Senior DevOps Platform Engineer
آفرینش رویای همبازی
- حداقل سابقه کار
- مهم نیست
- موقعیت مکانی
- تهران
- نوع همکاری
- تمام وقت
- خدمت سربازی
- مهم نیست
Department: Infrastructure & Platform Engineering
Location: Tehran, Iran | Primarily On-site, occasional WFH
Type: Full-time
Location: Tehran, Iran | Primarily On-site, occasional WFH
Type: Full-time
About the Role
We are hiring a Senior DevOps / Platform Engineer to manage infrastructure across our portfolio of streaming and live platforms, gaming, blockchain, fintech, AI/ML data services, and other products.
You will own AWS infrastructure, Kubernetes, CI/CD, automation, security, and observability across development, staging, and production.
Responsibilities
Infrastructure & Kubernetes
- Operate Amazon EKS clusters across separate development and production AWS accounts.
- Manage Kubernetes workloads, Helm, networking, storage, capacity, and autoscaling.
- Support GPU workloads for AI inference where required.
- Ensure high availability, backups, disaster recovery, and production reliability.
Infrastructure as Code
- Own Terraform for AWS networking, EKS, data services, storage, CDN, DNS, and TLS.
- Maintain reusable modules, manage state, and resolve configuration drift.
- Automate server configuration with Ansible.
CI/CD & GitOps
- Maintain reusable GitHub Actions workflows for testing, building, and scanning container images.
- Manage GitOps deployments using Argo CD and Helm.
- Implement safe releases, environment promotion, health checks, and rollbacks.
- Standardize deployment workflows across services and projects.
Databases & Messaging
- Operate PostgreSQL, Redis, NATS JetStream, and AWS SQS.
- Manage backups, recovery, upgrades, performance, and capacity planning.
- Monitor database health, Redis memory, and NATS streams and consumers.
- Troubleshoot asynchronous processing and messaging failures.
Security
- Manage AWS IAM, IRSA, Kubernetes service accounts, and least-privilege access.
- Manage secrets using External Secrets, AWS SSM, and Secrets Manager.
- Secure containers and Kubernetes workloads through updates and vulnerability scanning.
- Manage networking, VPCs, security groups, DNS, TLS, and Cloudflare.
- Maintain appropriate security and isolation across projects and environments.
Observability & Cost
- Operate Prometheus and Grafana dashboards, metrics, and alerts.
- Improve logging, tracing, incident response, and root-cause analysis.
- Monitor AWS spending and optimize infrastructure resource usage.
Requirements
- 5+ years in DevOps, SRE, platform engineering, or cloud infrastructure.
- Strong AWS experience: EKS, EC2, VPC, IAM, S3, load balancers, and CloudFront.
- Production Kubernetes experience, including Helm and troubleshooting.
- Strong Terraform experience and infrastructure state management.
- CI/CD experience, preferably GitHub Actions, and GitOps with Argo CD or Flux.
- Linux administration and Bash and/or Python scripting.
- Good knowledge of networking, DNS, TLS, firewalls, and load balancing.
- Experience with production databases, messaging, monitoring, and alerting.
- Understanding of security, secrets management, backups, and disaster recovery.
- Strong ownership, cost awareness, communication, and problem-solving skills.
- Able to work regularly from our Tehran office, with occasional WFH by agreement.
Nice to Have
- GPU workloads, Kubernetes-based ML inference, or compute-intensive applications.
- PostgreSQL, Redis, and NATS JetStream operations.
- Ansible, Karpenter, or EKS Auto Mode.
- OpenTelemetry, distributed tracing, and centralized logging.
- Keycloak, OAuth2/OIDC, or workload identity.
- Experience with blockchain, fintech, gaming, or real-time platforms.
- Go knowledge for debugging services.
- AWS certifications or Kubernetes CKA.
Tech Stack
AWS, EKS, Kubernetes, Terraform, Ansible, GitHub Actions, Argo CD, Helm, PostgreSQL, Redis, NATS JetStream, AWS SQS, S3, CloudFront, Cloudflare, IAM, IRSA, External Secrets, AWS SSM, Secrets Manager, Prometheus, Grafana, Sentry, Docker, Linux, Bash.
What We Offer
Ownership of shared infrastructure, modern cloud technologies, diverse technical challenges, collaboration across multiple product teams, and competitive compensation.
Work Model: Tehran office, primarily on-site, with occasional work-from-home flexibility.
درباره شرکت
شرکت سهامی خاص آفرینش رویای همبازی از سال ۱۳۹۸ فعالیت خود را در حوزه‌های متنوعی از جمله پلتفرم‌های گیم، انیمیشن و مدیریت دارایی‌های رسانه‌ای و استریمینگ آغاز کرده است.
شرکت سهامی خاص آفرینش رویای همبازی از سال ۱۳۹۸ فعالیت خود را در حوزه‌های متنوعی از جمله پلتفرم‌های گیم، انیمیشن و مدیریت دارایی‌های رسانه‌ای و استریمینگ آغاز کرده است.
