Cloud Deployment Engineer

Oracle; A distancia; MXN 1,765,000 - 2,648,000; Jornada completa

Descripción de la vacante

A leading cloud services provider is seeking a Distinguished Engineer to lead infrastructure evolution and automate deployment processes. The ideal candidate will work with technologies like Terraform and Kubernetes and will have extensive experience in distributed systems. Additionally, you will mentor senior engineers and be involved in driving technical standards across teams. This position supports a forward-thinking culture committed to innovation and collaboration.

Servicios

Mentorship opportunities

Continuous learning

Inclusive culture

Formación

• 7+ years building and operating distributed systems or production infrastructure.
• Proven expertise with Terraform module design and Kubernetes/Helm operations.
• Advanced knowledge of secure secret distribution with SOPS and 1Password.

Responsabilidades

• Architect and evolve multi-environment infrastructure across various platforms.
• Lead deployment automation strategy and standardize vendor-neutral telemetry.
• Mentor senior engineers and codify expectations in documentation and tooling.

Conocimientos

Distributed systems expertise

Terraform module design

Kubernetes/Helm operations

Python programming

Bash scripting

Herramientas

Terraform

Kubernetes

OpenTelemetry

Docker Compose

GitHub Actions

Descripción del empleo

Overview

HeyDonto builds reliable data pipelines that connect fragmented healthcare platforms to modern APIs. We synchronize and standardize data from both on-premise and cloud-based EHR systems into clean, interoperable formats. Our mission is simple: make healthcare data work the way software should — predictably, securely, and without silos.

The Role

As a Distinguished Engineer (L7) in the DevOps Tribe, you’ll define and evolve the infrastructure that powers HeyDonto’s ecosystem—from Kubernetes clusters and Terraform modules to developer tooling and multi-environment automation. You’ll lead through technical depth, setting standards for reproducibility, reliability, and cloud portability across every environment.

What You’ll Do

• Architect and evolve multi-environment infrastructure across GKE, CloudSQL, Confluent, Temporal, and Cloudflare, encoded in reusable Terraform modules and remote state.
• Lead deployment automation strategy — CLI orchestration and Helm releases — to keep clusters converged deterministically across environments.
• Design and enforce the secrets lifecycle integrating Terraform outputs, SOPS, and 1Password for secure, auditable rotation and distribution.
• Define and implement automated drift detection, IAM regression suites, and compliance guardrails for infrastructure reliability.
• Own the CUE-based configuration system that exports Compose stacks, environment templates, secrets, and Helm values through just export-cue.
• Shape environment parity and portability — abstract provider specifics behind clear interfaces (DNS, storage, ingress, identity) to reduce lock-in and enable repeatable deployments across clouds
• Standardize vendor-neutral telemetry with OpenTelemetry and consistent log/metric conventions to keep observability portable.
• Establish portable identity patterns (OIDC, workload identity, least-privilege IAM mappings) that translate across providers.
• Mentor senior engineers, codify expectations in documentation and tooling, and steward technical decisions across tribes.
• Lead incident response and RCA, strengthening feedback loops between SRE and development teams.

Tech You’ll Work With

• Languages: TypeScript, Python, Bash
• Infrastructure: Terraform (multi-provider), Helm, Kubernetes (GKE primary; portable to other managed K8s), Temporal Cloud, Confluent Cloud, Cloudflare
• Cloud-Agnostic Interfaces: OpenTelemetry, OIDC/OAuth2, CSI/Ingress abstractions, external-DNS patterns, OCI registries
• Configuration: CUE, Just, Docker Compose, SOPS, 1Password, env templates
• CI/CD: GitHub Actions, Conventional Commits, automated drift and policy checks

What We Value

• Clarity over cleverness — explicit, predictable systems.
• Idempotency, type safety, and observability in everything we build.
• Portability by design — clean interfaces, minimal provider coupling, documented escape hatches.
• Shared ownership of infrastructure and developer experience.
• Documentation and tooling as part of engineering craft.
• Reliability as the ultimate measure of quality.

Qualifications

Required

• 7+ years building and operating distributed systems or production infrastructure.
• Proven expertise with Terraform module design (multi-provider), Kubernetes/Helm operations, and environment automation.
• Experience designing portable architectures—clear separation of concerns, provider-agnostic interfaces, and migration-ready patterns.
• Advanced knowledge of secure secret distribution with SOPS and 1Password.
• Proficiency in Python, Node.js, and Bash for automation and operational tooling.
• Strong understanding of Kafka, Temporal, and distributed workflow systems.
• Track record of leading through influence—setting technical standards, mentoring seniors, and driving architectural coherence.

Preferred

• Experience designing and implementing solutions across multiple cloud providers (e.g., AWS, GCP, Azure) to ensure resilience and avoid vendor lock-in.
• Hands-on experience with OpenTelemetry rollouts to build a unified observability platform, helping proactively identify and resolve performance bottlenecks.
• Solid understanding of Kubernetes networking, especially configuring Ingress controllers and managing traffic flow.
• Familiarity with CUE or similar declarative configuration frameworks.
• Open-source contributions or published writing that demonstrates passion for systems thinking and quality craftsmanship.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work.

From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

Accommodations

We are committed to providing equal opportunity and reasonable accommodation for people with disabilities. To request a reasonable accommodation, contact our Talent Relations team at

As used in this posting, "Deloitte" means Deloitte Consulting LLP, a subsidiary of Deloitte LLP. Please see for a detailed description of the legal structure of Deloitte LLP and its subsidiaries.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.