Role Overview
Position: DevOps Lead
Function: DevOps / Cloud Infrastructure / SRE
Experience: 5–8 years
Reporting To: Head of Engineering / CTO
Works With: Backend, Frontend, QA and Engineering teams
Cloud Platform: AWS
About the Role
We are looking for a hands-on DevOps Lead to manage and improve our AWS infrastructure, Kubernetes platform,
CI/CD pipelines, production reliability, security and cloud cost management.
This is a practical engineering role for someone who is comfortable working directly on production systems,
troubleshooting incidents, improving deployment processes and automating operational work.
The ideal candidate should be able to diagnose production issues using logs and metrics, implement reliable solutions,
automate repetitive work and provide technical guidance to other engineers.
The role covers platform reliability, CI/CD, cloud infrastructure, security, monitoring, cost optimisation and automation.
02. Key Responsibilities
• Manage production AWS and Amazon EKS infrastructure and Kubernetes workloads.
• Manage deployments, services, ingress, secrets, resource configuration, node groups and cluster upgrades.
• Troubleshoot pod failures, scheduling issues, resource constraints, networking and DNS problems.
• Maintain Docker-based staging environments and container images.
• Own and improve Jenkins CI/CD pipelines, including Bitbucket and Jira integrations.
• Standardise build, test, containerisation and deployment processes across services.
• Manage ALB/NLB, NGINX Ingress, DNS and SSL/TLS certificates.
• Provision and maintain infrastructure using Terraform or another Infrastructure-as-Code tool.
• Monitor production systems and lead incident response and root-cause analysis.
• Implement AWS and Kubernetes security best practices, including IAM, secrets management and access controls.
• Monitor AWS spending and identify opportunities for infrastructure and workload optimisation.
• Automate operational tasks using Python, Bash or Groovy.
• Maintain documentation, runbooks and DevOps standards.
• Work closely with Backend, Frontend and QA teams to support reliable releases.
• Mentor engineers and provide technical guidance on DevOps practices.
03. Technical Environment
AWS, Amazon EKS, Kubernetes, Docker, Jenkins, Bitbucket, Terraform, Helm, NGINX Ingress, ALB/NLB, IAM, ECR,
RDS, Route 53, ACM, CloudWatch, Prometheus, Grafana, Loki, Jira and Linux.
04. Required Skills
• Own and evolve the production Amazon EKS platform.
• Manage Deployments, StatefulSets, Services, Ingresses, ConfigMaps and Secrets.
• Manage Kubernetes version upgrades, node groups and cluster lifecycle.
• Define and enforce workload resource requests and limits.
• Configure and optimise HPA, PDB, pod anti-affinity and readiness/liveness/startup probes.
• Troubleshoot Pending pods, CrashLoopBackOff, OOMKilled, ImagePullBackOff, scheduling failures, node capacity
issues, pod-density/IP allocation limits, DNS failures and service-to-service connectivity.
• Operate and optimise Cluster Autoscaler.
• Evaluate and adopt Karpenter for workload-aware provisioning and cost optimisation.
• Drive migration toward declarative, version-controlled Kubernetes configuration using Helm and GitOps.
• Maintain Docker-based staging environments and ensure staging/production parity.
• Define image tagging, promotion and container lifecycle standards.
Required Experience
• Own the complete production ingress architecture.
• Manage AWS ALB, AWS NLB, AWS Load Balancer Controller, NGINX Ingress, target groups, listener rules, health
checks, Kubernetes Services and DNS routing.
• Design health checks that accurately represent application availability.
• Tune deregistration delays and rolling deployment behaviour for zero-downtime releases.
• Investigate 4xx/5xx errors and identify the exact infrastructure/application layer responsible.
• Manage internal vs. internet-facing load balancers.
• Control ALB/NLB sprawl and retire unused infrastructure.
• Enable and analyse load-balancer access logs as an operational evidence source.
• 5–8 years of hands-on DevOps, SRE or Cloud Infrastructure experience.
• Strong practical experience with AWS, Kubernetes and Docker.
• Production experience with Amazon EKS.
• Hands-on experience with Jenkins and CI/CD pipelines.
• Experience with Git, Bitbucket and Jira-based release workflows.
• Good knowledge of Terraform or another Infrastructure-as-Code tool.
