Senior DevOps (part-time)

Strimco is a Ukrainian GovTech company developing digital solutions for the state. They are looking for a DevOps Engineer for part-time work on a system supporting defense procurement. The role involves ensuring system stability, automating deployments, and developing infrastructure.

• Maintain and improve CI/CD: building, testing, delivery and deployment of system components.
• Maintain DEV and STAGE environments, control their configurations and reproducibility.
• Prepare and accompany releases together with developers and QA, ensure rollback capability.
• Accept and deploy releases from external vendors: analyze changes, verify configuration variables and policies, coordinate changes with the vendor.
• Set up monitoring, centralized logging and alerting; identify causes of failures and performance issues.
• Automate infrastructure operations and reduce manual actions during deployment.
• Set up backup of components and data within the team's responsibility, verify recovery procedures.
• Together with the cybersecurity specialist, implement requirements for access, secrets management, configuration protection and vulnerability remediation.
• Interact with the customer's infrastructure administrators regarding access, network interaction, deployments and incidents.
• Keep deployment diagrams, operation and recovery instructions up to date.

• At least 3 years of experience in DevOps or a related role and practical experience supporting production systems.
• Confident Linux administration and diagnosis of problems with services, resources and network interaction.
• Practical experience with Infrastructure as Code using Terraform and Terragrunt.
• Experience with AWS: EC2, NLB, Route 53, RDS, ECR, SSM, Client VPN, Managed AD.
• Experience building and maintaining CI/CD in GitHub Actions (including self-hosted runners) and GitOps approach with Argo CD.
• Practical experience with containerization using Docker and Docker Compose (overlays, secrets, preflight checks).
• Automation skills with Bash and Python, experience with configuration management tools such as Ansible.
• Experience setting up monitoring, logging, tracing and alerting with VictoriaMetrics, VictoriaLogs, VictoriaTraces and Grafana, collecting data via Vector and OpenTelemetry Collector or equivalents.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, reverse proxy and load balancing.
• Experience building PKI and mTLS: own certificate authorities, mutual authentication between services, certificate rotation.
• Experience managing secrets with HashiCorp Vault, AWS SSM and Secrets Manager, External Secrets.
• Experience with backup and recovery and access segregation.
• Ability to prepare clear technical documentation.
• Independence in work planning and responsibility for results.
• Ability to prioritize based on system stability and release needs.
• Ability to proactively communicate risks, constraints and dependencies.
• Willingness to coordinate changes with developers, QA, security specialists and customer administrators.
• Experience interacting with external software vendors: coordinating releases, changes and requirements.
• Attention to rules for working with protected environments and information.
• Experience working with environments with limited external access.
• Practical experience with Kubernetes and Helm.
• Experience with Microsoft Azure.
• Experience automating application build and deployment.
• Experience with MS SQL Server (including Amazon RDS) and ensuring service fault tolerance.
• Knowledge of KEP, DSTU 4145 and experience with IIT libraries.
• Experience with Active Directory, Kerberos, AD FS / OIDC, basic Windows Server administration skills.
• Participation in state or defense IT projects.

• Impact on socially important products — we improve the country in real time.
• Remote format.
• Flexible schedule, work on results.
• Corporate library.
• Stable team that has already implemented dozens of state services.
• Professional growth: internal trainings and experience exchange in the team.