Senior DevOps Engineer

Description

We are looking for Senior DevOps Engineer. This role is ideal for candidates who thrive in cloud-native environments and can blend deep networking knowledge with DevOps, and large-scale Kubernetes platform engineering, with a particular emphasis on designing, securing, and operating Amazon EKS environments in enterprise AWS deployments.

This is an in-office position requiring 4 days per week on-site in Sofia.

Core Competencies

• Deep understanding of AWS networking services (VPC, Transit Gateway, Direct Connect, VPN, PrivateLink, Route 53).
• Experience with infrastructure-as-code tools (Terraform, AWS CloudFormation, CDK).
• Proficiency in DevOps tools (CI/CD pipelines, GitOps, Jenkins, GitHub Actions, etc.).
• Expertise in automation and scripting (Python, Bash, PowerShell).
• Strong grasp of security principles and practices in networking and cloud (e.g., Zero Trust, IAM, NACLs, Security Groups, TLS, etc.).
• Solid knowledge of networking protocols (TCP/IP, HTTP/S, DNS, BGP, etc.).
• Familiarity with service meshes (e.g., AWS App Mesh, Istio) and microservices communication.
• Strong hands-on experience with Kubernetes in production environments, including cluster design, deployment, scaling, networking, security, and workload management.
• Deep understanding of Kubernetes networking, ingress controllers, service discovery, network policies, and container security best practices.
• Experience with GitOps and Kubernetes deployment tools such as Argo CD, Flux, Helm, and Kustomize.

Requirements

AWS-Specific Requirements:

• Design and implement scalable and secure network topologies in AWS.
• Deep experience with Transit Gateway, VPC peering, shared VPCs, and hybrid networking setups.
• Implement and manage network firewalls (e.g., AWS Network Firewall, WAF, Security Groups).
• Monitoring and logging via AWS services (VPC Flow Logs, CloudWatch, CloudTrail).
• Automation of network infrastructure with CI/CD and IaC.
• Experience with container networking in ECS, EKS, and Kubernetes networking.
• DNS and global routing strategies using Route 53 and latency-based routing.
• Extensive experience deploying, managing, upgrading, and troubleshooting Amazon EKS clusters at scale.
• Implement Kubernetes security controls including RBAC, Pod Security Standards, Secrets Management, Network Policies, and workload isolation.
• Optimize Kubernetes platform reliability, observability, and performance using monitoring and logging solutions such as Prometheus, Grafana, CloudWatch, and OpenTelemetry.
• Integrate Kubernetes platforms with AWS networking, IAM, security services, and CI/CD pipelines.

Recommended Certifications:

• AWS Certified Advanced Networking – Specialty
• AWS Certified DevOps Engineer – Professional
• Certified Kubernetes Administrator (CKA) – Strongly Preferred
• AWS Certified Solutions Architect – Professional (Advantage)