DevOps Engineer

Cyderes provides identity and access management, exposure management, risk programs, and managed detection and response security services. The DevOps Engineer will build, operate, and improve cloud infrastructure, Kubernetes platforms, and delivery pipelines supporting those services, with a focus on reliability, security, automation, and efficient delivery.

Responsibilities:

• Operate, maintain and improve production Kubernetes clusters across multiple cloud providers, including upgrades, capacity planning and troubleshooting
• Build and maintain Helm charts and deployment workflows
• Design, build and improve CI/CD pipelines in partnership with development teams
• Manage releases across development, staging and production environments, including versioning, promotion and rollback
• Provision and manage cloud infrastructure as code using Terraform
• Monitor platform health and improve metrics, logging, dashboards and alerting
• Own the path a request takes into the platform: DNS, certificates, load balancers, gateways and routing
• Treat security as part of the plumbing - secrets, vault and cloud stores, workload identity, single sign-on and least-privilege access
• Find and fix vulnerabilities in our images, dependencies and infrastructure, alongside the security team
• Troubleshoot infrastructure and deployment issues, and participate in the on-call rotation and occasional after-hours maintenance
• Document systems, procedures and runbooks, and share knowledge with peers

Requirements:

• 4+ years of experience in DevOps, SRE, platform or infrastructure engineering, supporting production systems
• Solid understanding of the software development lifecycle and modern release practices — multi-environment setups, versioning, branching strategies, blue/green or canary deployments
• Strong fundamentals in Linux, networking (DNS, TLS, HTTP, routing, load balancing) and system/service architecture
• Hands-on experience operating Kubernetes in production, and a solid understanding of containers (Docker) as well as managed services
• Experience authoring and maintaining Helm charts
• GitOps experience — ArgoCD, Flux or similar
• Experience building and maintaining CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI or similar)
• Infrastructure as code experience with Terraform or an equivalent
• Solid understanding of cloud compute, networking, IAM and storage in at least one major providers
• Exposure to observability stacks - metrics, logs and alerting
• Hands-on secrets management with Vault or a cloud secret store
• Scripting ability in Bash and Python or Go
• Experience working in an Agile/Scrum team, with clear communication and a collaborative approach
• Experience across more than one cloud provider (AWS, GCP, Azure)
• Kubernetes Gateway API, Argo Workflows or KEDA
• Vulnerability scanning and remediation tools such as Snyk, Trivy or similar
• Experience with managed observability platforms such as Datadog, Dynatrace or New Relic
• Experience in a security services, MSSP or MDR environment
• Knowledge of log and telemetry data collection and shipping will give you an edge
• Certifications such as CKA, CKAD, CKS, AWS or HashiCorp - a plus, not required