• Strong understanding of AWS networking, IAM, security groups, DNS and load balancing.
• Experience with ALB/NLB, Kubernetes Ingress and SSL/TLS.
• Good Linux administration and troubleshooting skills.
• Experience with monitoring and logging tools such as CloudWatch, Prometheus, Grafana or similar.
• Good scripting skills in Python and/or Bash.
• Experience handling production incidents and performing RCA.
• Good communication, ownership and problem-solving skills.
• Design and maintain secure AWS infrastructure using Terraform or equivalent IaC.
• Manage VPC/networking, EC2, EBS/EFS, S3, IAM, Lambda, SES, RDS, ECR, KMS, Route 53, ACM and WAF.
• Bring manually created infrastructure under version control.
• Build reusable, reviewable and reproducible infrastructure modules.
• Plan and execute infrastructure and application migrations with rollback strategies.
• Validate infrastructure changes before and after implementation.
Good to Have
• Own DevOps-side release management across MERN, Python and AI/ML applications.
• Manage Jira release lifecycle, sprint coordination and ticket hygiene.
• Enforce end-to-end traceability: Jira → Commit → Build → Image → Deployment → Production.
• Implement pipeline controls such as "No Ticket, No Deploy".
• Coordinate releases with Backend, Frontend, QA and AI/ML teams.
• Automate deployment reports, release notes and engineering activity reports.
• Maintain accurate deployment and change records for auditability.
• Helm and Kubernetes configuration management.
• Cluster Autoscaler or Karpenter.
• ArgoCD or other GitOps tools.
• Kyverno or OPA Gatekeeper.
• Kafka/Redpanda.
• MongoDB, MySQL, PostgreSQL and Redis.
• OpenTelemetry.
• OpenCost/Kubecost and cloud cost optimisation.
• AWS or Kubernetes certifications.
• Own and improve the Jenkins platform.
• Develop and maintain declarative Jenkins pipelines.
• Build and maintain Jenkins Shared Libraries using Groovy.
• Manage Jenkins credentials, configurations and job lifecycle.
• Integrate Jenkins with Bitbucket through webhooks, pull requests, branch events and Bitbucket Pipelines.
• Standardise CI/CD pipelines across repositories.
• Automate build, test, security scanning, image creation and deployment.
• Manage ECR/container image promotion between environments.
• Implement automated rollback strategies.
• Maintain Jenkins configuration and pipeline standards as code wherever possible.
What We Expect
• Act as the primary DevOps escalation point for production incidents.
• Restore services quickly while maintaining disciplined incident procedures.
• Conduct evidence-based Root Cause Analysis.
• Distinguish application, database, network, Kubernetes and infrastructure failures.
• Own production monitoring, alerting and dashboards.
• Identify and eliminate silent failure conditions.
• Troubleshoot performance issues across applications, Kubernetes, databases, Kafka/Redpanda, Redis, load
balancers, TLS and networking.
• Maintain backup and disaster-recovery procedures.
• Regularly test database and infrastructure restoration rather than assuming backups are valid.
• Strong ownership of production infrastructure.
• Ability to troubleshoot using logs, metrics and evidence rather than assumptions.
• Practical understanding of Kubernetes beyond basic kubectl usage.
• Ability to work independently during incidents and high-priority releases.
• Security and cost awareness when making infrastructure decisions.
• Willingness to remain hands-on while providing technical leadership.
• Ability to document solutions and improve operational processes.
• Own the AWS and Kubernetes security posture.
• Implement IAM least privilege, MFA, password policies and access reviews.
• Remove long-lived credentials from workloads.
• Implement IRSA and managed secret references.
• Secure Kubernetes API/control-plane access.
• Harden security groups and network exposure.
• Prevent unnecessary public database and service exposure.
• Manage TLS/SSL security across all public endpoints.
• Manage cert-manager, ACM, certificate renewal, SAN/chain validation, TLS policies, HTTPS enforcement, redirects
and HSTS.
• Implement WAF policies and monitoring.
• Implement Kubernetes security controls including Kyverno, Pod Security Standards, NetworkPolicies, RBAC,
service-account restrictions, KMS encryption and image vulnerability scanning.
• Introduce policy-as-code progressively, starting in audit mode and moving to enforcement.
