DevOps engineer

INFUSE; United States; Remote; USD 130,000 - 180,000; Full time

Benefits offered by this job

Remote work

Job summary

INFUSE ищет Senior DevOps Engineer для владения и эволюции AWS-инфраструктуры, CI/CD и стека наблюдаемости. Вы будете мостом между cloud и разработкой, переводя рабочие нагрузки на EKS и GitHub Actions, поддерживая нулевую доверительность и наставляя команды.

Требуется 5+ лет DevOps/SRE, экспертиза Terraform и Kubernetes, опыт работы с Cloudflare, OpenTelemetry и Grafana. Условия — полностью удалённая работа из США, гибкий график и ориентир на безопасность.

Qualifications

• 5+ лет в DevOps/SRE, включая опыт эксплуатации критических продакшн-окружений.
• Эксперт Terraform, продвинутый Ansible, опыт GitHub Actions.
• Конференевание и Kubernetes на AWS EKS, Helm.
• Безопасность: zero-trust, управление секретами, обновления и Cloudflare WAF.
• Опыт поддержки Node.js и Python микросервисов с PostgreSQL/Redis, Web-стек за Cloudflare.
• Уровень английского не ниже B2 и способность наставлять команду.
• Способность работать с чужими командами и дистанционной поддержкой.

Responsibilities

• Проектирование, развёртывание и поддержка надёжной AWS-инфраструктуры (EC2, EKS) с IaC.
• CI/CD в GitHub Actions; миграция Jenkins в Actions.
• Обеспечение базовой безопасности: Cloudflare WAF, принцип наименьших привилегий IAM, секреты.
• Владение стеком наблюдаемости: Grafana, OpenTelemetry, Sentry.
• На вызове, реагирование на инциденты и постинцидентный разбор.
• Документирование инфраструктуры и приведение её под IaC/стандарты.
• Наставничество инженеров и взаимодействие с внутренними командами.

Skills

AWS at scale

Terraform

Ansible

GitHub Actions

Docker

Kubernetes (EKS)

Cloudflare WAF

Zero-trust security

Grafana

OpenTelemetry

Sentry

Python scripting

Linux admin

Incident response

Cost optimization

Documentation

Mentoring engineers

Tools

Jenkins

Helm

Kafka (MSK)

Backstage

Langfuse

Sentry

Trivy

Gitleaks

Job description

Описание: INFUSE is looking for a Senior DevOps Engineer to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization. We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.

Задачи:

Design, build and run secure AWS infrastructure (EC2 with Docker Compose, EKS) with Terraform and Ansible; move suitable workloads from EC2 to EKS Build and maintain CI/CD in GitHub Actions; move remaining Jenkins jobs to GitHub Actions Keep new and existing services at our security baseline: Cloudflare proxy with WAF and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root Own monitoring, alerting and logs on our standard stack (Grafana, OpenTelemetry, Sentry); on-call, incident response, post-incident reviews Own backups and regular restore tests Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review Work with internal teams and contractors set and enforce standards mentor other engineers

Требования:

5+ Years in DevOps / SRE: Proven background operating mission‑critical production environments, including 3+ years of hands‑on experience running AWS at scale IaC & CI/CD Mastery: Expert with Terraform, highly proficient with Ansible, and experienced in designing production workflows with GitHub Actions Containerization & Kubernetes: Strong production experience with Docker and Kubernetes (specifically managed AWS EKS and Helm) Production Security & Incident Management: Hands‑on practice with platform hardening, zero‑trust patterns, automated secrets management, system patching, and Cloudflare WAF/proxy configuration. Comfortable with on‑call rotations, incident response, and executing verified backup restore drills English proficiency at B2 level or higher. Application Ecosystem Familiarity: Experience supporting Node.js and Python microservices paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP‑FPM, MySQL) behind Cloudflare Modern Observability: Practical setup and maintenance of Grafana, Prometheus, and OpenTelemetry pipelines Core Scripting & Systems: Deep fluency in Linux administration, Bash, and Python scripting. Collaborative Leadership: Ability to effectively manage, document, and standardize work across internal teams and external contractor groups. AI‑Augmented Workflow: Daily experience leveraging modern AI developer tools and agents (Claude Code preferred) to accelerate engineering output. Proactive & & Будет плюсом: Kafka (MSK); Jenkins; ClickHouse; Backstage; Sentry; Langfuse; SonarQube/Trivy/gitleaks; Cloudflare Zero Trust; AIOps; leading a small DevOps team; AWS/CKA certifications

Условия:

Fully remote work format Schedule: Monday–Friday, 2 PM – 11 PM Eastern European Time (including 1 hour break) A collaborative, innovation‑first environment that values initiative and experimentation Paid time off and sick leave Reduced working hours on Fridays during the summer Days off on US national holidays and your birthday.