Lead DevOps Engineer

Lead DevOps Engineer

About the Vacancy:

PAŞA Sığorta OJSC invites candidates to apply for the position of Lead DevOps Engineer and become a member of our professional team.

This role is responsible for architecting, deploying, and maintaining the company's core infrastructure with a focus on automation, standardization, and high availability. The Lead DevOps Engineer will lead the implementation of robust CI/CD pipelines, GitOps practices, and comprehensive observability platforms, ensuring the secure and scalable delivery of applications. By collaborating with various technical teams, this position plays a critical role in enhancing the efficiency, reliability, and security of the entire software development lifecycle.

Responsibilities

• Design, deploy, and maintain on-premise Kubernetes clusters, including upgrades, scaling, networking, ingress, and storage;
• Manage infrastructure and application delivery using GitOps (ArgoCD) and Infrastructure as Code (Ansible, Terraform);
• Build and support CI/CD pipelines in GitLab CI, incorporating security scanning and quality gates;
• Build and evolve the observability platform, including metrics, logs, traces, dashboards, and alerting;
• Define and track SLI/SLOs for critical services and participate in incident response;
• Manage container images and artifacts in Nexus and Harbor, including versioning, retention, and vulnerability scanning;
• Manage secrets in HashiCorp Vault and their delivery to Kubernetes via the External Secrets Operator;
• Ensure infrastructure security through network segmentation, TLS, access control, and policy enforcement;
• Set up backup and disaster recovery procedures for clusters and stateful workloads;
• Optimize resource usage and costs through requests/limits, autoscaling, and capacity planning;
• Automate routine operations using scripts and AI-assisted tools and agents;
• Write and maintain technical documentation and runbooks;
• Work closely with Development, Data Platform, DBA, and InfoSec teams, supporting developers with platform onboarding.

Knowledge and Skills

• Experience with Kubernetes clusters (Kubespray, Calico VXLAN, MetalLB, NGINX Ingress Controller);
• Experience with GitOps (ArgoCD), Git, GitFlow, and Semantic Versioning;
• Knowledge of monitoring and observability platforms: Prometheus, ELK/EFK, Grafana Loki, Grafana Tempo, Jaeger, OpenTelemetry;
• Experience with registry and artifact repositories (Nexus, Harbor);
• Experience with containers (Docker, Helm Chart) and CI/CD tools (GitLabCI);
• Experience with secret management (HashiCorp Vault, External Secrets Operator) and Infrastructure as Code tools (Ansible, Terraform);
• Scripting and automation skills (Bash, Python; Go is a plus);
• Deep knowledge of network security concepts (DMZ, firewall, TLS, Proxy) and Linux administration;
• Familiarity with SRE, DevSecOps, and AIOps practices is an advantage;
• Strong analytical thinking, problem-solving, and teamwork skills;
• High sense of responsibility and attention to detail;
• Language skills: Azerbaijani, English, Russian.

Education and Experience

• Higher or secondary specialized education;
• Minimum 1 year of work experience in the relevant field;
• Kubernetes certifications (CKA preferred; CKAD and/or CKS would be an advantage).

What We Offer

Meaningful Work

• Opportunity to contribute to the Company’s success by participating in decision-making processes and driving positive change.

A Team That Grows Together

• Opportunity to work in a professional, supportive, and collaborative team environment.

Continuous Development Opportunities

• Access to a wide range of learning and development opportunities to enhance your knowledge, skills, and professional experience.

A Trust-Based Work Environment

• A workplace where your ideas are valued, your initiatives are encouraged, and your professional growth is supported.

Interested candidates can apply by clicking the link provided in the "Apply" button.

Only candidates who meet the initial selection criteria will be contacted.