• Conduct periodic AWS/EKS security reviews and track findings through closure.
• Maintain rollback procedures and before/after verification for security changes.
Success in the Role
• Own monthly AWS infrastructure cost analysis.
• Analyse expenditure by service, workload and environment.
• Identify underutilised or orphaned resources.
• Right-size EC2, EKS nodes, Kubernetes workloads, EBS, RDS, load balancers and IP addresses.
• Evaluate Savings Plans and Reserved Instances.
• Implement storage lifecycle and retention policies.
• Reduce unnecessary data transfer and infrastructure costs.
• Maintain cost visibility using OpenCost/Kubecost or equivalent tooling.
• Build cost dashboards and reports for engineering leadership.
• Stable and reliable production infrastructure.
• Faster and more consistent deployments.
• Reduced production incidents and recovery time.
• Improved security and cloud cost management.
• More automation and less manual operational work.
• Clear documentation and repeatable DevOps processes.
• Automate operational processes using Python, Bash and Groovy.
• Build internal tools for deployment automation, release reporting, infrastructure health, cost optimisation and security
checks.
• Integrate operational workflows with Jira, Bitbucket and Slack.
• Create documentation and runbooks that allow systems to be maintained by future engineers.
05. Technical Skills & Preferred Skills
Required Skills
• AWS, Amazon EKS, Kubernetes and Docker
• Jenkins, CI/CD, Git and Bitbucket
• Terraform or another Infrastructure-as-Code tool
• Linux administration and troubleshooting
• AWS networking, IAM, security groups, DNS and load balancing
• ALB/NLB, NGINX Ingress and SSL/TLS
• Helm, kubectl and Kubernetes resource management
• Monitoring and logging with CloudWatch, Prometheus, Grafana or similar tools
• Python and/or Bash scripting
• Production incident management and RCA
• Basic understanding of relational/NoSQL databases and messaging systems
Preferred / Good-to-Have Skills
• Advanced Helm chart authoring
• Kustomize
• ArgoCD or Flux
• GitOps implementation
• Production Karpenter experience
• Karpenter NodePools and consolidation
• Spot/on-demand workload optimisation
• Advanced Kyverno policy authoring
• Velero
• EBS/RDS snapshot lifecycle management
• EKS VPC CNI and prefix delegation
• Pod IP capacity planning
• Istio / service mesh
• Advanced NetworkPolicy design
• Kafka/Redpanda administration
• OpenCost/Kubecost
• FinOps practices
• AWS Solutions Architect certification
• AWS DevOps Engineer Professional
• CKA / CKAD / CKS
Experience as the first or only DevOps engineer in an organisation is highly valuable.
06. Leadership Expectations
As a DevOps Lead, you will be expected to provide technical leadership without becoming detached from
implementation.
You will:
• Define DevOps and platform engineering standards.
• Review infrastructure and CI/CD changes.
• Mentor DevOps and engineering team members.
• Establish operational best practices.
• Lead production incident resolution.
• Drive security and reliability initiatives.
• Partner with engineering leadership on architecture and cost decisions.
• Maintain technical documentation and operational runbooks.
• Challenge unsafe, expensive or non-scalable infrastructure decisions with evidence.
• Ensure platform changes are measurable, reversible and properly documented.
07. Additional Responsibilities & Expectations
• Take ownership of production infrastructure and participate in incident response when required.
• Follow an evidence-based approach to troubleshooting using logs, metrics and monitoring data.
• Maintain proper documentation, rollback procedures and operational runbooks.
• Ensure infrastructure changes are reviewed, tested and safely implemented.
• Continuously improve platform reliability, security, automation and cost efficiency.
Requirements
Role Overview
Position: DevOps Lead
Function: DevOps / Cloud Infrastructure / SRE
Experience: 5–8 years
Reporting To: Head of Engineering / CTO
Works With: Backend, Frontend, QA and Engineering teams
Cloud Platform: AWS
About the Role
We are looking for a hands-on DevOps Lead to manage and improve our AWS infrastructure, Kubernetes platform,
CI/CD pipelines, production reliability, security and cloud cost management.
This is a practical engineering role for someone who is comfortable working directly on production systems,
troubleshooting incidents, improving deployment processes and automating operational work.
