Ofertas › Niuro
Niuro · Remote · Remoto
Senior-level experience owning production cloud or platform infrastructure, typically 5 or more years in cloud engineering, platform engineering, DevOps, or a related field. Production ownership of Terraform or Pulumi codebases, including reusable modules, state management, and drift management. Experience running Kubernetes or an equivalent container orchestration platform across multiple environments. Deep expertise in at least one major cloud provider, with AWS preferred, and experience designing portable infrastructure where appropriate. Production operations experience with PostgreSQL and object storage, including backups, restores, and upgrades. Experience implementing tenant isolation, private networking, infrastructure-level egress controls, and secrets management. Experience managing CI/CD and versioned releases across multiple environments without configuration drift. Ability to write clear design notes and runbooks, and to document decisions before implementation. Experience with SSO, audit logging, encryption, monitoring, and alerting in production environments. Hands-on experience with Docker, S3-Compatible Object Storage, OIDC, Egress Control. Skills Terraform Pulumi Kubernetes Docker AWS PostgreSQL S3-Compatible Object Storage OIDC Secrets Management Private Networking Egress Control Tenant Isolation CI/CD Versioned Releases SSO Audit Logging Encryption Monitoring Alerting Package the platform as a consistent, containerized deployment unit for each client environment. Build and maintain reusable infrastructure-as-code modules using Terraform or Pulumi, starting with AWS and supporting future cloud extensions. Design portable stateful services using PostgreSQL, S3-compatible object storage, OIDC identity, and pluggable secrets management. Implement and test isolation between clients and between sub-tenants within a client environment. Control infrastructure-level data egress so that outbound connections are explicitly declared and authorized. Operate client-hosted environments through outbound-only control-plane connectivity for releases and health information, without transmitting client data. Define and operate shared-responsibility processes and service-level operating practices for hybrid environments. Manage upgrades across multiple environments within supported-version windows. Establish baseline security and observability through SSO, audit logs, encryption, monitoring, and alerting. Create design documentation, runbooks, and operatio