About the role
Responsibilities:
- Manage Helm chart releases for OLake components (UI, Worker, Temporal, PostgreSQL, NFS).
- Support Kubernetes cluster operations — RBAC, pod lifecycle, autoscaling, monitoring.
- Support SOC 2 and ISO 27001 compliance efforts — evidence collection, access reviews, audit logging, secrets rotation, and policy enforcement across infrastructure.
- Maintain and extend IAC(Pulumi, Terraform) programs that provision AWS VPC, EKS, and RDS across multiple regions.
- Manage AWS IAM / IRSA policies, Secrets Manager, and KMS for secrets and encryption.
- Contribute to networking: self-managed OpenVPN, Site-to-Site VPN, ALB + HAProxy ingress, and security group management.
Requirements:
- Familiarity with Kubernetes concepts — pods, deployments, services, namespaces, RBAC.
- Working knowledge of AWS (EC2, VPC, IAM, RDS, S3 — at minimum).
- Linux fundamentals and basic scripting (bash/shell).
- Ability to read and modify Helm charts and understand values.yaml / templating.
- Basic understanding of CI/CD concepts and GitOps workflows.
- Comfort reading Go code (you don't need to write it from scratch, but you'll navigate a Go codebase).
Good to Have:
- 1 - 3 years of full-time professional DevOps/SRE/Platform experience.
- You ask questions when stuck rather than guessing and breaking prod.
- You can follow an existing pattern and extend it — not invent from scratch.
- You read docs and error messages carefully before escalating.
- You're comfortable working in a fast-paced, small team where ownership matters.