Summary
Written in English from the original postingThis role leads a DataOps team responsible for data infrastructure, ClickHouse availability, and automation. It also covers identity management, Kubernetes and Terraform operations, and AI-assisted engineering workflows. The position offers remote or office work and relocation assistance.
Job description
Responsibilities
- Develop and optimize DataOps infrastructure, introduce architectural improvements, and automate infrastructure operations
- Contribute to designing and building a highly available ClickHouse cluster in an on-premises environment
- Improve role-based access control and identity management by integrating LDAP, databases, authentik, and the company's internal IAM system
- Advance Infrastructure as Code and infrastructure automation using Kubernetes, Helm, Terraform, and GitLab Enterprise
- Drive an AI-first approach to engineering workflows by developing AI agents, adopting AI-native IDEs, and improving AI-powered automation tools
- Optimize Jira and Confluence workflows, automate recurring reports, build internal tooling, and improve operational efficiency
- Establish and evolve engineering practices, technical standards, automation, and team workflows
Requirements
- 5+ years of experience in DevOps or related infrastructure engineering roles
- 3+ years of experience leading an engineering team of at least 5 people
- Hands-on experience building automation and internal tooling, preferably with Python or Go
- Experience with VPN solutions such as Pritunl, OpenVPN, WireGuard, Fortinet, or similar technologies
- Strong production troubleshooting skills and experience with low-level Unix/Linux system tuning, primarily in cloud environments
- Solid understanding of cybersecurity and application security principles, including experience with tools such as Wazuh, auditd, and Falco
- Hands-on experience with Karpenter
- Experience optimizing AWS infrastructure costs using Kubecost, Infracost, AWS tagging, and related tools
- Experience with ingress controllers, TLS termination, load balancing, and certificate management using Traefik, Istio, Nginx, or similar technologies
- Experience with identity and access management solutions such as authentik, Keycloak, or Okta
Benefits
- The opportunity to work on large-scale products and contribute to their development
- A flexible work environment built on autonomy, ownership, and trust, without micromanagement
- The option to work fully remotely or from a modern office
- Medical insurance coverage in countries where the company operates
- An annual $2,000 benefits allowance after the probation period, which can be used for health insurance upgrades, language learning, and sports activities
- Partial reimbursement for professional training, courses, and participation in industry conferences
- Access to a corporate digital library
- Company-funded weekly online sessions with a psychologist
- Relocation opportunities to countries where the company has offices, with relocation assistance available after the probation period, subject to approval

