DevOps Engineer (SentinelOps, DevEx & Cloud Enablement Team)

eMAG; United States; Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical subscription

Flexible self-development budget

Partner discounts

Bookster library access

Learning resources access

Hybrid work environment

Job summary

eMAG is seeking a DevSecOps Engineer to join the SentinelOps, DevEx & Cloud Enablement Team. You’ll manage identity and access across multiple clouds and on-prem, define governance, and automate infrastructure with Terraform and GitLab CI/CD.

You will run Kubernetes clusters (EKS) in production, implement DR and high availability, and help secure our cloud environments through automation, scripting, and monitoring with Prometheus and Grafana.

Qualifications

• 3+ years of experience in DevOps or similar roles.
• Proficiency with Terraform for infrastructure as code and cloud experience.
• Solid understanding of networking concepts and security best practices.
• Proficiency in Linux system administration and scripting (Bash, Python, Go).
• Hands-on experience with at least one cloud provider (AWS/GCP/TencentCloud).
• Hands-on experience running workloads on Kubernetes in production.
• Experience building CI/CD pipelines.
• Working knowledge of IAM concepts: cross-account trust and federation.
• Familiarity with cloud governance primitives and guardrails.
• Practical experience with monitoring and logging (Prometheus and Grafana).

Responsibilities

• Manage identity and access across AWS, GCP, TencentCloud and on-prem.
• Define and enforce cloud governance with guardrails and policies.
• Provision and manage cloud and on-prem infrastructure using Terraform.
• Design, develop and maintain reusable GitLab CI/CD pipelines and templates.
• Operate and maintain Kubernetes clusters (on-prem and AWS EKS).
• Implement disaster recovery and high-availability strategies.
• Automate operational workflows via scripting (Bash, Python, Go).
• Implement observability with monitoring, alerting and logging.
• Administer the Linux systems underpinning container and cloud environments.
• Document configurations, deployment procedures and runbooks.

Skills

DevOps experience

Cloud governance

Scripting

CI/CD pipelines

Kubernetes

IAM concepts

Networking & security

Tools

Terraform

GitLab CI/CD

Kubernetes (EKS)

Prometheus

Grafana

AWS

GCP

TencentCloud

Keycloak

Bash

Python

Go

Job description

We’re always looking for the ones truly passionate about their work. If you are amongst them, you can rest assured there is a place for you in eMAG. We’ve grown very fast and are determined to keep doing so. What brought us here is our desire for continuous evolution and practical results.

More than 6000 colleagues are part of eMAG Teams. We strongly believe in people’s development and therefore every year we invest more and more energy and resources to remain an organization that is constantly learning. We want to ensure that you’ll have the most talented colleagues and the proper environment to grow and achieve great results, to become what you desire on a personal and professional level. Join us, grow faster!

DevSecOps Engineer (SentinelOps, DevEx & Cloud Enablement Team)

What you’ll have to do

• Manage identity and access across AWS, GCP, TencentCloud and on-prem — permission models, cross-account trust and federation, integration with our existing IAM solutions and Keycloak, and secrets management.
• Define and enforce cloud governance: guardrails and organization policies, account and project structure, and preventive controls that keep environments compliant as they grow.
• Provision and manage cloud and on-prem infrastructure using Terraform.
• Design, develop and maintain reusable GitLab CI/CD pipelines and templates for automated, secure and scalable delivery.
• Operate and maintain Kubernetes clusters deployed both on-premises and in AWS (EKS), ensuring high availability, scalability, and security.
• Implement disaster recovery and high availability strategies across environments.
• Automate operational workflows and infrastructure management via scripting (Bash, Python, Go or similar).
• Implement observability: monitoring, alerting and logging (Prometheus, Grafana, AWS CloudWatch) to support proactive incident response.
• Administer the Linux systems underlying our container and cloud environments.
• Document infrastructure configurations, deployment procedures, and operational runbooks.

What makes you a good fit

• 3+ years of experience in DevOps or similar roles.Relevant certifications such as CISA, CRISC, CISSP, or equivalent are preferred.
• Proficiency with Terraform for infrastructure as code, hands-on with at least one cloud provider.
• Solid understanding of networking concepts and security best practices.
• Proficiency in Linux system administration and scripting (Bash, Python, Go or similar).
• Hands-on experience with at least one cloud provider (AWS/GCP/TencentCloud), having built and operated the core building blocks (VPCs, subnets, object storage, virtual machines).
• Hands-on experience running workloads on Kubernetes in production.
• Experience building CI/CD pipelines.
• Working knowledge of AWS/GCP/TencentCloud IAM and multi-cloud IAM concepts: roles and policies, cross-account trust, and federation.
• Familiarity with cloud governance primitives - service control policies, organization policies or equivalent guardrails.
• Practical experience with monitoring and logging in production - Prometheus and Grafana or equivalents: writing queries and building alerts people act on.

What makes you stand out

• Experience with multi-cloud environments including GCP and TencentCloud.
• Deep experience with cloud IAM and identity management at scale.
• Experience with cloud security tools (AWS GuardDuty, Security Hub, GCP Security Command Center).
• Experience implementing cloud governance at scale.
• Familiarity with IAM solutions, particularly Keycloak.
• Experience managing clusters.
• Secure-by-design architecture - you can walk us through a system where you made the secure option the easiest one for the teams using it.

What we’ve prepared for you

• Medical subscription: Medicover or Regina Maria.
• A flexible budget that you can invest in yourself as you wish: meal tickets, holiday tickets, cultural vouchers, private pension, foreign language classes, eMAG, Fashion Days, Therme & Genius, membership to different gyms or even professional development classes.
• Different discounts from our partners: banking, mobile, dental medicine or wellness.
• Access to the Bookster library and free credits on the Hilio psycho-emotional health platform.
• An accelerated learning environment, with access to over 100.000 curated online resources and platforms, learning academies and development programs.
  New headquarters, where sleek design, natural light, and versatile spaces create an energizing and comfortable environment for hybrid work.

#LI-remote #midsenior