Choose a partner with intimate knowledge of your industry and first-hand experience of defining its future.your locationyour locationindustrieschoose a partner with intimate knowledge of your industry and first-hand experience of defining its future.# sreaguascalientes## *job description*we are looking for a *devops engineer with strong kubernetes (aks) expertise* to design, build, and operate scalable, secure, and reliable cloud‐native platforms. In this role, you will partner closely with *development, data/ml, and security teams* to deliver highly available services through modern ci/cd pipelines, container orchestration, and infrastructure as code (iac).you will be responsible for operating and hardening *azure kubernetes service (aks)* environments, automating infrastructure with *terraform*, enforcing security best practices, and establishing robust observability and reliability standards.---## *key responsibilities*### *1. Containerization & kubernetes operations* design, build, and maintain *docker images* using best practices (multi‐stage builds, minimal base images, vulnerability remediation).* operate kubernetes core objects including *namespaces, deployments, replicasets, services, ingress, and dns*.* implement *liveness/readiness probes*, health checks, and zero‐downtime deployment strategies.* configure and tune *autoscaling strategies* (hpa, vpa, resource requests/limits) and ensure metrics reliability.* manage *ingress controllers and loadbalancers*, enforcing routing rules, tls termination, and secure traffic flow.* configure and operate kubernetes *storage* (persistent volumes, storageclasses, csi drivers) for stateful workloads.---### *2. Ci/cd engineering (azure devops)* build and maintain *yaml‐based ci/cd pipelines* for microservices and data/ml workloads (e.g., .net, python, java, node.js).* implement *multi‐stage pipelines* (build → test → security scan → package → deploy) using *helm and kubectl*.* apply advanced deployment strategies such as *blue‐green and canary releases*.* manage *service connections, agent pools, secure variables, and secrets*.* standardize and document *reusable pipeline templates* to improve delivery speed and reliability.---### *3. Infrastructure as code & cloud platform* provision and manage azure infrastructure using *terraform (preferred)* or *bicep*.* codify and manage aks clusters, networking, *azure key vault*, *azure container registry (acr)*, log analytics, and supporting services.* automate operations using *azure cli and powershell*.* maintain *environment parity* (dev, test, stage, prod) with repeatable and idempotent deployments.* enforce git‐based change control and immutable infrastructure practices.---### *4. Security, compliance & identity* enforce *rbac* in azure and kubernetes using least‐privilege principles.* manage secrets with *azure key vault* and kubernetes secrets.* integrate *image scanning and vulnerability checks* into ci/cd pipelines.* apply *pod security standards* and implement cluster, image, and supply‐chain hardening.* collaborate with security teams on audits, compliance requirements, and vulnerability remediation.---### *5. Observability & reliability* implement monitoring and logging using *azure monitor, log analytics, container insights, prometheus, grafana, and dynatrace*.* define and track *slis and slos*, and create actionable dashboards and alerts.* support incident response, *root‐cause analysis*, post‐incident reviews, and long‐term remediation.---### *6. Sre & troubleshooting* diagnose kubernetes issues including pod crashes, image pull failures, dns/service routing errors, and performance bottlenecks.* troubleshoot and stabilize *ci/cd pipeline failures* and flaky deployments.* optimize *cost and performance* through right‐sizing, autoscaling policies, and node pool strategies (including spot nodes).---### *7. Collaboration & governance* collaborate with *developers, architects, and data/ml teams* to design operable and scalable solutions.* create *runbooks, deployment guides, and platform standards*.* deliver knowledge‐sharing sessions and technical enablement.* participate in agile ceremonies, provide estimates, and proactively remove delivery blockers.---## *required qualifications & skills*### *technical skills* *azure devops services:* yaml pipelines, git repos, boards, artifacts, service connections, agent pools, multi‐stage releases.* *kubernetes (aks):* deployments, services, ingress, configmaps, secrets, rbac, hpa/vpa, probes.* *docker & containerization:* advanced dockerfile design, multi‐stage builds, image scanning, container debugging.* *infrastructure as code:* terraform (preferred), bicep, azure cli, powershell.* *security:* azure ad, azure rbac, kubernetes rbac, key vault, vulnerability management.* *networking:* loadbalancers, ingress, tls, dns fundamentals; azure vnets and nsgs (nice to have).* *storage:* persistent volumes, storageclasses, csi drivers.* *observability:* azure monitor, log analytics, prometheus, grafana, dynatrace.---## *experience* *7+ years* of experience in *devops / cloud / sre roles*.* strong hands‐on experience operating *aks in production environments*.* proven background in *ci/cd automation, cloud‐native platforms, and infrastructure automation*.## job descriptionrole includes management of the administration layer on which applications run. It provides the management between the business applications, underlying database and the operating systems that may be running on a number of physical or virtual systems.## job description - grade specificentry level role provide general application operations and administration, non critical incident management and resolution. Develop skills in oversee space utilization and management. Develop skills to provide security and compliance management such as patch management and version control. Develop skills to be able to maintain complexapplication landscape, involving multiple new dimension products, on a cluster environment with ha enablement etc.
#j-18808-ljbffr