DevOps Engineer

• 3–4 years of hands‑on experience with a major cloud provider (GCP strongly preferred; AWS/Azure considered with GCP ramp‑up expected).
• Solid Terraform experience — writing and maintaining modules, understanding state management, and reasoning about blast radius before applying changes.
• Practical Kubernetes experience, ideally GKE — deployments, services, ingress, and Helm chart authoring/management (values overlays, upgrades, rollbacks).
• Experience building and maintaining CI/CD pipelines (Bitbucket Pipelines, GitLab CI, GitHub Actions, or similar) — build/test/deploy automation across multiple environments.
• Comfortable with Docker — multi‑stage builds, image security basics (non‑root users, minimal base images), and troubleshooting container runtime issues.
• Working knowledge of relational databases (PostgreSQL preferred) from an operations perspective — backups, replication, point‑in‑time recovery — not deep DBA expertise, but enough to reason about data safety during infra changes.
• Bash scripting proficiency — comfortable writing and reading scripts with real safety considerations (guard clauses, dry‑run modes, idempotency), not just one‑off commands.
• Understanding of IAM and least‑privilege principles, and comfort working with secrets management (Secret Manager, External Secrets Operator, or equivalent).
• A methodical, evidence‑first approach: you verify things live rather than assuming documentation is current, and you're comfortable saying "I don't know yet, let me check" rather than guessing.

Strongly Valued (Not Required)

• Experience with disaster recovery design and testing — pilot‑light/warm‑standby architectures, cross‑region replication, failover runbooks.
• Exposure to SOC 2, HIPAA, or similar compliance frameworks, especially from the operations/evidence side rather than just policy‑writing.
• Familiarity with vulnerability scanning tools (Trivy, Snyk) and triaging real vs. false‑positive findings.
• Experience in a healthcare, fintech, or other regulated‑data environment where data residency and audit trails are taken seriously.