Friendly Technologies

We are looking for a DevOps engineer to join our company

Basic requirements for the DevOps Engineer:

- 7+ years of experience in DevOps / Platform Engineering / SRE
- 5+ years of hands-on AWS experience in production environments (EC2, VPC, S3, IAM, Route53)
- 3+ years of Terraform experience, including reusable modules, state management, and CI/CD integration
- 3+ years of Ansible experience - playbooks, roles, inventory management for multi-node deployments
- Strong hands-on experience with GitHub Actions CI/CD - workflows, Docker Buildx, automated builds, and deployments
- Proficiency in Bash and Python scripting - bootstrap automation, service auto-detection, idempotent deployment scripts
- Strong Linux administration skills in production (Ubuntu, Debian, CentOS, Rocky Linux)
- Networking, firewalls (iptables/ufw), VPN, SSH hardening, SSL/TLS certificate management
- Hands-on experience with Docker and Docker Compose at an advanced level - host networking, volume management, multi-service stacks, private registries (Harbor)
- Hands-on experience with Kubernetes and AWS EKS in production - Helm, cluster management, service mesh, ingress controllers
- Deep experience with Prometheus - configuration, file_sd_configs, PromQL, alerting rules, retention tuning
- Grafana - dashboard provisioning, datasources, alerting, service accounts, embedding
- Alertmanager - routing, receivers (Email, Telegram, Slack, MS Teams, SNMP, Webhooks)
- Experience with exporters ecosystem - node-exporter, process-exporter, cAdvisor, mysqld-exporter, JMX exporter
- Understanding of JVM metrics (HikariCP, heap, GC) - we monitor WildFly/Java application servers
- Nginx - reverse proxy, SSL termination, basic auth, WebSocket support, IP-based access control
- Database administration: MySQL/MariaDB (setup, user management, monitoring) plus at least one of PostgreSQL, Oracle DB, ClickHouse
- Experience with IAM, secrets management, and infrastructure security best practices
- Experience supporting production systems, incident response, and root cause analysis
- Confident Git skills (branching, tags, hooks, releases)
- Strong communication skills and ability to work across teams
- English level: B2+

Nice to Have

- AWS Certified DevOps Engineer – Professional or AWS Certified Solutions Architect – Associate
- CKA / CKAD
- Experience with Hetzner (Dedicated/Cloud)
- Experience with GitOps tools (Argo CD)
- Experience with AWS Organizations / multi-account environments
- Experience with cost optimization / FinOps
- Experience mentoring engineers and defining engineering standards
- Spring Boot Actuator - understanding Java microservice metrics
- SNMP - traps, MIB files, SNMPv2c/v3
- Hazelcast - cache clusters, native Prometheus endpoint
- Oracle DB - exporter setup, administration
- ELK/OpenSearch for centralized logging
- Cloud-to-cloud migration experience


Responsibilities

- Designing, building, and maintaining software delivery pipelines and infrastructure that support continuous integration, delivery, and deployment
- Building and maintaining Terraform modules and Ansible playbooks for automated product delivery to enterprise clients across AWS, Hetzner, and on-premise environments
- Collaborating with engineering teams to ensure that software is delivered with high quality, speed, and reliability
- Developing and maintaining monitoring and alerting systems (Prometheus, Grafana, Alertmanager, ~20 exporter types) to proactively identify and address issues in production environments
- Troubleshooting production issues, conducting root cause analysis, and implementing remediation plans
- Managing and scaling infrastructure resources - servers, databases, Docker services, EKS/Kubernetes clusters - to ensure optimal performance and cost-effectiveness
- Owning the full monitoring stack: Prometheus, Grafana, Alertmanager, Nginx reverse proxy, SNMP Notifier, and notification channels (Email, Telegram, Slack, MS Teams, Webhooks, SMS)
- Packaging and automating product deployments for client environments - repeatable, infrastructure-as-code driven delivery using Terraform and Ansible
- Implementing security best practices and ensuring compliance with industry standards and regulations
- Maintaining and improving deployment automation scripts (Bash) for multi-node bootstrap, service detection, and rolling updates
- Documenting infrastructure, deployment procedures, and runbooks - we maintain strict documentation standards
- Continuously learning and keeping up-to-date with new technologies and industry trends to improve system performance, security, and efficiency


Technology Landscape

Monitoring Stack: Prometheus, Grafana, Alertmanager, Nginx, SNMP Notifier
Application Servers: WildFly/FTACS, Hazelcast, Spring Boot microservices, IIS Windows
Databases: MySQL, PostgreSQL, Oracle, ClickHouse
Frontend: Angular, FastAPI (config UI)
Infrastructure: Hetzner Dedicated + Cloud, AWS (EKS, EC2, VPC, S3, Route53), Docker Compose, Kubernetes, GitHub Actions
IaC & Delivery: Terraform, Ansible
Notifications: Email (SMTP), Telegram, Slack, MS Teams, SNMP Traps, Webhooks, SMS
~20 exporter types: node, process, cAdvisor, MySQL, Oracle, JMX, ClickHouse, Postgres, Nginx, API metrics, and more