines (GitHub Actions/GitLab CI/Jenkins/Azure DevOps)
- Implement GitOps (Argo CD/Flux/Pulumi) for environment reconciliation and progressive delivery
- Manage artifact repositories build caching and supply chain basics (SBOMs image signing)

Observability & SRE
- Deploy and tune monitoring/logging/tracing (Prometheus Grafana ELK/Loki OpenTelemetry)
- Define SLIs/SLOs with teams; configure actionable alerts and runbooks
- Lead incident response for owned areas; drive post-incident reviews and remediation

Security & Compliance
- Apply IAM and least-privilege patterns; manage secrets (Vault/Sealed Secrets/SOPS)
- Enforce image scanning policy checks (OPA Gatekeeper/Kyverno) and Pod Security Standards
- Configure network policies TLS and certificate management (cert-manager)

Cloud & IaC
- Provision and manage cloud resources (AWS/Azure/GCP) using IaC - Pulumi is a plus
- Manage VPC/networking load balancers DNS/CDN storage classes and backups/DR procedures
- Track costs and basic capacity planning; recommend right-sizing and autoscaling policies

Collaboration & Enablement
- Create platform docs templates and paved paths
- Partner with app teams to debug deployments performance and reliability issues

Mandatory Skills
- Kubernetes operations (Helm/Kustomize Ingress autoscaling resource policies)
- CI/CD systems and GitOps (GitHub Actions/GitLab CI/Jenkins; Argo CD/Flux)
- Observability stacks (Prometheus Grafana ELK/Loki) and OpenTelemetry basics
- IaC with Terraform/Pulumi; cloud experience (AWS/Azure/GCP)
- Security: IAM secrets management image scanning policy enforcement (OPA/Kyverno)
- Docker Linux networking fundamentals (DNS TLS routing) Bash; a scripting language (Python preferred)
- Familiarity with release strategies (canary/blue-green) and safe rollback practices

Required Experience:

Manager