Senior DevOps (part-time)

Strimco is a Ukrainian GovTech company developing digital solutions for the state. They are looking for a DevOps Engineer on a part-time basis to work on a system supporting defense procurement. The role involves maintaining CI/CD, infrastructure automation, monitoring, and collaboration with security teams.

• Maintain and improve CI/CD: building, testing, delivery and deployment of system components.
• Support DEV and STAGE environments, control their configurations and reproducibility.
• Prepare and accompany releases together with developers and QA, ensure rollback capability.
• Accept and deploy releases from external vendors: analyze changes, verify configuration variables and policies, coordinate changes with the vendor.
• Configure monitoring, centralized logging and alerting; identify causes of failures and performance issues.
• Automate infrastructure operations and reduce manual actions during deployment.
• Configure backup of components and data within team responsibility, verify recovery procedures.
• Implement access requirements, secrets management, configuration protection and vulnerability remediation together with the cybersecurity specialist.
• Interact with the Customer's infrastructure administrators regarding access, network interaction, deployments and incidents.
• Keep deployment diagrams, operational instructions and recovery procedures up to date.

• At least 3 years of experience in DevOps or a similar role and practical experience supporting production systems.
• Strong Linux administration and diagnostics of services, resources, and network issues.
• Practical experience with Infrastructure as Code using Terraform and Terragrunt.
• Experience with AWS: EC2, NLB, Route 53, RDS, ECR, SSM, Client VPN, Managed AD.
• Experience building and maintaining CI/CD in GitHub Actions (including self-hosted runners) and GitOps approach with Argo CD.
• Practical experience with containerization using Docker and Docker Compose (overlays, secrets, preflight checks).
• Automation skills with Bash and Python, experience with configuration management tools such as Ansible.
• Experience setting up monitoring, logging, tracing and alerting with VictoriaMetrics, VictoriaLogs, VictoriaTraces and Grafana, data collection via Vector and OpenTelemetry Collector or similar.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, reverse proxy and load balancing.
• Experience building PKI and mTLS: own certificate authorities, mutual authentication between services, certificate rotation.
• Experience managing secrets with HashiCorp Vault, AWS SSM and Secrets Manager, External Secrets.
• Experience with backup, recovery and access separation.
• Ability to prepare clear technical documentation.
• Self-sufficiency in work planning and responsibility for results.
• Ability to prioritize based on system stability and release needs.
• Ability to proactively communicate risks, constraints and dependencies.
• Readiness to coordinate changes with developers, QA, security experts and Customer administrators.
• Experience interacting with external software vendors: coordinating releases, changes and requirements.
• Attention to rules of working with protected environments and information.

• Impact on socially important products - we improve the country in real time.
• Remote format.
• Flexible schedule, work for results.
• Corporate library.
• Stable team that has already implemented dozens of state services.
• Professional growth: internal trainings and experience exchange within the team.