Why this role exists

C Teleport runs a B2B travel platform for travel agencies and corporates. Growing scope across EKS, CI/CD, and IaC needs another owner who can take modules end-to-end and run them in production.

What you will own

  • Operate our multi-account AWS estate

  • Own Terraform modules end-to-end — design, review, rollout, deprecation

  • Run EKS clusters hosting Python, Go, and .NET services: upgrades, autoscaling, IRSA, workload tuning

  • Build GitHub Actions pipelines for CI/CD, IaC apply, and security scans

  • Instrument Sentry, CloudWatch, and Prometheus; define SLOs tied to user pain

  • Keep our ISO 27001, GDPR, and PCI DSS controls audit-ready — evidence automation, drift remediation, continuous audit prep

90-day success criteria

Flux upgraded cluster-wide — HelmRelease API drift eliminated. EKS Terraform module refactored and 1.35-ready. Applications using static AWS credentials migrated to IAM roles, pattern documented.

Must-have skills

  • 3+ years DevOps/SRE/Platform with production ownership

  • AWS production depth — EKS, RDS, ElastiCache, networking, IAM, security

  • Terraform at scale: module design, remote state, drift handling, plan-review discipline

  • Kubernetes operations on EKS: crashing pods, resource tuning, Helm, ingress, RBAC

  • Incident response: triage Sentry/CloudWatch/Prometheus alerts, root-cause over quick-fix

  • SRE / Site Reliability mindset — SLO design, error budgets, incident review discipline

Nice-to-have

  • Python or Go — read service code, not just pipelines

  • GitHub Actions for CI/CD

  • Database tuning — Postgres and MongoDB

  • Elasticsearch — cluster ops, index design, hot/warm/cold tiers

  • Operator-side audit experience — ISO 27001, GDPR, or PCI DSS

  • Russian — bilingual team, English primary for code and docs

How we work

  • Remote-first, CET hours aligned with our Rotterdam office; we write more than we meet

  • AI coding assistants are part of daily workflow — adopt ours or bring your own

  • Code review is mandatory, blameless, direct

  • Compensated weekly on-call rotation shared across the DevOps team — you won’t carry it alone

  • Bounded scope, end-to-end ownership of your work; we support through code review and async pairing, not ticket hand-offs

This role suits you if

  • You operate infrastructure through code, not console clicks

  • You scope your own work and decide without waiting for a playbook

  • You run what you ship — no merge-and-forget