Senior DevOps Engineer

Softeta

About The Position

Softeta is seeking a DevOps Engineer to work with a client in the energy sector. The role focuses on operating and improving Linux-based bare-metal infrastructure and Kubernetes platforms through automation, GitOps, and secure, repeatable deployment practices. Responsibilities include provisioning servers and Kubernetes clusters, managing multiple clusters, building CI/CD workflows, deploying containerized applications, and maintaining monitoring, logging, networking, security, identity, and secrets-management capabilities. The position also includes integrating Kubernetes-enabled Bosch devices and IoT applications, troubleshooting issues, and contributing to platform standardization, reliability, and security.

Requirements

Hands-on experience with Linux system administration, including installation, configuration, patching, and troubleshooting.
Experience with bare-metal server provisioning and operating-system deployment.
Practical knowledge of Kubernetes cluster installation, administration, troubleshooting, scaling, and workload management.
Experience with Git, declarative configuration management, and GitOps principles.
Hands-on experience with Argo CD and Kubernetes-based application delivery.
Knowledge of CI/CD pipeline design and implementation.
Experience with Docker, containerization, Helm charts, and Kubernetes manifests.
Experience with Ansible or similar infrastructure automation and configuration-management tools.
Knowledge of Prometheus, Grafana, logging solutions, and alerting mechanisms.
Understanding of Kubernetes networking, including Services, Ingress, and Network Policies.
Knowledge of infrastructure and application security, RBAC, secrets management, and least-privilege access principles.
Familiarity with PKI, TLS/mTLS, certificate lifecycle management, and cert-manager.
Understanding of enterprise identity and access management, including OIDC/SAML, SSO, MFA, and service-account security.
Familiarity with HashiCorp Vault, External Secrets Operator, or equivalent secrets-management solutions.
Experience with or willingness to work on Kubernetes-enabled devices and IoT platform integration.

Nice To Haves

Familiarity with Azure or AWS.

Responsibilities

Automate Linux installation, configuration, updates, and patching on bare-metal servers using Ansible, Kickstart, or other configuration-management tools.
Provision server hardware, configure BIOS settings, install operating systems, and deploy Kubernetes clusters using automated, version-controlled workflows.
Install, configure, operate, and troubleshoot Kubernetes clusters on Linux-based bare-metal infrastructure.
Manage multiple Kubernetes clusters through standardized configurations, automated rollouts, and reconciliation processes.
Design and maintain CI/CD pipelines integrated with GitOps workflows; use Argo CD to synchronize Kubernetes environments with Git-defined desired states and support traceable deployments and controlled rollbacks.
Containerize applications with Docker and deploy them to Kubernetes; develop and maintain Helm charts and version-controlled configuration values.
Implement and maintain monitoring, visualization, logging, and alerting solutions, including Prometheus and Grafana, with configuration managed through GitOps.
Configure Kubernetes Services, Ingress controllers, and Network Policies, and implement security practices such as RBAC, least-privilege access, secure service accounts, and secrets management.
Manage certificate authorities, trust chains, TLS/mTLS, and automated certificate lifecycle processes using tools such as cert-manager.
Integrate enterprise identity providers through OIDC/SAML and support SSO, MFA, and centralized access control.
Integrate secrets-management solutions such as HashiCorp Vault and External Secrets Operator; manage access policies in Git, protect sensitive data, rotate credentials, and support access-change auditing.
Integrate Kubernetes-enabled Bosch devices into the platform management ecosystem and deploy IoT applications using Git-managed configuration and reliable data-delivery mechanisms.
Troubleshoot infrastructure and application issues, improve automation, and contribute to platform standardization, operational reliability, and security.