Senior DevOps Engineer

Минск

Метро: Купаловская

Описание вакансии

We are looking for a Senior DevOps Engineer to join our infrastructure team and become a strong partner for our engineering and product teams.

This is not a role for someone who wants to only maintain what already exists. We are looking for a hands-on engineer who takes ownership of the infrastructure, drives automation, and helps development teams ship faster and safer.
You will work across multiple web and backend products — payment funnels, subscriptions, AI-powered tools, and internal services — and directly influence the stability, reliability, and delivery speed of everything we build.
You will join a compact, fast-moving team where your decisions matter and your work is visible from day one.

Responsibilities:

Own and develop Kubernetes/Docker-based deployment approaches for production and staging environments.
Maintain and evolve Infrastructure as Code using Terraform and Ansible.
Build and improve CI/CD pipelines, automate deployments, rollback procedures, and release flows.
Drive observability: monitoring, logging, alerting, and production issue diagnostics.
Participate in architectural decisions for new service infrastructure.
Improve stability, security, and predictability of environments.
Document infrastructure decisions and transfer knowledge to development teams.

What we look for:

4+ years of experience in a DevOps / Platform / Infrastructure role, ideally in a product company.
Production experience with Kubernetes — this is a must, helm+helmfile heavy user.
Strong hands-on experience with Docker and containerized applications.
Terraform: creating, maintaining, and evolving infrastructure as code.
Ansible: configuration management and operational automation.
Cloudflare: WAF, rate limiting, DDoS mitigation — practical experience required.
DigitalOcean: our primary cloud provider, AWS.
CI/CD: Bitbucket Pipelines, GitHub Actions, GitLab CI, or similar.
Linux, networking, DNS, TLS, VPN (Wireguard), cillium network policies, reverse proxies (traefik), and cloud/network troubleshooting.
Monitoring and logging: Prometheus, Grafana, or similar.
Scripting in Bash, Python, or Go.
Security basics: secrets management (we use 1Password stack), access control, least privilege, basic hardening.

Nice to have:

Go, PHP, or JavaScript/Node.js at the level of understanding applications and helping with automation/scripts.
ArgoCD / GitOps experience.
Experience building AI-agent automation tooling (Claude Code, OpenCode, Codex, skills) and an understanding of the security implications of AI agents (credential scoping, least-privilege access, prompt-injection awareness).
Experience with RoadRunner / PHP production applications.
RabbitMQ / Redis / PostgreSQL / MySQL operational experience.
VictoriaMetrics stack (+VictoriaLogs).
Cloudflare: WAF, rate limiting, DDoS mitigation.
SRE practices: SLOs/SLAs, incident management, post-mortems.
Experience with Temporal or workflow-based backend systems.
Cost optimization in cloud infrastructure.
Experience in product companies with a fast release cycle.

We offer:

A real opportunity to shape infrastructure direction, not just maintain someone else's decisions.
Fast decision-making with minimal bureaucracy.
Access to all available AI tools.
A supportive atmosphere — we’re all for creativity and providing opportunities for self-fulfillment.
Working on inspiring products in a team of supportive professionals.
A competitive salary package based on your unique expertise, skillset, and impact on the product.
Reimbursement of professional courses and trainings.In-office, and hybrid/remote work opportunities.
Flexible working hours.
Professional equipment and access to the necessary programs.
Paid vacations, sick days, and other benefits.
Medical insurance.
Free lunches in the office.
A variety of corporate events and team-building activities.