Описание
The client is Azerbaijan's largest mobile network operator. Its main products include fixed and mobile telephony, internet services, wireless broadband, and value-added services. The project aims to accelerate the client's Data & AI initiatives through a secure hybrid cloud foundation on AWS while modernizing its IT estate. It includes cloud foundation and landing zone deployment, security, compliance and governance, and the implementation of a customer care chatbot and voicebot.
Задачи
•Design, provision, and maintain production-grade Amazon EKS clusters across AWS and on-premises environments using EKS Hybrid Nodes and Cilium VXLAN CNI overlay networking
•Implement dynamic node autoscaling and OS lifecycle management using Karpenter and immutable Bottlerocket node images
•Configure and manage EMR-on-EKS runtimes for distributed Big Data and PySpark batch and streaming workloads
•Provision, optimize, and manage GPU node pools for Azerbaijani SLM/LLM training and fine-tuning, and low-latency speech inference for ASR/TTS voicebot pipelines
•Implement automated GitOps continuous deployment workflows with Argo CD and Helm for Kubernetes platform components and application workloads
•Enforce cluster security, governance, and compliance using Kubernetes admission controllers, OPA/Kyverno policy engines, and fine-grained Workload Identity
•Build and maintain Terraform and AWS CDK infrastructure-as-code templates integrated into GitLab CI/CD pipelines
•Implement container microsegmentation, network security policies, and split-horizon DNS across hybrid VPCs and on-premises environments
•Integrate platform logs, metrics, and traces with Amazon CloudWatch and on-premises Splunk/SOC SIEM ingestion pipelines
•Write technical documentation, cluster runbooks, disaster recovery procedures, and platform upgrade playbooks
Требования
•4+ years of hands-on experience in Platform Engineering, DevOps, or Site Reliability Engineering, focused on enterprise Kubernetes/Amazon EKS
•Deep expertise in Amazon EKS, including EKS Hybrid Nodes, Cilium CNI (VXLAN), and hybrid networking topologies
•Strong experience with Karpenter and Bottlerocket
•Practical experience setting up and operating EMR-on-EKS for distributed data processing and Spark runtimes
•Hands-on experience orchestrating GPU node pools for AI/ML workloads, LLM/SLM serving, and real-time speech/voicebot inference
•Proficiency with GitOps release methodologies using Argo CD, Helm, and automated CI/CD pipelines with GitLab CI
•Strong knowledge of Kubernetes security, admission control with OPA/Kyverno, RBAC, secrets management with HashiCorp Vault/CyberArk, and pod security standards
•Strong proficiency in Terraform or AWS CDK
•Strong critical-thinking, problem-solving, and analytical skills
•Excellent communication and collaboration skills for working with cross-functional teams
•Results-oriented, proactive mindset and ownership of deliverables within an Agile/Scrum framework
•Upper-Intermediate+ English, written and spoken
Nice to have: Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS), AWS Certified Solutions Architect – Professional, AWS Certified DevOps Engineer – Professional, telecom infrastructure experience, low-latency real-time voice/chat processing experience, hybrid cloud data sovereignty architecture experience, familiarity with AWS Landing Zone Accelerator (LZA), AWS Transit Gateway, and AWS Lake Formation.
Условия
•A competitive salary and good compensation package
•Personalized career growth
•Professional development tools, including a mentorship program, tech talks, trainings, and centers of excellence
•Active tech communities with regular knowledge sharing
•Education reimbursement
•Anniversary presents
•Corporate events and team buildings
•Other location-specific benefits
•Not applicable for freelancers
