Description
### **About the position**
Nstech is evolving from isolated products to a composable platform. To support this transformation with speed and stability, we are looking for a DevOps Engineer who ensures a reliable, automated, and secure delivery pipeline for the componentization teams — working side by side with the squads during application modernization.
### **Mission**
Provide pipelines, infrastructure as code, and observability that accelerate delivery with quality and security — ensuring stability while coexisting with legacy systems and supporting the adoption of platform standards.
### **Responsibilities and attributes**
* **Squad enablement —** Support squads in adopting pipelines, environments, and automations during modernization/componentization and cluster rollouts, acting as a technical facilitator.
* **Pipelines and CI/CD —** Build and maintain GitOps-based CI/CD pipelines, with automation for build, testing, security, and deployment.
* **Infrastructure as Code (IaC) —** Provision and evolve infrastructure using Terraform/Ansible and Helm Charts, adhering to Cloud Policies.
* **Kubernetes and containerization —** Operate and evolve workloads on Kubernetes (AKS): deployment, selective scalability, and fault isolation.
* **Reliability and observability —** Instrument metrics, logs, and traces (Datadog), define SLIs/SLOs, and work on progressive stabilization across customer clusters.
* **Security in the pipeline (DevSecOps) —** Apply security best practices: secret management, dependency analysis, and environment hardening.
* **Platform adoption and self\-service —** Integrate and adopt the self\-service standards and capabilities of the Developer Portal (Backstage), in partnership with the Platform Engineering team
* **FinOps —** Monitor and optimize cloud costs for the environments under your responsibility.
### **Requirements and qualifications**
* Consolidated experience as a DevOps or SRE in mission-critical environments.
* Kubernetes (AKS) and containerization (Docker).
* IaC with Terraform (or equivalent) and GitOps practices.
* CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab, or similar).
* Cloud (Azure preferred) and fundamentals of networking and security.
* Observability: Datadog, Prometheus/Grafana, or similar.
* Scripting (Bash/Python) and automation.
* Security practices in the pipeline (secret management, vulnerability analysis).
* Experience in agile teams (Scrum/Kanban).
* Hands-on profile, with autonomy to solve complex problems and investigate root causes.
* Technical English (reading and writing).
### **Differentiators**
* Backstage (creation of plugins or templates), Kong API Gateway, Kafka/Confluent, Keycloak.
* DevSecOps and cloud compliance policies.
* Synthetic testing/monitoring strategies (e.g., k6, Datadog Synthetics).
* Experience in migrating/modernizing legacy systems to microservices.