Job Description
WHAT YOU'LL DO
Own day-to-day reliability of Kubernetes clusters (GKE / EKS): node pools (Spot/standard), autoscaling, taints/labels, and workload placement.
Maintain and extend Terraform modules for VPC, clusters, IAM, and add-ons across Google Cloud Platform and AWS; land all infra changes through Git and PRs.
Design and operate cross-cloud networking and connectivity (VPC, peering, VPN/Interconnect, DNS, private service access).
Operate and improve Airflow-on-Kubernetes (executor configs, resource requests, pod scheduling, and failure recovery).
Build and harden CI/CD (GitHub Actions) for infra and app deployments - gated promotes, environment isolation, rollback paths.
Design observability: metrics, logs, traces, SLOs/SLIs, and actionable alerting across clouds (not alert noise).
Write runbooks for common failure modes; lead or support incident response and postmortems.
Harden security posture for SOC 2: least-privilege IAM, secret management, audit logging, change control.
Partner with data and platform engineers on capacity, cost, and performance trade-offs.
Participate in design discussions, surface trade-offs, and propose improvements as you encounter them in the stack.
REQUIRED QUALIFICATIONS
4–5 years in DevOps, SRE, or platform engineering.
Strong hands-on Kubernetes experience in production (GKE and/or EKS) - scheduling, resources, networking, troubleshooting.
Multi-cloud experience - production work on both Google Cloud Platform and AWS (or deep in one with solid working knowledge of the other).
Solid Terraform experience - modules, state, reviews, and safe apply workflows you have used in production.
Working knowledge of CI/CD (GitHub Actions, Cloud Build, CodePipeline, or similar) for infra and containerized apps.
Comfortable with Linux, containers, and debugging production issues from logs/metrics.
Cloud fundamentals across providers: IAM, VPC/networking, managed Kubernetes, secrets, monitoring/logging.
Clear written communication - runbooks, PR descriptions, incident notes.
PREFERRED QUALIFICATIONS
Airflow on Kubernetes / GKE operations.
Helm / Kustomize for app and platform packaging.
Prometheus, Grafana, Cloud Monitoring, and/or CloudWatch at scale.
Experience with Spot/preemptible node pools and cost-aware capacity planning across clouds.
Prior work in SOC 2 or similarly controlled environments.
Exposure to data platforms (BigQuery, dbt, ingestion pipelines) as a platform consumer.