DevOps Engineer

About Us: duPont REGISTRY Group is a dynamic and innovative company dedicated to delivering exceptional solutions to our clients. We are seeking a highly skilled and versatile DevOps Engineer to join our growing team. This role is hands-on and deeply technical — ideal for someone experienced in infrastructure automation, observability, and microservices orchestration AWS cloud environments. Responsibilities - Design, provision, and manage cloud infrastructure using Pulumi and Infrastructure-as-Code best practices. - Deploy and operate EKS clusters with keeping solid security, observability, cost efficiency compliant to best practices - Manage Kubernetes workloads based on Helm, kustomize or custom Kubernetes operators - Implement and maintain observability stacks — VictoriaMetrics, VictoriaLogs, Grafana, Alertmanager, Zipkin, and OpenTelemetry — for Node.js, python and golang based services. - Build custom dashboards and alert rules for infrastructure and application performance monitoring. - Automate operations and writing infrastructure-oriented code on Typescript or Golang. - Administer GitLab CI/CD pipelines, runners, and environments for seamless multi-repo workflows. - Support backend teams by integrating Node.js, Golang and Python microservices into unified deployment and monitoring pipelines. - Apply strong security and compliance practices (RBAC, IAM, secrets management, mTLS). - Contribute to disaster recovery, cost optimization, and reliability engineering strategies. Required Skills and Qualifications General skill - System design, architecture and patterns understanding - Proven experience in DevOps/SRE position - Deep understanding of Linux basics and containers (cgroups, cpu scheduling, kernel parameters) - OCI containers (docker/podman) - Image build tools (buildkit, kaniko, buildah) - Networking knowledge, according to CCNA level - Backup and restore strategies, disaster recovery planning Programming languages and frameworks - JavaScript/Typescript basic level - Understanding of NodeJS runtime - Golang basics - REST API implementations - SOLID principles - 12-factor app methodology - Skills of bash scripting and perception, when bash should be replaced to programming language Git, IaC, CI/CD - Advanced git knowledge - Gitlab CI/CD experience - Pulumi basics and especially typescript implementation - Understanding of cattle/pets infrastructure approaches, Cloud technologies - Experience with AWS basic services (EC2, S3, RDS, VPC, IAM, ALB) - EKS clusters with worker nodes and networking administration, understanding of transparent IAM security (IRSA, Pod execution roles) - Cloudfront cdn, WAF security Kubernetes - Understating of core concepts, such pods, replicasets, deployments, services, ingresses, secrets - Experience with different deployment tools and concepts, such Helm, kustomize (overlays concept), ArgoCD/Flux, Pulumi Kubernetes provider - Statedul/stateless concepts, difference between deployments and statefulsets, storage classes - Internal Kubernetes networking, CNI like Cilium, AWS CNI, Flannel - Cluster monitoring via Prometheus/VictoriaMetrics, logging via Loki/ViactoriaLogs - Logging agents – vector, fluentbit Security - Source code and containers images security scanning – trivy, SonarCube, Artifactory - OAuth and SAML implementations protocols, SSO concept - SSL/TLS understanding - Goteleport access security - Keycloak IDM Monitoring and Observability - Understanding difference between metrics, logs, tracing - Prometheus-like metrics solutions, Grafana dashboards - Logging platforms based on Loki/VoctoriaMetrics/Graylog - Alerting with alertmanager - Distributed tracing systems like Zipkin, ElasticSearch APM Bonus Points for Experience with - Kubernetes service mesh (Istio, Linkerd) - Kubernetes operator pattern (Kubebuilder, Operator SDK) - OpenSearch and Redis cluster administration. - RabbitMQ administration - NoSQL solutions – MongoDB, DynamoDB - Policy-as-Code (OPA, Kyverno) or security automation (Falco, Trivy, Snyk). - Serverless architecture (AWS Lambda) - Cost management, auto-scaling, and infrastructure benchmarking. - Chaos engineering or resilience testing practices.