DevOps Engineer

About Us:

duPont REGISTRY Group is a dynamic and innovative company dedicated to delivering exceptional solutions to our clients. We are seeking a highly skilled and versatile DevOps Engineer to join our growing team. This role is hands-on and deeply technical — ideal for someone experienced in infrastructure automation, observability, and microservices orchestration AWS cloud environments.

Responsibilities

• Design, provision, and manage cloud infrastructure using Pulumi and Infrastructure-as-Code best practices.


• Deploy and operate EKS clusters with keeping solid security, observability, cost efficiency compliant to best practices


• Manage Kubernetes workloads based on Helm, kustomize or custom Kubernetes operators


• Implement and maintain observability stacks — VictoriaMetrics, VictoriaLogs, Grafana, Alertmanager, Zipkin, and OpenTelemetry — for Node.js, python and golang based services.


• Build custom dashboards and alert rules for infrastructure and application performance monitoring.


• Automate operations and writing infrastructure-oriented code on Typescript or Golang.


• Administer GitLab CI/CD pipelines, runners, and environments for seamless multi-repo workflows.


• Support backend teams by integrating Node.js, Golang and Python microservices into unified deployment and monitoring pipelines.


• Apply strong security and compliance practices (RBAC, IAM, secrets management, mTLS).


• Contribute to disaster recovery, cost optimization, and reliability engineering strategies.

Required Skills and Qualifications

General skill

• System design, architecture and patterns understanding


• Proven experience in DevOps/SRE position


• Deep understanding of Linux basics and containers (cgroups, cpu scheduling, kernel parameters)


• OCI containers (docker/podman)


• Image build tools (buildkit, kaniko, buildah)


• Networking knowledge, according to CCNA level


• Backup and restore strategies, disaster recovery planning

Programming languages and frameworks

• JavaScript/Typescript basic level


• Understanding of NodeJS runtime


• Golang basics


• REST API implementations


• SOLID principles


• 12-factor app methodology


• Skills of bash scripting and perception, when bash should be replaced to programming language

Git, IaC, CI/CD

• Advanced git knowledge


• Gitlab CI/CD experience


• Pulumi basics and especially typescript implementation


• Understanding of cattle/pets infrastructure approaches,

Cloud technologies

• Experience with AWS basic services (EC2, S3, RDS, VPC, IAM, ALB)


• EKS clusters with worker nodes and networking administration, understanding of transparent IAM security (IRSA, Pod execution roles)


• Cloudfront cdn, WAF security

Kubernetes

• Understating of core concepts, such pods, replicasets, deployments, services, ingresses, secrets


• Experience with different deployment tools and concepts, such Helm, kustomize (overlays concept), ArgoCD/Flux, Pulumi Kubernetes provider


• Statedul/stateless concepts, difference between deployments and statefulsets, storage classes


• Internal Kubernetes networking, CNI like Cilium, AWS CNI, Flannel


• Cluster monitoring via Prometheus/VictoriaMetrics, logging via Loki/ViactoriaLogs


• Logging agents – vector, fluentbit

Security

• Source code and containers images security scanning – trivy, SonarCube, Artifactory


• OAuth and SAML implementations protocols, SSO concept


• SSL/TLS understanding


• Goteleport access security


• Keycloak IDM

Monitoring and Observability

• Understanding difference between metrics, logs, tracing


• Prometheus-like metrics solutions, Grafana dashboards


• Logging platforms based on Loki/VoctoriaMetrics/Graylog


• Alerting with alertmanager


• Distributed tracing systems like Zipkin, ElasticSearch APM

Bonus Points for Experience with

• Kubernetes service mesh (Istio, Linkerd)


• Kubernetes operator pattern (Kubebuilder, Operator SDK)


• OpenSearch and Redis cluster administration.


• RabbitMQ administration


• NoSQL solutions – MongoDB, DynamoDB


• Policy-as-Code (OPA, Kyverno) or security automation (Falco, Trivy, Snyk).


• Serverless architecture (AWS Lambda)


• Cost management, auto-scaling, and infrastructure benchmarking.


• Chaos engineering or resilience testing practices.