Cloud Infrastructure Engineer

DevOps Engineer Job DescriptionWe are seeking a highly skilled DevOps Engineer to join our team.This Senior DevOps Engineer will be responsible for managing and administering enterprise-grade infrastructure in advanced hybrid environments.The ideal candidate should have a deep understanding of DevOps tools and practices, especially in hybrid/on-prem environments.Key Responsibilities:Manage and administer Linux environments: RHEL/CentOS 7–9, Ubuntu 20.04/22.04, Oracle Linux, SUSE.Handle enterprise storage systems: NAS, NetApp, HPE 3PAR/Nimble.Work with SAN/NAS protocols: FC, iSCSI, NFS, CIFS/SMB, including multipathing.Perform bare-metal provisioning for servers and appliances.Container Platforms (On-Prem Kubernetes):Strong hands-on expertise in Red Hat OpenShift (4.12–4.16).Good understanding of core Kubernetes concepts.Manage container runtimes like containerd or CRI-O.Work on cluster upgrades, operators, networking, storage classes, monitoring, and security hardening.CI/CD & Automation:Implement CI/CD pipelines using Jenkins (Pipeline-as-Code, shared libraries, distributed agents).Work with GitLab CE/EE, including runners and self-hosted workflow automation.Manage GitOps deployments via ArgoCD, Flux v2, or similar.Strong proficiency in Ansible (AWX/Tower).Infrastructure-as-Code using Terraform/OpenTofu.Build standard VM/bare-metal images using Packer (good-to-have).Configuration Management:Maintain automation using Ansible as the primary tool.Manage OS fleets through Red Hat Satellite or SUSE Manager.Exposure to Puppet or Chef (legacy systems support).Monitoring, Logging & Observability:Manage observability stack with Prometheus + Thanos/Cortex/Mimir for metrics.Build dashboards and alerts in Grafana / Grafana Enterprise.Experience with Loki + Promtail/Alloy for logs.Optional exposure: Elastic Stack (ELK/EFK), OpenSearch, Zabbix, Nagios.Deploy and maintain OpenTelemetry collectors.Experience with VictoriaMetrics is a plus.Security, Compliance & Secrets Management:Manage enterprise secrets using HashiCorp Vault (on-prem).Perform vulnerability and compliance scanning using OpenSCAP, Anchore, Trivy, Clair.Work with SELinux/AppArmor in enforcing mode.Handle certificate lifecycle with Venafi, internal CA, or cert-manager.Support VA scans using tools like Nessus.Networking (Enterprise-Grade On-Prem & Hybrid):Good understanding of cloud-style concepts: Security Groups, NACLs, NAT, IGW, Route Tables.Exposure to pfSense, FortiGate, Cisco firewalls.Experience with load balancers: F5 BIG-IP, NGINX, HAProxy, XAMPP.Understanding of BGP/EVPN, VLANs, VXLAN, firewalls, and enterprise network segmentation.Backup, Disaster Recovery & High Availability:Manage backups for DBs, VMs, and applications.Understanding of stretched clusters, metro clusters, and Site Recovery Manager (SRM).Practical knowledge of designing and supporting HA vs DR for servers, databases, and applications.Databases & Middleware (DevOps-Managed Environments):Hands-on experience managing:PostgreSQL, MySQL/MariaDB, MongoDB, Oracle, MS SQL ServerRedis, RabbitMQ, Kafka clustersExperience with operators like:CrunchyData (Postgres)Percona (MySQL/Mongo)StackGres (Postgres)Strimzi (Kafka)Scripting & Platform Engineering:Strong scripting using Python, Go (for internal tooling), and advanced Bash.In-depth understanding of Linux internals: cgroups, namespaces, kernel tuning.Work with Git workflows: GitOps, trunk-based development, monorepos.Capacity planning, infrastructure right-sizing, and on-prem cost optimization.Familiarity with:Redis, KafkaJupyter, AirflowJenkins (deep expertise)Zenduty, SonarQubeDocker RBAC, Teleport, SSOStrong platform engineering mindset to build internal automation platforms.