DevOps / Platform Engineer (Hybrid, Athens)

About the role

We are seeking a DevOps / Platform Engineer to maintain and secure our hybrid infrastructure, automate deployments and support development teams. The role involves working with Kubernetes clusters on‑premise and in the cloud, using a GitOps workflow.

Key responsibilities

• Operate and maintain Kubernetes clusters (k3s, kubeadm, AKS, OKE) – upgrades, node maintenance, certificates, etcd backups and capacity planning.
• Maintain Helm charts and per‑environment values in the GitOps repository.
• Manage Argo CD (app‑of‑apps, sync policies, drift troubleshooting, custom health checks).
• Provision new environments/tenants from scratch following runbooks and improve those runbooks.
• Administer Ubuntu LTS servers – patching, kernel/security upgrades, LVM, systemd, firewalls, SSH hardening and jump hosts.
• Develop Bash scripts for operational tasks such as secret bootstrapping and health checks.
• Build and maintain CI/CD pipelines with GitHub Actions, handling image builds, promotions and GitOps updates.
• Operate self‑hosted platform services (PostgreSQL, Kafka, Elasticsearch/OpenSearch, Keycloak, Redis, MinIO, Milvus, ClamAV, oauth2‑proxy).
• Configure ingress and networking (Traefik, Azure Application Gateway, Cloudflare Tunnel, DNS, TLS certificates).
• Implement secrets management using External Secrets Operator, Azure Key Vault and sealed/generated secrets.
• Maintain observability stack – kube‑prometheus‑stack, Grafana dashboards, alert rules and log aggregation.
• Participate in incident response, root‑cause analysis and post‑mortem activities.

Required profile

• 3+ years of experience in a DevOps or Platform Engineering role.
• Strong background in Linux system administration (Ubuntu LTS).
• Hands‑on experience with Kubernetes clusters and GitOps practices.
• Proven ability to design, implement and maintain CI/CD pipelines.
• Experience managing container registries and image mirroring in restricted environments.

Required skills

• Kubernetes (k3s, kubeadm, AKS, OKE)
• Helm & Argo CD
• GitHub Actions
• Bash scripting
• Ubuntu Linux administration
• Docker & container registries (Docker Hub, OCIR, ACR)
• PostgreSQL (Zalando operator)
• Kafka (Strimzi)
• Elasticsearch/OpenSearch (ECK)
• Keycloak, Redis, MinIO/Garage (S3)
• Traefik, Azure Application Gateway, Cloudflare Tunnel
• External Secrets Operator, Azure Key Vault
• Prometheus, Grafana, log aggregation tools