Role Description We are launching our entire platform from scratch — fully cloud-native, automated, and built on top of DevOps and Infrastructure-as-Code principles. We are a small and fast-growing engineering team, and we are looking for a Senior DevOps Engineer who will own the whole cloud infrastructure and shape the technical direction of the platform. What you will build: - Build our entire AWS cloud infrastructure from scratch following automation-first, HA, and security-by-design principles; - Design and operate Kubernetes environments; create and maintain custom Helm charts; - Implement Infrastructure-as-Code using modular Terraform structures; - Design and maintain CI/CD pipelines and GitOps delivery workflows; - Build secure networking architecture: VPC, VPN, WAF, firewalls, ingress controllers; - Set up monitoring, logging, alerting, and tracing (Prometheus / Grafana / Loki / Tempo); - Deploy and maintain infrastructure for PostgreSQL, ClickHouse, Redis, RabbitMQ; - Define solutions for container registry and artifact management; - Ensure system scalability, reliability, observability, and security; - Participate in architectural discussions and influence OptiPlay’s platform engineering strategy. Qualifications - 4+ years of experience in DevOps, Cloud, or Platform Engineering; - AWS production experience: VPC, VPN, WAF, firewalls, multi-environment setups, networking fundamentals; - Kubernetes: strong understanding of internals, Helm, container runtime ecosystem; - Terraform: modular IaC design, reusable infrastructure patterns, infra from scratch; - CI/CD & GitOps: GitLab CI, ArgoCD, automated deployment workflows; - Monitoring & Observability: Prometheus, Grafana, Loki, Tempo, or similar; - Datastores & Messaging: PostgreSQL, ClickHouse, Redis, RabbitMQ; - Networking & Proxying: NGINX, HAProxy, Traefik, ingress controllers; - Automation & Scripting: Bash, Python (or similar); - Artifact Management: modern registries like ECR, Harbor, Nexus, etc; - Experience designing infrastructure for high-load, distributed, real-time systems. Requirements - Nice to have: Terragrunt; - SSL4SaaS; - Experience with GCP or Azure; - Multi-cluster or multi-region architecture; - Deep Kubernetes ecosystem experience (operators, CRDs, service mesh). Benefits - 21 vacation days + 5 extra day-offs annually; - 12 paid sick days; - Fully remote format — work from anywhere you feel productive; - Flexible schedule: start your day anytime between 08:00–11:00 CET; - Fixed budget for health insurance and gym/fitness; - Provided all required work equipment; - Zero bureaucracy and direct communication with founders and C-level; - Minimal meetings, async-friendly workflow; - Startup energy: fast motion, creativity, and tight-knit communication; - Business trips and team meetups several times per year; - Multiple salary payout options (flexible formats); - …And many more perks unlocked after we hit break-even.

• Champion a DevOps mindset: Identify friction points and implement scalable automation to improve reliability, delivery speed, and developer experience. • Operate and optimize production environments: Use infrastructure as code and modern observability tools to ensure performance and reliability. • Empower development teams: Build intuitive internal tools and foster a culture of self-service within R&D. • Lead deployments end-to-end: From architecture to implementation, manage deployments across multiple regions and environments. • Collaborate globally: Work closely with an Israel-based DevOps team, maintaining strong communication and ownership despite time zone differences.

• Create and maintain environment-specific Kubernetes configuration packages (e.g., Helm values files, YAML manifests) that incorporate STIG-aligned hardening and RBAC policy enforcement per IL environment. • Implement and manage secrets injection strategies using FedRAMP-compliant tools (e.g., AWS Secrets Manager, Azure Key Vault), ensuring compatibility with automated deployment pipelines. • Integrate CI/CD pipelines to enable secure, automated deployment and rollback of ArcGIS components and related services, supporting ongoing agility and compliance across environments. • Coordinate with Kubernetes and Data Layer Engineers to ensure version control, pipeline integrity, and integration testing for all containerized services deployed under WO-003. • Coordinate with the WO-009 infrastructure team to provide estimated cloud resource usage profiles for Kubernetes-based deployments in IL2, IL4, and IL5 environments. • Supply container and workload specifications to the WO-009 infrastructure team to support provisioning, tagging, and prepay or reservation planning Implement resource tagging in alignment with program-wide cloud governance policy and reconcile actual usage against estimates provided by WO-009. • Support cost optimization efforts led by WO-009 by adjusting workloads and scaling strategies in response to performance and utilization feedback.

• Administer and maintain Kubernetes clusters and containerized workloads. • Manage cloud infrastructure across OCI, AWS, GCP, or Azure environments. • Develop and maintain CI/CD pipelines for reliable application deployments. • Implement and manage Infrastructure as Code (IaC) using Terraform and Helm. • Build automation tooling and operational workflows using Python, Go, or Bash. • Drive observability initiatives including monitoring, logging, tracing, and alerting improvements. • Monitor, troubleshoot, and resolve production incidents while participating in on-call rotations. • Support and optimize distributed data platforms including Kafka, Elasticsearch, Spark, Redis, and MongoDB. • Improve platform reliability, scalability, and operational efficiency using SRE best practices. • Collaborate with cross-functional teams across multiple time zones. • Perform Linux system administration and networking troubleshooting. • Contribute to incident response processes, postmortems, and reliability improvements. • Support GitOps and deployment workflows using tools such as ArgoCD and GitHub Actions. • Evaluate and implement AI-assisted operational tooling for auto-remediation, alert correlation, and operational intelligence.