Job Description

DevOps Engineer — EMEIA Infrastructure
KEY RESPONSIBILITIES
Platform Migration & Environment Design Lead the design and build-out of a new managed container environment to replace existing VM-based infrastructure — the most likely candidate is Kube (Client’s internal Kubernetes/EKS cluster), but the final decision will be made collaboratively as a team
Contribute meaningfully to the environment selection decision: weigh trade-offs between managed solutions (Kube) and more directly controlled alternatives (AWS@Client), considering maintenance overhead, operational control, and team capability
Own the migration of existing VM-based workloads onto the new platform, managing sequencing, risk, and continuity of service throughout
Establish and maintain the standard workflow for deploying solutions: build locally → containerise → publish to Kube → configure connectivity to Client internal system dependencies

Client Internal Networking & Connectivity

Configure and maintain networking between Kube and Client internal systems, including Shield, Snowflake, Client connect, Floodgate, and any other platform dependencies the team relies on
Own namespace and compute provisioning on the shared Kube cluster, ensuring workloads are appropriately isolated and correctly configured
Manage credentials, service accounts, and access controls across the full connectivity chain — from container to downstream service
Act as the go-to expert on how things connect within Client’s internal network topology

Infrastructure Management

Own and manage cloud infrastructure across EMEIA using internal cloud tooling (cloud.Client.com and connected systems including Shield)
Manage certificates, firewalls, resource pools, networking, and access controls
Ensure infrastructure is appropriately sized, resilient, and cost-efficient
Maintain accurate documentation of infrastructure topology and configuration

VM Provisioning & Automation (Existing Estate)

Maintain and operate existing virtual machines, primarily on RHEL, while migration to the new environment is in progress
Build and maintain standardised, repeatable provisioning processes (e.g. via Ansible, Terraform, or equivalent IaC tooling)
Manage package deployment, software repositories, databases, and web servers
Own the patching and update lifecycle for managed systems

͏

SKILLS & EXPERIENCE
Essential

Proven experience in a DevOps, infrastructure, or platform engineering role
Hands-on experience with Kubernetes — deploying, configuring, and operating workloads in a shared or managed cluster environment
Experience containerising applications: writing Dockerfiles, managing images, publishing to a registry, and debugging container-level issues
Strong networking fundamentals: DNS, TLS/SSL certificates, firewall rules, load balancing, VPNs, and service-to-service connectivity
Comfort operating in environments where the architecture is still being defined — able to contribute to the decision, then execute once direction is set
Hands-on experience with RHEL (or equivalent enterprise Linux) — provisioning, hardening, package management (yum/dnf), systemd services
Experience managing cloud infrastructure, ideally in an enterprise private/hybrid cloud environment
Experience with infrastructure-as-code or configuration management tooling (e.g. Terraform, Ansible, Puppet, or similar)
Solid scripting ability in Bash and at least one higher-level language (Python preferred)
Experience with monitoring and observability tooling (e.g. Prometheus, Grafana, Datadog, or similar)
Strong incident diagnosis skills — able to work from vague symptoms to root cause using logs, metrics, and reasoning
Comfortable working with AI-generated or AI-assisted codebases: reading, extending, and debugging solutions without a full traditional authorship history
Clear written and verbal communication — able to translate infrastructure complexity for non-technical stakeholders

Desirable

Experience with AWS or AWS@Client, particularly EKS
Familiarity with Client’s  internal platform tooling: Kube, Shield, Client connect, Floodgate, or similar
Experience integrating with Snowflake, including managing drivers, credentials, and network access
Experience with CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, or similar)
Exposure to security tooling, vulnerability scanning, or compliance frameworks (e.g. CIS Benchmarks)
Familiarity with secrets management tooling (Vault, CyberArk, or similar)
Experience working in a regulated or enterprise environment with change management processes