Senior DevOps Engineer

Spyrosoft Ltd; Polska; Hybrid; PLN 375,000 - 552,000; Full time

Job summary

Spyrosoft Ltd is seeking an experienced Senior DevOps Engineer to design, build, and operate a modern cloud-native platform on T-Cloud. You will own production infrastructure, using Kubernetes, Crossplane, OpenTofu, Argo CD, Helm, and GitLab CI/CD to automate delivery and ensure reliability.

You will collaborate with software engineers, architects, and security teams across the globe, delivering secure, highly available systems with robust backup and disaster recovery practices.

Qualifications

• We expect senior cloud and Kubernetes expertise with production ownership.
• Hands-on experience with T-Cloud (CCE/CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, NAT) is required.
• Experience operating Kubernetes in production in DevOps/Platform/SRE roles.
• OpenTofu or Terraform for IaC, GitOps with Argo CD and Helm.
• GitLab CI/CD design, pipelines, runners, and automation.
• Container security, non-root workloads, read-only filesystems, and Pod Security Admission.
• Strong Linux administration and disaster recovery experience.
• Ability to work independently and communicate across international teams.
• Fluent English; German is a plus.

Responsibilities

• Design, build, and operate cloud-native infrastructure on T-Cloud across multiple zones.
• Develop reusable OpenTofu modules for compute, networking, storage, and DNS.
• Provide self-service networking capabilities using Crossplane compositions.
• Deliver applications via GitOps with Argo CD and Helm charts.
• Design and maintain GitLab CI/CD pipelines and runners, with image scanning integration.
• Operate PostgreSQL on Kubernetes with CloudNativePG; manage backups and DR.
• Secure traffic end-to-end with Traefik, TLS 1.3, cert-manager, and NAC/ACL controls.
• Harden workloads with non-root execution and restricted Pod Security.
• Own backup, DR runbooks, and regular recovery exercises.
• Collaborate with software, architecture, and security teams in an international environment.

Skills

Kubernetes

Cloud engineering

Automation

Ownership mindset

Troubleshooting

Security

Linux administration

GitOps

DevOps culture

Tools

Terraform/OpenTofu

Crossplane

Argo CD

Helm

GitLab CI/CD

JFrog Xray/Artifactory

Traefik

cert-manager

PostgreSQL

pgBackRest

Job description

We are looking for an experienced Senior DevOps Engineer to join a team building and operating modern cloud-native solutions, including enterprise and AI-powered platforms.

This is a hands‑on senior role with real ownership of production infrastructure. You will work across Kubernetes, Infrastructure as Code, GitOps, networking, security, CI/CD, databases, and disaster recovery, while helping the team continuously improve automation, reliability, and operational readiness.

Tech Stack:

• T-Cloud: CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, NAT

• Kubernetes

• OpenTofu / Terraform

• Crossplane

• Argo CD & GitOps

• Helm

• GitLab CI/CD

• JFrog Xray / Artifactory

• Traefik

• cert-manager

• PostgreSQL

• CloudNativePG

• pgBackRest

• n8n Enterprise

• Linux

• OIDC

• Container and network security

Required Qualifications:

We are looking for a senior engineer who combines strong cloud and Kubernetes expertise with hands‑on production experience and an ownership mindset.

• Commercial, hands‑on experience with T-Cloud is a must‑have, particularly with CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, and NAT

• Practical experience with CCE workload security groups and VPC network ACLs

• Senior‑level experience operating Kubernetes in production in a DevOps, Platform Engineering, Cloud Engineering, or SRE role

• Strong Infrastructure as Code experience using OpenTofu or Terraform

• Hands‑on experience implementing GitOps delivery with Argo CD and Helm

• Strong knowledge of GitLab CI/CD, including pipeline design, stages, automation, and runner configuration

• Good understanding of container security and hardening, including non‑root workloads, read‑only filesystems, and Kubernetes Pod Security Admission

• Solid Linux administration skills, including systemd, SSH, and firewalls

• Production experience with backup, restore, and disaster recovery processes

• Strong problem‑solving and troubleshooting skills

• Ability to work independently and take ownership of technical solutions

• A proactive approach to automation, documentation, and continuous improvement

• Ability to collaborate effectively with development, architecture, and security teams in an international environment

• Fluent English

Nice to Have:

• Knowledge of Crossplane, including compositions for infrastructure and networking provisioning

• Experience running n8n Enterprise or other workflow‑automation platforms in production

• Experience operating PostgreSQL on Kubernetes, ideally using CloudNativePG and pgBackRest

• Knowledge of JFrog Xray / Artifactory, particularly container image scanning in CI/CD processes

• Experience with Traefik and cert‑manager

• Knowledge of OIDC‑based authentication

• Experience with AI‑powered or cloud‑native enterprise platforms

• Experienced in using AI tools in day‑to‑day workflow, for example to support automation, troubleshooting, documentation, or engineering productivity

• German language skills

Project Description:

You will join a team developing and operating a modern cloud‑native platform on T‑Cloud, supporting enterprise and AI‑powered applications.

The infrastructure is designed for high availability, security, and resilience, with CCE Turbo Kubernetes clusters distributed across three availability zones. The environment follows Infrastructure as Code and GitOps principles, using OpenTofu, Crossplane, Argo CD, Helm, and GitLab CI/CD to automate infrastructure provisioning and application delivery.

This is much more than an infrastructure maintenance role. You will have the opportunity to shape, automate, secure, and continuously improve a sophisticated production environment while taking ownership of solutions from design through deployment and ongoing operations.

You will work closely with software engineers, architects, and security specialists in an international environment, contributing directly to platform reliability, scalability, security, and developer experience.

Project Setup:

• Start: ASAP

• Contract until: 30 June 2027, with an opportunity for extension

• Workload: Full‑time

• Location: 100% remote within the EU

• Language: Fluent English; German is a plus

Scope of Services:

As a Senior DevOps Engineer, you will:

• Design, build, and operate highly available cloud‑native infrastructure on T‑Cloud, including CCE Turbo clusters distributed across three availability zones

• Develop and maintain reusable OpenTofu modules for compute, networking, storage, and DNS

• Provide self‑service tenant networking capabilities, including subnets, EIPs, SNAT, and namespaces, using Crossplane compositions

• Deliver applications through GitOps using Argo CD ApplicationSets and Helm charts that you author and maintain

• Design and maintain GitLab CI/CD pipelines and runners, integrating JFrog Xray image scanning into every release

• Operate the production application layer, including n8n Enterprise in queue mode with OIDC

• Operate PostgreSQL on Kubernetes with CloudNativePG

• Secure traffic end to end using Traefik, TLS 1.3, automated certificates via cert‑manager, workload security groups, VPC network ACLs, and controlled egress

• Harden containerized workloads using non‑root execution, read‑only filesystems, and Pod Security Admission in restricted mode

• Own backup and disaster recovery processes, including pgBackRest backups, WAL archiving, point‑in‑time recovery, EVS snapshots, DR runbooks, and regular recovery drills

• Monitor and troubleshoot complex infrastructure and production issues and drive them through to resolution

• Continuously improve automation, documentation, security, platform reliability, and operational readiness

• Collaborate with software engineers, architects, and security teams to improve the overall platform

• Take end‑to‑end ownership of infrastructure solutions and actively contribute to the evolution of the platform