The ideal candidate should be able to diagnose production issues using logs and metrics, implement reliable solutions,
automate repetitive work and provide technical guidance to other engineers.
The role covers platform reliability, CI/CD, cloud infrastructure, security, monitoring, cost optimisation and automation.
02. Key Responsibilities
• Manage production AWS and Amazon EKS infrastructure and Kubernetes workloads.
• Manage deployments, services, ingress, secrets, resource configuration, node groups and cluster upgrades.
• Troubleshoot pod failures, scheduling issues, resource constraints, networking and DNS problems.
• Maintain Docker-based staging environments and container images.
• Own and improve Jenkins CI/CD pipelines, including Bitbucket and Jira integrations.
• Standardise build, test, containerisation and deployment processes across services.
• Manage ALB/NLB, NGINX Ingress, DNS and SSL/TLS certificates.
• Provision and maintain infrastructure using Terraform or another Infrastructure-as-Code tool.
• Monitor production systems and lead incident response and root-cause analysis.
• Implement AWS and Kubernetes security best practices, including IAM, secrets management and access controls.
• Monitor AWS spending and identify opportunities for infrastructure and workload optimisation.
• Automate operational tasks using Python, Bash or Groovy.
• Maintain documentation, runbooks and DevOps standards.
• Work closely with Backend, Frontend and QA teams to support reliable releases.
• Mentor engineers and provide technical guidance on DevOps practices.
03. Technical Environment
AWS, Amazon EKS, Kubernetes, Docker, Jenkins, Bitbucket, Terraform, Helm, NGINX Ingress, ALB/NLB, IAM, ECR,
RDS, Route 53, ACM, CloudWatch, Prometheus, Grafana, Loki, Jira and Linux.
04. Required Skills
• Own and evolve the production Amazon EKS platform.
• Manage Deployments, StatefulSets, Services, Ingresses, ConfigMaps and Secrets.
• Manage Kubernetes version upgrades, node groups and cluster lifecycle.
• Define and enforce workload resource requests and limits.
• Configure and optimise HPA, PDB, pod anti-affinity and readiness/liveness/startup probes.
• Troubleshoot Pending pods, CrashLoopBackOff, OOMKilled, ImagePullBackOff, scheduling failures, node capacity
issues, pod-density/IP allocation limits, DNS failures and service-to-service connectivity.
• Operate and optimise Cluster Autoscaler.
• Evaluate and adopt Karpenter for workload-aware provisioning and cost optimisation.
• Drive migration toward declarative, version-controlled Kubernetes configuration using Helm and GitOps.
• Maintain Docker-based staging environments and ensure staging/production parity.
• Define image tagging, promotion and container lifecycle standards.
Required Experience
• Own the complete production ingress architecture.
• Manage AWS ALB, AWS NLB, AWS Load Balancer Controller, NGINX Ingress, target groups, listener rules, health
checks, Kubernetes Services and DNS routing.
• Design health checks that accurately represent application availability.
• Tune deregistration delays and rolling deployment behaviour for zero-downtime releases.
• Investigate 4xx/5xx errors and identify the exact infrastructure/application layer responsible.
• Manage internal vs. internet-facing load balancers.
• Control ALB/NLB sprawl and retire unused infrastructure.
• Enable and analyse load-balancer access logs as an operational evidence source.
• 5–8 years of hands-on DevOps, SRE or Cloud Infrastructure experience.
• Strong practical experience with AWS, Kubernetes and Docker.
• Production experience with Amazon EKS.
• Hands-on experience with Jenkins and CI/CD pipelines.
• Experience with Git, Bitbucket and Jira-based release workflows.
• Good knowledge of Terraform or another Infrastructure-as-Code tool.
• Strong understanding of AWS networking, IAM, security groups, DNS and load balancing.
• Experience with ALB/NLB, Kubernetes Ingress and SSL/TLS.
• Good Linux administration and troubleshooting skills.
• Experience with monitoring and logging tools such as CloudWatch, Prometheus, Grafana or similar.
• Good scripting skills in Python and/or Bash.
• Experience handling production incidents and performing RCA.
• Good communication, ownership and problem-solving skills.
• Design and maintain secure AWS infrastructure using Terraform or equivalent IaC.
• Manage VPC/networking, EC2, EBS/EFS, S3, IAM, Lambda, SES, RDS, ECR, KMS, Route 53, ACM and WAF.
