DevOps Engineer – Multi‑region Kubernetes & Terraform

About the role

Testlify operates a multi‑tenant talent assessment platform across four AWS regions. As a DevOps Engineer you will own the end‑to‑end infrastructure – from Terraform provisioning to ArgoCD deployments, observability, and on‑call response. This is a hands‑on role focused on keeping production stable and continuously improving the platform.

Key responsibilities

• Manage four production EKS clusters plus staging, including node lifecycle with Karpenter, autoscaling with KEDA, and ingress via NGINX and AWS Load Balancer Controller.
• Maintain GitOps workflows using ArgoCD; ensure cluster state is immutable and self‑healing.
• Develop and operate ~30 Terraform modules (VPC, EKS, RDS, DocumentDB, ECS, etc.) in Terraform Cloud, keeping drift near zero.
• Implement secret management with External Secrets Operator, AWS Secrets Manager, IRSA and OIDC federation, and schedule credential rotation.
• Enhance observability through OpenTelemetry collectors, Grafana Cloud, OpenReplay, and Metabase.
• Build and maintain CI/CD pipelines with GitHub Actions for Node.js/TypeScript services and Vue/Nuxt front‑ends on Vercel.
• Optimize cost and capacity, right‑size nodes, set resource limits, and report regional spend.
• Drive compliance engineering for SOC 2, ISO, GDPR, handling evidence, access reviews and data‑residency enforcement.
• Participate in shared on‑call rotation, write post‑mortems, and create guardrails to prevent repeat failures.

Required profile

• Several years of experience operating production Kubernetes on AWS.
• Strong background in Terraform and GitOps practices.
• Hands‑on experience with observability, CI/CD, and security/compliance tooling.
• Proactive attitude toward automation, reliability and cost efficiency.

Required skills

• AWS (EC2, VPC, Secrets Manager, Load Balancer)
• Amazon EKS, Karpenter, KEDA, cert‑manager, NGINX Ingress
• Terraform, Terraform Cloud
• ArgoCD
• External Secrets Operator, IRSA, OIDC
• OpenTelemetry, Grafana Cloud, OpenReplay, Metabase
• GitHub Actions, Node.js, TypeScript, Vue, Nuxt, Vercel
• Cost management and capacity planning
• Compliance frameworks (SOC 2, ISO, GDPR)