DevOps Engineer
Summary
DevOps/SRE-style role maintaining production Kubernetes on Talos Linux plus on-prem infrastructure (Proxmox, bare metal, Ceph), networking (BGP, DNS, VLANs, VPNs), and GitOps automation with Terraform, Ansible, GitLab CI, and Argo CD. Also manages databases, observability, PKI, and LoRaWAN/IoT field devices.
We are looking for someone who feels comfortable working with both Kubernetes and physical hardware. For us, DevOps doesn’t stop at pipelines—it extends to the server room, the network, and field devices.
Requirements
- At least 3 years of experience in a DevOps / SRE / Infrastructure Engineer role.
- Strong knowledge of production-grade Kubernetes.
- Solid networking knowledge: TCP/IP, routing, DNS, VLAN, NAT, VPN.
- Experience with virtualization and physical hardware (Proxmox or similar).
- Hands-on experience with Terraform and Ansible.
- Experience with CI/CD and the GitOps approach (GitLab CI, Argo CD, or similar).
- Knowledge of Helm and/or Kustomize.
- Understanding of TLS, PKI, and certificate management.
- Strong Linux skills.
Responsibilities
- Maintain and develop Kubernetes clusters based on Talos Linux.
- Manage on-premise infrastructure: Proxmox, bare-metal servers, Ceph storage.
- Design and maintain network infrastructure: routing (including BGP), DNS, VLANs, VPNs, firewalls.
- Automate infrastructure using Terraform and Ansible.
- Develop GitOps workflows: GitLab CI/CD, Argo CD, Helm, Kustomize.
- Manage secrets and certificates (OpenBao, PKI, cert-manager).
- Maintain databases and message brokers: PostgreSQL (CNPG), MongoDB, RabbitMQ, MQTT, Dragonfly.
- Monitor and manage logging with VictoriaMetrics and VictoriaLogs.
- Maintain LoRaWAN infrastructure: ChirpStack v4 and gateways with Basics Station (CUPS/LNS).
Nice to have
- Talos Linux or other immutable operating systems for Kubernetes.
- Ceph (RBD, CephFS, S3 via RGW).
- OpenBao or HashiCorp Vault.
- VictoriaMetrics / VictoriaLogs or Prometheus / Loki.
- CloudNativePG, MongoDB, Dragonfly, or Redis.
- MQTT and IoT systems.
- LoRaWAN, ChirpStack, Basics Station (CUPS/LNS).
- LTE routers and connectivity (e.g., MikroTik, private APNs).
- Dependency-Track, SBOM, vulnerability scanning.
- Experience with on-call rotations.