• Bring manually created infrastructure under version control.
• Build reusable, reviewable and reproducible infrastructure modules.
• Plan and execute infrastructure and application migrations with rollback strategies.
• Validate infrastructure changes before and after implementation.
Good to Have
• Own DevOps-side release management across MERN, Python and AI/ML applications.
• Manage Jira release lifecycle, sprint coordination and ticket hygiene.
• Enforce end-to-end traceability: Jira → Commit → Build → Image → Deployment → Production.
• Implement pipeline controls such as "No Ticket, No Deploy".
• Coordinate releases with Backend, Frontend, QA and AI/ML teams.
• Automate deployment reports, release notes and engineering activity reports.
• Maintain accurate deployment and change records for auditability.
• Helm and Kubernetes configuration management.
• Cluster Autoscaler or Karpenter.
• ArgoCD or other GitOps tools.
• Kyverno or OPA Gatekeeper.
• Kafka/Redpanda.
• MongoDB, MySQL, PostgreSQL and Redis.
• OpenTelemetry.
• OpenCost/Kubecost and cloud cost optimisation.
• AWS or Kubernetes certifications.
• Own and improve the Jenkins platform.
• Develop and maintain declarative Jenkins pipelines.
• Build and maintain Jenkins Shared Libraries using Groovy.
• Manage Jenkins credentials, configurations and job lifecycle.
• Integrate Jenkins with Bitbucket through webhooks, pull requests, branch events and Bitbucket Pipelines.
• Standardise CI/CD pipelines across repositories.
• Automate build, test, security scanning, image creation and deployment.
• Manage ECR/container image promotion between environments.
• Implement automated rollback strategies.
• Maintain Jenkins configuration and pipeline standards as code wherever possible.
What We Expect
• Act as the primary DevOps escalation point for production incidents.
• Restore services quickly while maintaining disciplined incident procedures.
• Conduct evidence-based Root Cause Analysis.
• Distinguish application, database, network, Kubernetes and infrastructure failures.
• Own production monitoring, alerting and dashboards.
• Identify and eliminate silent failure conditions.
• Troubleshoot performance issues across applications, Kubernetes, databases, Kafka/Redpanda, Redis, load
balancers, TLS and networking.
• Maintain backup and disaster-recovery procedures.
• Regularly test database and infrastructure restoration rather than assuming backups are valid.
• Strong ownership of production infrastructure.
• Ability to troubleshoot using logs, metrics and evidence rather than assumptions.
• Practical understanding of Kubernetes beyond basic kubectl usage.
• Ability to work independently during incidents and high-priority releases.
• Security and cost awareness when making infrastructure decisions.
• Willingness to remain hands-on while providing technical leadership.
• Ability to document solutions and improve operational processes.
• Own the AWS and Kubernetes security posture.
• Implement IAM least privilege, MFA, password policies and access reviews.
• Remove long-lived credentials from workloads.
• Implement IRSA and managed secret references.
• Secure Kubernetes API/control-plane access.
• Harden security groups and network exposure.
• Prevent unnecessary public database and service exposure.
• Manage TLS/SSL security across all public endpoints.
• Manage cert-manager, ACM, certificate renewal, SAN/chain validation, TLS policies, HTTPS enforcement, redirects
and HSTS.
• Implement WAF policies and monitoring.
• Implement Kubernetes security controls including Kyverno, Pod Security Standards, NetworkPolicies, RBAC,
service-account restrictions, KMS encryption and image vulnerability scanning.
• Introduce policy-as-code progressively, starting in audit mode and moving to enforcement.
• Conduct periodic AWS/EKS security reviews and track findings through closure.
• Maintain rollback procedures and before/after verification for security changes.
Success in the Role
• Own monthly AWS infrastructure cost analysis.
• Analyse expenditure by service, workload and environment.
• Identify underutilised or orphaned resources.
• Right-size EC2, EKS nodes, Kubernetes workloads, EBS, RDS, load balancers and IP addresses.
• Evaluate Savings Plans and Reserved Instances.
• Implement storage lifecycle and retention policies.
• Reduce unnecessary data transfer and infrastructure costs.
• Maintain cost visibility using OpenCost/Kubecost or equivalent tooling.
• Build cost dashboar
