We’re hiring: Senior DevOps Engineer (EKS / GitOps / CDK)
📍 Remote
🕒 32h/week | 12-week project
📅 Start: ASAP (flexible)
We’re looking for an autonomous Senior DevOps Engineers to support a high-impact AWS automation and platform initiative. This role is for someone who’s truly hands-on at the intersection of Amazon EKS, AWS CDK (TypeScript), and ArgoCD/GitOps—not just familiar with them on paper.
You’ll be joining a team building and hardening a production-grade Kubernetes platform with strong security, scalability, and observability baked in.
What you’ll do
- Design, build, and operate production-ready EKS clusters using infrastructure as code.
- Define and evolve the full EKS ecosystem via AWS CDK in TypeScript (VPC, IAM, clusters, node provisioning, LBs, etc.).
- Implement and manage GitOps delivery pipelines using ArgoCD, ensuring smooth multi-environment deployments.
- Drive scaling, reliability, security, and monitoring improvements with a pragmatic, production-first mindset.
- Work independently, owning deliverables end-to-end with minimal supervision.
Must-have deep practical experience
Amazon EKS & Kubernetes
- Proven Tier-1 readiness work in EKS, including:
- Multi-AZ deployments
- Control Plane Logging enabled and used effectively
- Karpenter (preferred) or advanced Cluster Autoscaler for efficient scaling
- VPC CNI optimization
- Strong grasp of Kubernetes fundamentals:
- Deployments, Services, Ingress, ConfigMaps, Secrets
AWS CDK (TypeScript)
- Real-world use of L3 constructs/patterns to define the full EKS stack as reusable, type-safe TypeScript code.
- Experience handling CDK diff/drift, safe updates, and avoiding destructive changes in live environments.
ArgoCD & GitOps
- Strong application management via:
- Application and AppProject resources
- Hands-on with advanced sync strategies:
- Auto-Sync, Prune, Self-Heal
- Confident with Helm/Kustomize for environment-specific overrides (Dev/Staging/Prod).
Security & IAM
- Mastery of IRSA (IAM Roles for Service Accounts) with fine-grained permissions.
- Implementing Network Policies (Cilium or Calico) for pod segmentation and zero-trust patterns.
Observability
- Building/operating a monitoring stack such as:
- Prometheus/Grafana and/or CloudWatch Container Insights
- Monitoring both control plane and workloads, with meaningful alerting and thresholds.
What we’re looking for
- Senior-level DevOps / Platform Engineering background.
- Strong ownership mindset: you’re comfortable leading execution independently.
- Production operator mentality: resilient, secure, scalable by default.
- Clear communicator who can collaborate across infra, app, and security stakeholders.
