Qentelli - DevOps/Software Engineer II - Platform Infrastructure

Reports to : Engineering Manager, Platform Infrastructure

Level : Software Engineer / DevOps Engineer (SWE-II)

Experience : 4 years of relevant industry experience

Employment : Full-time - Permanent

Location : Hyderabad

Required Skills & Experience

• Terraform / Terragrunt : Advanced - Own the full IaC codebase for all cloud resources across AWS and GCP; enforce zero-drift policy with CI-integrated plan runs and Checkov security scanning.
• Kubernetes (EKS / GKE 1.28+) : Advanced - Manage production clusters end-to-end : node groups, GPU node pools, Cluster Autoscaler, Karpenter, HPA/VPA, PodDisruptionBudgets, RBAC, and network policies.
• AWS (core services) : Advanced - Primary cloud : EKS, MSK, RDS PostgreSQL, ElastiCache Redis, EC2 GPU (g5.xlarge), S3, IAM (IRSA), VPC, CloudTrail, GuardDuty, Cost Explorer.
• Helm : Advanced - Author, version, and maintain Helm charts for all 6 platform service layers; manage values files per environment; chart linting and testing in CI.
• ArgoCD & GitOps : Advanced - App-of-Apps pattern, ApplicationSets, RBAC policies, auto-sync staging, manual production gates, Flagger integration for canary deployments.
• GitHub Actions / GitLab CI : Advanced - Design multi-stage pipelines : build, test, SAST, Trivy scan, staging deploy, production promote with approval gate; reusable workflow/include templates.
• Docker & container engineering : Advanced - Multi-stage Dockerfiles, image signing with Cosign, ECR lifecycle policies, Trivy vulnerability gate, Falco runtime security.
• Istio service mesh : Proficient - Install via Helm, enforce STRICT mTLS, configure PeerAuthentication and DestinationRule, set up Prometheus and Tempo integrations, Flagger traffic splitting for canary.
• HashiCorp Vault : Proficient - HA cluster on K8s, KV v2, database and PKI secret engines, AppRole and Kubernetes auth, Vault Agent Injector, lease TTL enforcement.
• Python / Bash scripting : Advanced - Automation scripts for operational tasks, pipeline glue code, Vault lease renewal utilities, cost analysis scripts, and IaC testing helpers.
• Linux systems administration : Advanced - Diagnose cluster and node-level issues : kernel parameters, network interfaces, cgroup limits, disk I/O; configure OS-level settings for high-throughput data workloads.
• Kong Gateway : Proficient - Declarative configuration (deck), JWT and rate-limiting plugins, Prometheus plugin, WAF rules, certificate management for external TLS termination.

Background & Education

• 4 years of professional experience in DevOps, cloud infrastructure, or platform engineering.
• Demonstrable experience provisioning and operating a cloud environment from scratch.
• Production Kubernetes experience : debugging, scheduling, and resource tuning.
• Experience designing CI/CD pipelines end-to-end with security gates.
• Experience with secrets management in production (Vault, AWS Secrets Manager).
• Familiarity with service mesh concepts.
• Bachelor's degree in Computer Science, Software Engineering, or equivalent practical experience.

Personal attributes

• Infrastructure-as-code fundamentalism.
• Security by default.
• Documentation as a deliverable.
• Curiosity about AI workloads.
• Collaborative ownership.