devops engineer in GCP cloud migration

EPAM; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

EPAM в США ищет DevOps инженера для миграции проекта на Google Cloud и расширения функциональных и технических задач. В обязанности входит настройка IAM, Workload Identity, развертывание в GKE, Helm-чарты и настройка CI/CD на GitHub Actions.

Кандидат должен иметь опыт Kubernetes, OpenShift, Terraform и мониторинга Cloud Logging/Monitoring; знание OpenShift manifests и Jenkins/TeamCity приветствуется. График удаленной работы, международная команда.

Qualifications

• 3+ лет опыта в DevOps или системном администрировании, желательно в финансовом секторе.
• Практический опыт Kubernetes (GKE), Helm charts и GitHub Actions.
• Уверенная работа с GCP (IAM, Workload Identity, VPC, Secret Manager, Cloud Logging/Monitoring).
• Умение читать/применять OpenShift manifests, пайплайны Jenkins/TeamCity.
• Знания Terraform, Istio, Anthos Service Mesh, сетевые навыки и UNIX-скрипты.

Responsibilities

• Настройка тенантов и неймспейсов, квоты, правила фаервола, сервис-аккаунты и Workload Identity с IAM bindings.
• Контейнеризация сервисов (Java/Spring) и создание Helm-chart-ов из манифестов OpenShift.
• Миграция исходного кода Bitbucket в GitHub и секретов в Google Secret Manager через External Secrets.
• Сборка CI/CD на GitHub Actions с повторно используемыми рабочими процессами (build, scan, push, deploy).
• Deploy в DEV и продвижение в UAT, решение проблем с командами приложений и Nebula платформа.
• Участие в миграционном runbook, скриптах и повторно используемых рабочих процессах, ведение Jira.

Skills

Kubernetes

GKE

Helm charts

GitHub Actions

Terraform

Istio

Anthos Service Mesh

UNIX shell scripting

Networking

OpenShift manifests

Jenkins/TeamCity pipelines

Cloud IAM & Workload Identity

VPC firewall rules

Secret Manager / Secrets management

Cloud Logging & Monitoring

Tools

GitHub Actions reusable workflows

Jenkins

TeamCity

OpenShift manifests

Docker

New Relic

Job description

Описание:

The project combines an ongoing Google Cloud Platform migration with expanded functional and technical scope.

Задачи:

Configure tenants and namespaces, quota sizing, firewall rules, service accounts, and Workload Identity with IAM bindings Containerize services, mainly Java/Spring Boot, and create Helm charts from existing OpenShift manifests Migrate source code from Bitbucket to GitHub and secrets to Google Secret Manager via External Secrets Build CI/CD on GitHub Actions with reusable workflows for build, scanning, push, and deployment, aligned with the client's SDLC controls Deploy to DEV and promote to UAT environments Troubleshoot issues with application teams and the Nebula platform team, and support UAT through handover Contribute to the migration runbook, scripts, and reusable workflows Maintain Jira tickets with updated progress and blockers

Требования:

3+ Years of experience as a DevOps or systems engineer, preferably in financial services Hands-on production experience with Kubernetes, preferably GKE Expertise in authoring Helm charts and GitHub Actions reusable workflows Solid GCP fundamentals, including IAM, Workload Identity, and VPC firewall rules Proficiency in Secret Manager, Cloud Logging, and Monitoring Ability to read and translate OpenShift manifests and Jenkins/TeamCity pipelines Skills in Terraform, Istio, and Anthos Service Mesh Competency in UNIX shell scripting and networking, including firewall rules Familiarity with formal security and SDLC controls in a regulated environment Structured, self-driven approach and clear written status updates English proficiency at Upper-Intermediate level (B2) or higher Будет плюсом: Knowledge of Docker and OpenShift, familiarity with JFrog Artifactory / Xray, proficiency in Python, understanding of New Relic

Условия:

Remote hiring locations: Poland