Responsibilities

• Continuously review the platform for risks, single points of failure, capacity limits, security gaps, operational toil, and unnecessary cost, and turn findings into prioritized actions.
• Run our Kubernetes clusters end to end, including provisioning, upgrades, networking, ingress, storage, RBAC, resource quotas, and autoscaling.
• Operate and scale Kafka, including broker sizing, partitioning, retention, replication, and upgrades.
• Manage Keycloak as our identity backbone: realms, clients, SSO integration and hardening.
• Own our Ansible codebase: keep roles and playbooks clean, idempotent, tested and reusable.
• Design and maintain GitLab CI pipelines and ArgoCD-based GitOps delivery for our Python services.
• Build self-service tooling and paved paths that enable developers to ship and operate services safely with minimal platform dependency.
• Write Python and shell automation to remove repetitive manual work.
• Apply security best practices across the stack, including secrets management, image scanning, network policies, least-privilege access controls, and patching.

What you bring

• 4+ years of experience in DevOps, Platform Engineering, SRE, or infrastructure roles, with hands-on ownership of production systems.
• Deep, hands-on Kubernetes experience in production, ideally on self-managed clusters. 
• Strong Ansible skills, including experience writing and maintaining non-trivial roles and playbooks.
• Experience building CI/CD pipelines with GitLab CI and implementing GitOps delivery with ArgoCD or a similar tool.
• Production experience with Prometheus and Grafana, including writing PromQL queries and designing alerts and dashboards.
• Solid understanding of Kafka operations and identity/SSO concepts (OIDC, SAML), with experience working with Keycloak.
• Good Python skills for automation and tooling, plus Bash, with the ability to read and debug application code when needed.
• Strong understanding of Linux systems, networking, containers, and production troubleshooting.

What We Offer at Invex

• Comprehensive supplementary health insurance, including medical coverage and life insurance
• Monthly allowance for cultural and educational activities
• Monthly meal allowance
• Annual training budget to support your professional growth and continuous learning
• Corporate loan program with preferential terms