DevOps Engineer – Platform & AI Infrastructure

About the role

We are building an enterprise AI platform that runs AI agents on business applications via Kubernetes across Azure, on‑premises and air‑gapped environments. As a senior DevOps Engineer you will own the target architecture, hosting, and platform delivery, mentoring a junior engineer and driving the platform to production by December 2026.

Key responsibilities

• Define and own target architecture and produce security documentation for approvals.
• Design and operate Kubernetes clusters on Azure (AKS) and on‑premises (RKE2, OpenShift, Rancher) with consistent tooling and policies.
• Package the platform as Helm charts for air‑gapped installations, including offline registries and signed release bundles.
• Implement GitOps delivery pipelines using Argo CD or Flux, and manage infrastructure as code with Terraform/OpenTofu or Bicep.
• Run GPU workloads, self‑host multimodal model serving, and manage sandboxed headless browser fleets with strong isolation.
• Operate stateful services (PostgreSQL, S3‑compatible storage, secrets management) without managed cloud equivalents.
• Own platform security (OPA Gatekeeper, Kyverno, image scanning, SBOMs) and observability (Prometheus, Grafana, Loki, OpenTelemetry).
• Ensure reliability through backup, disaster recovery, capacity planning, incident response and blameless post‑mortems.
• Lead and mentor a junior DevOps engineer.

Required profile

• 10+ years of experience in software, infrastructure, DevOps, SRE or platform engineering with production‑grade Kubernetes at scale.
• Proven ability to define architectures and navigate security and architecture reviews.
• Deep hands‑on experience with Azure services (AKS, networking, identity, Key Vault, Monitor, ACR).
• Experience delivering software to air‑gapped or highly restricted environments.
• Strong security mindset: least‑privilege, secrets management, policy‑as‑code and supply‑chain security.
• Demonstrated technical leadership and mentoring skills.

Required skills

• Kubernetes (AKS, RKE2, OpenShift, Rancher)
• Helm, Argo CD, Flux
• Terraform / OpenTofu, Bicep
• Azure (AKS, networking, identity, Key Vault, Monitor, ACR)
• GitOps, Git
• Python, Bash, Go
• Linux, TCP/IP, DNS, TLS, load balancing
• OPA Gatekeeper, Kyverno
• Prometheus, Grafana, Loki, OpenTelemetry
• PostgreSQL, CloudNativePG
• Harbor, image signing, SBOMs
• Kata Containers, gVisor
• GPU workloads (NVIDIA GPU Operator), vLLM, SGLang