• Containers & Orchestration: Docker (hardened builds); Kubernetes/AKS (RBAC, HPA/KEDA, PDB); Helm (chart authoring, library charts)
• IaC: Terraform (Azure — AKS, PostgreSQL, Service Bus, Key Vault, APIM); Atlantis/Terraform Cloud
• CI/CD & GitOps: Jenkins, GitLab CI, GitHub Actions; ArgoCD/Flux; Trivy, Checkov, OWASP dep-check
• Cloud: Azure — AKS, Service Bus, Elasticsearch Service, Data Factory/Synapse, Monitor, Log Analytics
• Observability: Prometheus + Grafana; OpenTelemetry; ELK/OpenSearch; PagerDuty/Opsgenie
• Messaging: Kafka (MSK/Confluent/Event Hubs) — topic mgmt, schema registry, consumer-lag monitoring; RabbitMQ ops
• Security: Azure Key Vault / HashiCorp Vault; mTLS; Trivy/Snyk; CIS K8s benchmarks; FCA/PCI-DSS
• Scripting: Python, Bash, Groovy for pipelines, runbooks, and automated incident response
• Exposure to Jenkins.
Key Responsibilities
• Own and evolve CI/CD pipelines; implement blue/green, canary, and feature-flag progressive delivery.
• Manage AKS clusters: node pool sizing, upgrade, namespace isolation, network policies, cost optimization.
• Author and maintain Terraform modules for all Azure infrastructure; enforce IaC review and state lock.
• Maintain Helm chart library; govern chart versioning aligned with squad delivery cadence.
• Design and operate observability stack: Prometheus scrapers, per-squad Grafana dashboards, distributed tracing.
• Manage Kafka clusters and Azure Service Bus queues for invoice event flows.
• Drive security automation in pipelines: SAST, container scanning, secrets detection.
• Maintain Elasticsearch cluster health; tune ILM policies for 52M+ invoice documents.
• Participate in on-call rotation; lead post-incident reviews; maintain platform runbooks.
Requirements
• 5+ yrs DevOps / Platform Engineering / SRE on high-volume fintech or financial services platform.
• Expert Kubernetes (CKA or equivalent) and Helm.
• Strong Terraform — multi-module IaC for Azure or AWS.
• Production Kafka operations and Elasticsearch cluster management.
• CI/CD pipeline design (Jenkins / GitLab CI / GitHub Actions) and GitOps (ArgoCD or Flux).
• Python (preferred) for operational automation.
• Azure certs (AZ-104, AZ-400, CKA) advantageous; FCA/PCI-DSS cloud security understanding essential.
• Good to have: Exposure to GitLabs, GitHub and Github Actions
Key Responsibilities
• Own and evolve CI/CD pipelines; implement blue/green, canary, and feature-flag progressive delivery.
• Manage AKS clusters: node pool sizing, upgrade, namespace isolation, network policies, cost optimization.
• Author and maintain Terraform modules for all Azure infrastructure; enforce IaC review and state lock.
• Maintain Helm chart library; govern chart versioning aligned with squad delivery cadence.
• Design and operate observability stack: Prometheus scrapers, per-squad Grafana dashboards, distributed tracing.
• Manage Kafka clusters and Azure Service Bus queues for invoice event flows.
• Drive security automation in pipelines: SAST, container scanning, secrets detection.
• Maintain Elasticsearch cluster health; tune ILM policies for 52M+ invoice documents.
• Participate in on-call rotation; lead post-incident reviews; maintain platform runbooks.
Requirements
• 5+ yrs DevOps / Platform Engineering / SRE on high-volume fintech or financial services platform.
• Expert Kubernetes (CKA or equivalent) and Helm.
• Strong Terraform — multi-module IaC for Azure or AWS.
• Production Kafka operations and Elasticsearch cluster management.
• CI/CD pipeline design (Jenkins / GitLab CI / GitHub Actions) and GitOps (ArgoCD or Flux).
• Python (preferred) for operational automation.
• Azure certs (AZ-104, AZ-400, CKA) advantageous; FCA/PCI-DSS cloud security understanding essential.
• Good to have: Exposure to GitLabs, GitHub and Github Actions