Kubernetes

- 3+ years running production Kubernetes on-prem; hands-on with RKE/RKE2 and Rancher (node & hypervisor management)

- Cluster lifecycle: zero-downtime upgrades, etcd and stateful workload backups, capacity planning, PDB-aware node operations

- Helm in production; Kustomize a plus

- Linux (Ubuntu/RHEL) at a debugging level: systemd, networking, storage

Networking

- Production Cilium: eBPF datapath, kube-proxy replacement, IPAM, NetworkPolicy/CiliumNetworkPolicy (L3–L7, FQDN), Hubble-based troubleshooting

- Production Istio: traffic management (VirtualService, DestinationRule, canary/blue-green), mTLS, diagnosing mesh latency and misconfiguration

- Kubernetes-side service exposure (Service, Ingress, Cilium config);

CI/CD & GitOps

- GitLab CI/CD pipelines at scale: runners, caching, artifacts, multi-stage

- ArgoCD: ApplicationSets, sync policies, drift management; immutable-image GitOps flow

- Deployment strategies: canary, blue/green, rollback including DB migration safety

Supply Chain Security

- Built or ran image vulnerability management: scanning in CI and scheduled (Trivy/Harbor), CVE triage (KEV/EPSS), remediation planning with dev teams

- Practical fixes: base image upgrades, multi-stage/distroless, pinned dependencies

- Admission policies: Kyverno/Gatekeeper (block critical CVEs, non-root, read-only rootfs)

- SBOM and image signing a plus

Storage & Observability

- Operating S3-compatible storage: MinIO and/or Garage — replication, versioning, lifecycle, backup/restore testing

- VictoriaMetrics/Prometheus + Grafana: dashboards, vmalert/Alertmanager, SLO-based alerting

- App-level metrics for PHP (PHP-FPM) and Java (JVM, GC, memory)

Working with Developers

- Consult product teams on Dockerfiles, image optimization, in-container performance; enough PHP/Java depth to diagnose OOMs, tune resources, and explain why a pod died

- Run incidents end-to-end; write postmortems and docs; onboard teams onto the platform

Nice to Have

- Cilium Cluster Mesh; multi-cluster operations

- Vault / External Secrets

- Security incident response, pentest remediation, threat modeling

- DR planning and restore drills

- 100+ node clusters; CKA/CKAD

cluster lifecycle, networking, GitLab CI/CD + ArgoCD delivery stack, S3 storage (MinIO/Garage),

VictoriaMetrics/Grafana observability.

Professional Development Opportunities: We invest in the growth of our employees, providing training, mentoring, and networking opportunities.

Fast-paced and Dynamic Work Environment: Challenge yourself and be inspired by our innovative projects.

Technology-driven and Innovative: Work with cutting-edge technology and contribute to developing new products and services.

Collaborative and Team-oriented Culture: Join a supportive environment where we work together to achieve common goals.

Career Advancement Opportunities: As we grow, so do the opportunities for career advancement and taking on new roles.

This job opportunity offers a hybrid work model, allowing a combination of office and remote work.

If you're seeking a company that invests in its employees, fosters a dynamic work environment, and offers opportunities for growth and advancement, we welcome you to join our team. Apply now!