Qentelli - DevOps/Software Engineer II - Platform Infrastructure

Reports to : Engineering Manager, Platform Infrastructure

Level : Software Engineer / DevOps Engineer (SWE-II)

Experience : 4 years of relevant industry experience

Employment : Full-time - Permanent

Location : Hyderabad

Required Skills & Experience :

- Terraform / Terragrunt : Advanced - Own the full IaC codebase for all cloud resources across AWS and GCP; enforce zero-drift policy with CI-integrated plan runs and Checkov security scanning.

- Kubernetes (EKS / GKE 1.28+) : Advanced - Manage production clusters end-to-end : node groups, GPU node pools, Cluster Autoscaler, Karpenter, HPA/VPA, PodDisruptionBudgets, RBAC, and network policies.

- AWS (core services) : Advanced - Primary cloud : EKS, MSK, RDS PostgreSQL, ElastiCache Redis, EC2 GPU (g5.xlarge), S3, IAM (IRSA), VPC, CloudTrail, GuardDuty, Cost Explorer.

- Helm : Advanced - Author, version, and maintain Helm charts for all 6 platform service layers; manage values files per environment; chart linting and testing in CI.

- ArgoCD & GitOps : Advanced - App-of-Apps pattern, ApplicationSets, RBAC policies, auto-sync staging, manual production gates, Flagger integration for canary deployments.

- GitHub Actions / GitLab CI : Advanced - Design multi-stage pipelines : build, test, SAST, Trivy scan, staging deploy, production promote with approval gate; reusable workflow/include templates.

- Docker & container engineering : Advanced - Multi-stage Dockerfiles, image signing with Cosign, ECR lifecycle policies, Trivy vulnerability gate, Falco runtime security.

- Istio service mesh : Proficient - Install via Helm, enforce STRICT mTLS, configure PeerAuthentication and DestinationRule, set up Prometheus and Tempo integrations, Flagger traffic splitting for canary.

- HashiCorp Vault : Proficient - HA cluster on K8s, KV v2, database and PKI secret engines, AppRole and Kubernetes auth, Vault Agent Injector, lease TTL enforcement.

- Python / Bash scripting : Advanced - Automation scripts for operational tasks, pipeline glue code, Vault lease renewal utilities, cost analysis scripts, and IaC testing helpers.

- Linux systems administration : Advanced - Diagnose cluster and node-level issues : kernel parameters, network interfaces, cgroup limits, disk I/O; configure OS-level settings for high-throughput data workloads.

- Kong Gateway : Proficient - Declarative configuration (deck), JWT and rate-limiting plugins, Prometheus plugin, WAF rules, certificate management for external TLS termination.

Background & Education :

- 4 years of professional experience in DevOps, cloud infrastructure, or platform engineering.

- Demonstrable experience provisioning and operating a cloud environment from scratch.

- Production Kubernetes experience : debugging, scheduling, and resource tuning.

- Experience designing CI/CD pipelines end-to-end with security gates.

- Experience with secrets management in production (Vault, AWS Secrets Manager).

- Familiarity with service mesh concepts.

- Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience.

Personal attributes :

- Infrastructure-as-code fundamentalism.

- Security by default.

- Documentation as a deliverable.

- Curiosity about AI workloads.

- Collaborative ownership.