DevOps Engineer

Job Summary: We are seeking a highly skilled and experienced DevOps Administrator to join our team. The successful candidate will have a minimum of 5+ years hands-on experience in a DevOps role, with a deep understanding of both development and operational disciplines. The DevOps Administrator is expected to perform a variety of complex project tasks that will require creativity and original thinking. Key Responsibilities Container Platform (Kubernetes, Docker, Harbor) ● Operate self-managed Kubernetes clusters on on-premises hardware — installation, upgrades, etcd health, control-plane HA, CNI, ingress, storage classes, RBAC, network policies. ● Own the Docker runtime / containerd layer: image standards, base image hardening, build performance, registry hygiene. ● Administer Harbor as the internal container registry — projects, replication, retention policies, vulnerability scanning (Trivy), Notary / cosign signing where applicable. ● Design and enforce image promotion flows (dev → staging → prod) with signed, scanned artifacts. CI/CD (GitLab, Jenkins) ● Own GitLab (self-hosted) — runners, pipelines, groups/permissions, container registry, upgrades, backups. ● Own Jenkins — controllers, agents (static and dynamic Kubernetes agents), shared libraries, plugin lifecycle, credentials, and pipeline patterns. ● Build reusable pipeline templates so application teams ship fast without reinventing CI each time. ● Integrate Vault, Harbor, SAST/DAST, and artifact signing into the delivery flow. Secrets & Security (Vault) ● Operate a production HashiCorp Vault cluster — HA, auto-unseal, disaster recovery, audit logging. ● Design secrets engines (KV v2, database dynamic credentials, PKI, transit) and auth methods (Kubernetes, AppRole, OIDC, LDAP). ● Roll out short-lived, dynamically issued credentials across databases, message brokers, and cloud APIs; retire long-lived secrets. Data & Messaging Platforms ● MongoDB: replica sets and sharded clusters — deployment, backup/restore (mongodump, PBM), indexing hygiene, slow-query investigation, oplog monitoring, version upgrades.● Redis: standalone, Sentinel, and Cluster topologies — memory tuning, persistence (RDB/AOF), keyspace analysis, hot-key debugging. ● RabbitMQ: cluster ops, queue and exchange design guidance, mirrored/quorum queues, shovel/federation, dead-letter and TTL patterns, connection/consumer troubleshooting. ● Own backup, restore, and DR runbooks for every stateful system, and test them on a schedule — a backup you haven't restored is not a backup. Linux & Automation ● Deep, hands-on Linux administration (Ubuntu / RHEL / Rocky) — systemd, networking, storage (LVM, XFS/ext4, NFS), performance tuning (sysctl, cgroups, ulimits), kernel-level troubleshooting (strace, perf, bpftrace where useful). ● Automate everything with Ansible and Terraform (or OpenTofu) — no manual, undocumented server changes. ● Comfortable scripting in Bash and Python; comfortable reading Go when investigating tool internals. Monitoring & Observability ● Operate the monitoring stack: Prometheus, Grafana, Alertmanager, Loki (and/or ELK / Splunk for logs). ● Instrument systems and applications; write meaningful alerts (symptom-based, low-noise, actionable). ● Define SLIs/SLOs for critical services; run blameless post-mortems; drive measurable MTTR reductions. Cloud (Secondary) ● Manage the AWS footprint we do use — VPC, EC2, S3, Route 53, IAM, ACM, CloudFront/WAF where relevant. ● Design and operate hybrid connectivity (Site-to-Site VPN, Direct Connect) between on-prem and cloud. ● Apply the same discipline (IaC, least privilege, tagging, cost hygiene) to cloud resources. About Finvasia Finvasia is a multi-disciplinary, multinational organisation operating across financial services, technology, real estate, and healthcare. Over the past 13+ years, Finvasia has built and managed global platforms serving millions of clients across 180+ countries. With a portfolio of brands including Fxview, Shoonya, ACT Trader, CapitalWallet, Zulutrade, AAAfx, Gini Health, bodyLoop, StackFlow, and more, Finvasia offers a collaborative and diverse work environment with global exposure and opportunities to work across cutting-edge technologies. Finvasia is an equal opportunity employer, committed to diversity, inclusion, and a supportive workplace culture.