Senior Cloud & Kubernetes DevOps Engineer
About the Role & Project
We are launching an ambitious greenfield infrastructure initiative to build a modern, scalable, and fully automated cloud platform. Built on robust open-source foundations — including Apache CloudStack, OpenStack, and Kubernetes — this platform will deliver secure, highly available, and self-service containerized infrastructure tailored for high-compliance and performance-critical operations.
As a Senior Cloud & Kubernetes DevOps Engineer, you will be instrumental in designing and bootstrapping this platform from the ground up. You will own the end-to-end Infrastructure as Code (IaC) architectures, build enterprise-grade Kubernetes container platforms, establish modern GitOps/CI/CD pipelines with GitLab, and implement cloud-native open-source technology stacks.
Your Role
In this role, you will take lead ownership of provisioning, Kubernetes orchestration, automation, and pipeline integration for our new open-source cloud platform. You will:
- Design & Provision Greenfield Cloud Architectures: Architect declarative, reproducible cloud infrastructure using Apache CloudStack or OpenStack integrated with automated compute, storage (e.g., Ceph), and networking topologies.
- Architect Enterprise Kubernetes Ecosystems: Design, deploy, and manage production-grade Kubernetes clusters on top of hybrid cloud platforms, enabling dynamic container workloads at scale.
- Master Infrastructure as Code (IaC): Lead the strategy and automated deployment of virtualized and cloud-native resources using Terraform or Pulumi (Go).
- Build Modern GitOps & Container Pipelines: Engineer robust CI/CD, container registry integrations, and GitOps workflows in GitLab CI/CD (using ArgoCD) for automated application and cluster lifecycle management.
- Automate & Orchestrate: Automate day-0 to day-2 cluster operations, node provisioning, and configuration management using Ansible, Helm and modern cloud-init mechanisms.
- Integrate Cloud-Native Open Source Tooling: Implement open-source observability, security, and networking solutions across the stack (e.g., Prometheus, Grafana, OpenAPI, Istio/Envoy, HashiCorp Vault).
- Ensure Security & Operational Excellence: Enforce strong container security, network policies, RBAC, and self-healing mechanisms to ensure high availability across environments.
What You Bring
Technical Expertise
- Kubernetes & Containers: 3+ years of hands-on experience designing, operating, and troubleshooting Kubernetes clusters in production, including strong proficiency with Helm and cloud-native networking (CNI).
- Cloud Platforms: Experience administering, configuring, or automating Apache CloudStack or OpenStack environments.
- Infrastructure as Code (IaC): Deep hands-on experience using Terraform or Pulumi to automate virtualized, containerized, networking, and storage infrastructure.
- CI/CD & GitOps: Advanced expertise in GitLab / GitLab CI, including building reusable pipeline templates, containerized build environments, dynamic environments, and GitOps delivery frameworks.
- Scripting & Development: Strong proficiency in Python/Go and Bash for custom tooling, Kubernetes operators, API integrations, or IaC scripts.
- Linux & Systems Fundamentals: Strong expertise in Linux administration (Debian/Ubuntu, RHEL/Rocky), hypervisors (KVM), storage systems (Ceph, LVM), and core networking concepts (VLANs, VXLAN, BGP).
Mindset & Soft Skills
- Greenfield Architecture Mindset: Proven ability to build solutions from scratch, establish standard operating procedures, and define clean, scalable architecture patterns.
- Open Source & Cloud-Native Passion: Active interest in CNCF projects, open-source cloud technologies, and community-driven tools.
- Collaboration & Communication: Clear communication skills with the ability to articulate architectural decisions to cross-functional engineering teams.
- On-Call Flexibility: Readiness to participate in shared operational escalation and on-call rotations as the platform matures.
Bonus Points (Optional Plus)
- Kubernetes certifications such as CKA (Certified Kubernetes Administrator), CKAD, or CKS (Certified Kubernetes Security Specialist).
- Experience with service meshes (Istio, Linkerd) and policy-as-code frameworks (Kyverno, OPA / Rego, or Pulumi Crossguard).
- Experience with secrets management (HashiCorp Vault) and advanced GitOps engines (ArgoCD / Flux).
- Exposure to public cloud providers (AWS, Azure, GCP, or OCI) for multi-cloud or hybrid infrastructure setups.
Why Join Us?
- Greenfield Impact: Build a modern Kubernetes and open cloud platform from scratch without the burden of legacy code or technical debt.
- Open Source First: Work in an engineering environment that prioritizes open-source tools, CNCF standards, and community best practices.
- Growth & Empowerment: Flat Nordic-style culture, strong emphasis on autonomy, and direct influence over architectural choices.
- Modern Stack: Full backing to use cutting-edge tools like Pulumi, GitLab CI, Cilium, and Kubernetes to craft ideal developer and platform experiences.
Benefits
- Up to 6 weeks of paid time off per year
- 5 sick days per year
- Flexible working hours
- Possibility to work from home
- Flexible cafeteria account for leisure (18,000 CZK per year) allowing you to use points for MultiSport, public transport tickets, or contribute to your pension savings
- Meal vouchers in the amount of 200 CZK per workday (Aeven covers 55%)
- Referral bonus (20,000 – 60,000 CZK)
- Free snacks on Mondays and monthly get-togethers
- Free fruits and vegetables every day
- Height-adjustable tables
- Co-working offices in Ostrava and Brno
- Czech language lessons
- Annual flu vaccination for free
Skills
- Ansible
- API
- Argo CD
- Automation
- AWS
- Azure
- Bash
- BGP
- CI/CD
- Cloud
- Cloud Native
- Container Security
- DevOps
- Envoy
- Flux
- GCP
- GitLab
- GitOps
- Grafana
- Helm
- Infrastructure as Code
- Istio
- Kubernetes
- Linux
- Networking
- Observability
- OpenAPI
- OpenStack
- Prometheus
- Pulumi
- Python
- RBAC
- RHEL
- Secrets Management
- Terraform
- Ubuntu
- Vault
- VLAN
- Vxlan