Senior Cloud & Kubernetes DevOps Engineer

About the role

We are launching an ambitious greenfield infrastructure initiative to build a modern, scalable, and fully automated cloud platform based on open‑source foundations such as Apache CloudStack, OpenStack, and Kubernetes. As a Senior Cloud & Kubernetes DevOps Engineer you will design and bootstrap this platform from the ground up, owning end‑to‑end Infrastructure as Code, Kubernetes ecosystems, and GitOps pipelines.

Key responsibilities

• Architect and provision declarative, reproducible cloud infrastructure using Apache CloudStack or OpenStack, integrating compute, storage (Ceph) and networking.
• Design, deploy and manage production‑grade Kubernetes clusters on hybrid cloud platforms, enabling dynamic container workloads at scale.
• Lead IaC strategy and automate deployment of virtualized and cloud‑native resources with Terraform or Pulumi (Go).
• Build modern GitOps and CI/CD pipelines in GitLab CI/CD using ArgoCD, container registries and Helm.
• Automate day‑0 to day‑2 cluster operations, node provisioning and configuration management with Ansible and cloud‑init.
• Integrate open‑source observability, security and networking tools (Prometheus, Grafana, Istio/Envoy, HashiCorp Vault) and enforce container security, RBAC and self‑healing mechanisms.

Required profile

• 3+ years of hands‑on experience designing, operating and troubleshooting production Kubernetes clusters.
• Proven ability to build greenfield solutions, define standard operating procedures and create clean, scalable architecture patterns.
• Strong communication skills to articulate architectural decisions across cross‑functional teams.
• Willingness to participate in shared on‑call rotations as the platform matures.

Required skills

• Kubernetes, Helm, CNI networking, Istio/Envoy.
• Apache CloudStack or OpenStack administration.
• Terraform or Pulumi (Go) for IaC.
• GitLab CI/CD, ArgoCD, container registry integration.
• Ansible, cloud‑init, Helm charts.
• Python, Go, Bash scripting.
• Linux (Debian/Ubuntu, RHEL/Rocky), KVM hypervisor, Ceph storage, LVM.
• Networking concepts: VLAN, VXLAN, BGP.
• Observability tools: Prometheus, Grafana; security tools: HashiCorp Vault.

What we offer

• Up to 6 weeks paid time off per year and 5 sick days.
• Flexible working hours and possibility to work from home.
• Flexible cafeteria account (18,000 CZK/year) for leisure, transport or pension.
• Meal vouchers (200 CZK per workday, 55 % covered).
• Co‑working offices in Ostrava and Brno, free snacks, fruits, height‑adjustable tables and regular get‑togethers.