Senior DevOps Engineer – Cloud‑Agnostic Platform

About the role

First Tech is seeking a Senior DevOps Engineer to own and evolve the compute platform that runs the company’s services across multiple cloud providers. The role is responsible for designing, operating, and securing a cloud‑agnostic Kubernetes environment while guiding product teams to consume platform capabilities as self‑service.

Key responsibilities

• Design, provision, upgrade and manage k3s Kubernetes clusters on AWS, Azure, GCP and Alibaba Cloud.
• Implement and maintain cluster networking including CNI, ingress, DNS, service‑to‑service connectivity and network policies.
• Configure persistent storage using CSI drivers and manage stateful workloads.
• Define and operate secrets management with HashiCorp Vault, including policy design, rotation and integration.
• Ensure secure database connectivity: network paths, TLS, centrally issued credentials, rotation and connection pooling.
• Provide on‑demand database and cache instances for non‑production and ephemeral environments.
• Maintain base images, enforce node hardening and runtime security posture.
• Lead migration of existing Docker Swarm and IIS‑hosted workloads to the standardized platform without service disruption.

Required profile

• Senior‑level individual contributor with proven ownership of platform engineering initiatives.
• Strong influence on engineering standards and ability to work collaboratively with product owners.
• Comfortable directing AI‑agentic tooling while retaining full accountability for outcomes.

Required skills

• Kubernetes (k3s) cluster lifecycle management.
• Public cloud platforms: AWS, Azure, Google Cloud Platform, Alibaba Cloud.
• Container networking (CNI), ingress controllers, DNS, network policies.
• CSI drivers and persistent storage solutions.
• HashiCorp Vault for secrets management.
• Database connectivity concepts: TLS, credential rotation, connection pooling.
• Docker Swarm and IIS hosting environments.
• Base image creation, node hardening, runtime security.