DevOps Engineer

Key Responsibilities:

• Build, operate, and maintain cloud infrastructure and containerized workloads using Alibaba Cloud and Kubernetes.

• Manage application deployment and CI/CD pipelines using GitLab CI across development, staging, and production environments.

• Monitor infrastructure and application health, including logs, metrics, availability, and resource utilization.

• Troubleshoot infrastructure, Kubernetes, networking, deployment, and production issues.

• Manage and maintain API Gateway infrastructure, including Kong & TYK.

• Maintain secure infrastructure access and security controls, including Teleport, TLS/mTLS, ClamAV, and fail2ban.

• Manage supporting cloud networking components such as NAT Gateway and Application Load Balancer.

• Support infrastructure-related operations for PostgreSQL and MongoDB.

• Automate repetitive infrastructure and operational tasks using scripting or other suitable tools.

• Maintain infrastructure documentation, deployment procedures, and operational runbooks.

• Research and implement practical improvements to infrastructure reliability, security, performance, and operational efficiency.

Requirements:

• Good understanding of Linux system administration, preferably with experience managing Ubuntu or CentOS-based environments.

• Experience with container technologies such as Docker and Kubernetes.

• Experience managing Kubernetes workloads in cloud environments. Experience with Alibaba Cloud Container Service for Kubernetes (ACK) is a plus.

• Experience building or maintaining CI/CD pipelines. Familiarity with GitLab CI is preferred.

• Good understanding of cloud computing concepts and hands-on experience with public cloud platforms. Alibaba Cloud experience is a plus.

• Understanding of monitoring, logging, and infrastructure observability concepts. Experience with tools such as Fluent Bit, Loki, Grafana Alloy, Node Exporter, Prometheus, or similar tools is a plus.

• Good understanding of networking fundamentals, including DNS, routing, NAT, load balancing, HTTP/HTTPS, and TLS.

• Familiarity with API Gateway or reverse proxy technologies. Experience with Kong or Tyk is a plus.

• Understanding of infrastructure security concepts, including secure access, certificates, TLS/mTLS, Linux hardening, and access control.

• Familiarity with PostgreSQL and MongoDB from an infrastructure or operational perspective.

• Proficiency in scripting languages such as Bash or Python for infrastructure automation and troubleshooting.

• Able to troubleshoot issues across application deployment, container, operating system, network, and cloud infrastructure.

• Willing to learn existing technologies and adapt to the infrastructure stack currently used by the company.