DevOps Engineer

Softeta; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Гибридный/удалённый формат работы

Оборудование на выбор пользователя

Job summary

Softeta ищет DevOps-инженера для клиента в энергетическом секторе. Ваша задача — автоматизировать инфраструктуру, развёртывать Kubernetes на bare metal, обеспечивать безопасность и надёжность систем, использовать GitOps (Argo CD) и поддерживать CI/CD пайплайны.

Требуется опыт работы с Docker, Helm, Prometheus/Grafana, Vault/External Secrets и PKI. Предпочтение кандидатов с опытом в Azure/AWS и IoT интеграциях. Гибридный/удалённый формат работы и современное оборудование предоставляются.

Qualifications

• Опыт администрирования Linux, развёртывание и обновление систем.
• Опыт развёртывания на bare metal и развёртывания ОС.
• Установка и управление Kubernetes; мониторинг и масштабирование.
• Знания Git, GitOps и CI/CD процессов.
• Опыт работы с Argo CD и CI/CD pipelines.
• Опыт работы с Docker, Helm и Kubernetes manifests.
• Знания Prometheus, Grafana, логирования и оповещений.
• Опыт работы с RBAC, Secrets, TLS/mTLS и PKI.
• Опыт интеграции HashiCorp Vault / External Secrets Operator / cert-manager.

Responsibilities

• Автоматизация Linux и инфраструктуры с Ansible, Kickstart и т.д.
• Provisioning bare metal, настройка BIOS и развёртывание Kubernetes.
• Управление Kubernetes кластерами: установка, настройка, устранение проблем.
• Управление парком кластеров через GitOps и Argo CD.
• Развертывание приложений через Docker и Helm; настройка значений конфигурации.
• Мониторинг и ведение логов через Prometheus/Grafana; настройка алертинга.
• Сетевые настройки: Ingress, Services, Network Policies, RBAC и политика доступа.
• Управление PKI, TLS/mTLS, cert-manager, OIDC/SAML, SSO и MFA.
• Управление секретами через Vault и External Secrets Operator; аудит доступа.
• Интеграция Bosch IoT устройства и платформа IoT; обеспечение надёжной передачи данных.
• Непрерывное улучшение: устранение проблем, автоматизация и повышение надёжности.

Skills

Linux администрирование

Bare metal provisioning

Kubernetes администрирование

GitOps принципы

CI/CD

Security best practices

RBAC

OIDC/SAML, SSO, MFA

TLS/mTLS

HashiCorp Vault

Education

Нет формального требования к образованию

Tools

Docker

Helm

Kubernetes

Argo CD

Prometheus

Grafana

HashiCorp Vault

External Secrets Operator

cert-manager

Ansible

AWS/Azure

Job description

Описание:

Softeta is a software engineering partner for finance, energy, industrial, and other high-stakes sectors. We specialize in building and modernizing backend-heavy, integration-critical systems where speed, accuracy, and reliability are non-negotiable. With 100+ AI and custom software experts across engineering hubs in Lithuania and Poland, we embed ourselves directly into client operations — delivering custom software, automation, and AI where they drive the most value. Clients such as SEB, NordVPN, and CarVertical trust us with systems that serve millions of users globally. We strive for excellence, that’s why we created Cobble – Softeta’s own AI-native development workflow, built by our engineers, that standardizes how developers work with AI agents from requirement to working code. We are seeking for an DevOps Engineer for our client from the energy sector.

Задачи:

• Linux & Infrastructure Automation: Automate Linux installation, configuration, updates, and patching on bare metal servers using tools such as Ansible, Kickstart, and other configuration management solutions.


• Bare Metal Provisioning: Provision server hardware, configure BIOS settings, install operating systems, and deploy Kubernetes clusters using automated, version-controlled workflows.


• Kubernetes Administration: Install, configure, operate, and troubleshoot Kubernetes clusters on Linux-based bare metal infrastructure, ensuring scalability, performance, and reliability.


• Kubernetes Fleet Management: Manage multiple Kubernetes clusters using standardized configurations, automated rollouts, and reconciliation processes across environments.


• GitOps & CI/CD: Design and maintain CI/CD pipelines integrated with GitOps workflows. Use Argo CD to synchronize Kubernetes environments with the desired state defined in Git, enabling traceable deployments and controlled rollbacks.


• Application Deployment: Containerize applications using Docker and deploy them to Kubernetes. Develop and maintain Helm charts and version-controlled configuration values to support repeatable deployments and controlled upgrades.


• Monitoring & Logging: Implement and maintain monitoring, visualization, logging, and alerting solutions using tools such as Prometheus and Grafana, with configuration managed through GitOps.


• Networking & Security: Configure Kubernetes Services, Ingress controllers, and Network Policies. Implement security best practices, including RBAC, least-privilege access, secure service accounts, and secrets management.


• PKI & Identity Management: Manage certificate authorities, trust chains, TLS/mTLS, and automated certificate lifecycle processes using tools such as cert-manager. Integrate enterprise identity providers through OIDC/SAML and support SSO, MFA, and centralized access control.


• Secrets Management & Governance: Integrate solutions such as HashiCorp Vault and External Secrets Operator to manage and rotate credentials securely. Maintain access policies in Git, protect sensitive data, and support auditing of access changes.


• Bosch Device & IoT Integration: Integrate Kubernetes-enabled Bosch devices into the platform management ecosystem and deploy IoT applications using Git-managed configuration and reliable data delivery mechanisms.


• Continuous Improvement: Troubleshoot infrastructure and application issues, improve automation, and contribute to platform standardization, operational reliability, and security.

Требования:

• Hands‑on experience with Linux system administration, including installation, configuration, patching, and troubleshooting.


• Experience with bare metal server provisioning and operating system deployment.


• Practical knowledge of Kubernetes cluster installation, administration, troubleshooting, scaling, and workload management.


• Experience with Git, declarative configuration management, and GitOps principles.


• Hands‑on experience with Argo CD and Kubernetes‑based application delivery.


• Knowledge of CI/CD pipeline design and implementation.


• Experience with Docker, containerization, Helm charts, and Kubernetes manifests.


• Experience with Ansible or similar infrastructure automation and configuration management tools.


• Knowledge of Prometheus, Grafana, logging solutions, and alerting mechanisms.


• Understanding of Kubernetes networking, including Services, Ingress, and Network Policies.


• Knowledge of infrastructure and application security, RBAC, secrets management, and least‑privilege access principles.


• Familiarity with PKI, TLS/mTLS, certificate lifecycle management, and cert‑manager.


• Understanding of enterprise identity and access management, including OIDC/SAML, SSO, MFA, and service‑account security.


• Familiarity with HashiCorp Vault, External Secrets Operator, or equivalent secrets management solutions.


• Experience with or willingness to work on Kubernetes‑enabled devices and IoT platform integration.


• Familiarity with Azure or AWS.

Условия:

• Diverse and technically challenging projects.


• Flexible working hours and a hybrid or remote workplace model.


• Flexible schedule and an Agile/SCRUM environment.


• Technical equipment that you can choose.