Senior DevOps Engineer (KLI-77)

KitaLulus; Jakarta Pusat; On-site; IDR 500,000,000 - 900,000,000; Full time

Job summary

KitaLulus is seeking a Senior DevOps/SRE to own infrastructure and pipelines across environments. You will manage a Terraform monorepo, optimize AWS ECS/Fargate deployments, and drive security from code scans to compliant secret management.

You will design and maintain observability, CI/CD pipelines in GitLab, and oversee database migrations with Prisma and Liquibase, ensuring reliable, scalable operations in a fast-moving environment.

Qualifications

• Proficient with Terraform monorepos and multi-environment structuring.
• Strong AWS experience focusing on ECS/Fargate, autoscaling and cost efficiency.
• Hands-on GitLab CI/CD with container builds and private registries.

Responsibilities

• Manage and improve Terraform monorepo and modules across environments.
• Maintain GitLab CI/CD pipelines including image builds and security scans.
• Operate AWS services (ECS Fargate, Aurora Postgres, MSK, Redis, S3) for reliability and cost efficiency.
• Run Kafka operational tasks including topic design and health monitoring.
• Manage database migrations with Prisma and Liquibase during safe deployments.
• Own secrets management, TLS/mTLS certs, and partner access controls.
• Administer Keycloak realms and OAuth2 clients for service authentication.
• Build and maintain observability using Graylog, Prometheus/Grafana, CloudWatch, OpenSearch, OpenTelemetry; lead incident response.

Skills

Terraform

AWS (ECS Fargate)

GitLab CI

Docker/Buildah

Trivy/DeepSource

Observability tooling

Tools

Docker

Buildah

Liquibase

Prisma

Job description

Responsibilities

• Manage and continuously improve the Terraform monorepo and module library to keep seven environments consistent and drift-free.
• Maintain and optimize GitLab CI/CD pipelines including buildah image builds, security scanning (Trivy/DeepSource), promotion and deployment across environments.
• Operate and optimize AWS services such as ECS (Fargate), Aurora Postgres, MSK Kafka, Redis, S3, IAM, and KMS with a focus on reliability, right-sizing, and cost efficiency (FinOps).
• Run Kafka operational tasks including topic and dead-letter queue design, consumer-group health monitoring, and message replay/reprocessing.
• Support and manage application database schema migrations using Prisma and Liquibase during safe deployments.
• Own secrets management, secrets rotation, TLS/mTLS client certificates, and set up egress/IP whitelisting for external partners' connections.
• Administer Keycloak realms, OAuth2 clients, secrets, and service-to-service authentication.
• Build and maintain observability platforms utilizing Graylog, Prometheus/Grafana, CloudWatch, OpenSearch, and OpenTelemetry; lead incident response and root cause analysis across full request paths (app to vendor).

Qualifications

• 5+ years of DevOps, Site Reliability Engineering (SRE), or Platform Engineering experience with senior-level ownership of infrastructure and pipelines.
• Deep practical AWS experience, especially ECS (Fargate), including task and service definitions, load balancer integration, auto-scaling, and capacity providers.
• Expertise in Terraform including module development, multi-environment structuring, remote state management, and safe plan/apply workflows.
• Strong background in CI/CD with hands-on experience in GitLab CI pipelines, container image builds using Docker or Buildah, and private registry management.
• Solid knowledge of AWS data services and messaging systems, e.g., Aurora PostgreSQL, Kafka (MSK or self-managed), Redis, and S3 buckets.