DevOps Engineer

Опис вакансії

We are looking for an experienced DevOps Engineer to work with the team of experts developing the Governmental Statistical Warehouse (GSW) — a secure, scalable, (cloud-based) platform specifically for aggregating, storing, processing, and analyzing statistical data related to infectious diseases such as AIDS (HIV/AIDS), hepatitis (including types B and C), and similar communicable diseases to build and maintain the infrastructure for GSW, ensuring it handles sensitive statistical data reliably and in compliance with health data regulations.

The objective is to build an AWS environment with Kubernetes as the runtime and S3 for storage across all stages, supporting end-to-end DWH architecture functionality.

Scope of Work

• Configure an AWS environment: network (VPC, public/private subnets, routing, NAT), security groups/ACL, basic access segmentation
• Design, implement, and maintain CI/CD pipelines to support deployment and integration of ETL workflows and related applications
• Set up IAM access model for administration/DevOps, access for Kubernetes components to S3/RDS and other AWS resources (via roles/integration with cluster), CI/CD
• Set up an encryption
• Monitor and manage cloud infrastructure and on-premises environments to ensure high availability, scalability, and security of data processing systems
• Automate system provisioning, configuration, and software updates to streamline operations and minimize downtime
• Implement logging, monitoring, and alerting solutions to proactively identify and resolve issues in ETL and data integration processes
• Harden security posture (encryption, access control, auditability)
• Collaborate with ETL developers and system integration specialists to optimize workflow performance and ensure compliance with data security standards
• Provide documentation and training for DevOps procedures and tools to support knowledge transfer and sustainable operations
• Prepare and configure RDS (managed DB) for DWH (PostgreSQL), service DBs for Superset/DataHub components
• Build Kubernetes cluster, including namespaces, RBAC, quotas, requests/limits, secret management, integration with Vault, Ingress environment, and TLS
• Standardize deployments via Helm and configuration structure for the environment
• S3 as “Data Lake”:
  • Amazon S3 buckets/prefixes for the pilot, bucket policy, lifecycle/retention for budget control
  • Resource tagging (project/env/owner) for cost allocation
• “Stack” in Kubernetes:
  • GitLab
  • Vault (secrets management) -Hashi Corp Vault
  • Prometheus and Grafana
  • Dagster
  • Trino (SQL query engine)
  • DWH/BI components

Deliverables

Candidate Requirements

• Minimum of 5 years’ experience as a DevOps Engineer, preferably within healthcare, public health, or international projects
• Degree in Information Technology, Computer Science, or related field
• Strong proficiency with Terraform / Open Tofu (or CloudFormation / Pulumi)
• Production experience with Kubernetes (EKS / AKS / GKE or self-managed)
• Deep understanding of CI/CD tools (GitLab CI, GitHub Actions, Jenkins, ArgoCD preferred)
• Solid scripting skills (Bash, Python)
• Experience operating cloud environments (AWS, Azure or GCP) under strict compliance rules
• Familiarity with observability stack (Prometheus, Grafana, Loki / ELK)
• Understanding of secrets management (Vault, AWS Secrets Manager, Sealed Secrets…)
• Experience with healthcare or social sector information systems is highly desirable
• Strong analytical and problem-solving skills
• Deep understanding of data architecture principles, APIs, interoperability, security, and personal data protection
• Languages: Ukrainian, English

Advantages

• Knowledge of the Ukrainian context in the field of digital health
• Experience in governmental, healthcare or highly regulated projects
• Knowledge of Ukrainian personal data protection legislation and state cybersecurity standards
• Experience with big data tooling (Spark, Airflow, Kafka, ClickHouse / Snowflake-like systems)
• ArgoCD, Flux or GitOps mindset
• Relevant certifications (CKA/CKAD, AWS DevOps, Azure DevOps, Terraform Associate)

Вимоги, побажання: 

Обов'язки: 

Умови: