SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mirantis is seeking an experienced DevOps Engineer to own the deployment, release, and reliability of the k0rdent-ai platform — a multi-tenant control plane for enterprise GPU infrastructure. You will operate this platform across AWS Kubernetes clusters and bare-metal data center infrastructure globally, managing core services including Keycloak (identity), Kong (API gateway), Temporal (workflow engine), and PostgreSQL databases.
Key responsibilities include:
**Multi-Environment Kubernetes Operations**: Deploy, upgrade, and operate k0s/k0rdent-managed Kubernetes clusters on AWS and bare-metal hardware across a global control plane and multiple regions. Manage cluster lifecycle, node maintenance, capacity planning, and version upgrades.
**Helm & Service Delivery**: Author and maintain Helm charts and k0rdent ServiceTemplates for core services, including dependency ordering, health gating, versioning, and zero-downtime upgrade paths.
**Storage & Snapshot Engineering**: Design and operate Kubernetes storage across environments — AWS EBS CSI in cloud, OpenEBS LocalPV, Longhorn, or Ceph on bare metal. Manage StorageClasses, reclaim policies, CSI snapshot controllers, and VolumeSnapshotClasses for reliable stateful service snapshots and restores.
**Database Backup & Recovery**: Operate CloudNativePG backup and recovery end-to-end, including scheduled volume snapshots, continuous WAL archiving to object storage, point-in-time recovery, and replica clusters with defined RPO/RTO targets and regular restore drills.
**CI/CD & End-to-End Testing**: Build and maintain GitHub Actions pipelines for linting, chart unit tests, artifact packaging, OCI registry publishing, and on-demand bare-metal end-to-end environments.
**GitOps & Infrastructure as Code**: Maintain declarative infrastructure-as-code using Terraform and Argo CD (or Flux), keeping all environments reproducible and reviewable through code.
**Observability & Incident Response**: Build monitoring and alerting using Prometheus, Grafana, and OpenTelemetry for service health, database replication, backup status, and capacity. Join on-call rotation, lead troubleshooting, and drive post-incident improvements.
**Security & Air-Gapped Delivery**: Manage TLS and certificate lifecycle, secrets, network policies, and least-privilege RBAC. Support private-registry and air-gapped installations for sovereign customers.
**Requirements**
Must Have:
- 8+ years in DevOps, SRE, or platform engineering, including 3+ years operating production Kubernetes for business-critical services
- Strong grasp of Kubernetes primitives (workloads, StatefulSets, operators, CRDs, persistent volumes, CSI storage, RBAC, network policies) with hands-on production cluster upgrade and troubleshooting experience
- Hands-on authoring of non-trivial Helm charts (templating, values design, chart dependencies, testing with helm-unittest or chart-testing)
- Practical experience with CSI drivers, StorageClasses, and volume snapshots (AWS EBS CSI preferred, but Longhorn, Ceph/Rook, OpenEBS, or equivalent cloud CSI acceptable)
- Hands-on experience running PostgreSQL through a Kubernetes operator (CloudNativePG preferred, but Zalando postgres-operator, Crunchy PGO, or comparable acceptable) including backups, restores, and point-in-time recovery
- Production experience in AWS (EC2, EBS, VPC, IAM, S3; EKS a plus); equivalent GCP or Azure experience also counts
- Designing and maintaining GitHub Actions (or GitLab CI) pipelines with solid scripting in Bash plus Python or Go
- Clear written and spoken English and comfort working across time zones with regular overlap with US and European teams
- Bachelor's degree in Computer Science & Engineering or related field, or 8+ years equivalent related experience
Nice to Have:
- Experience with bare-metal provisioning (Metal3, Ironic, PXE) and GPU or AI infrastructure
- Familiarity with Kong Gateway or Kubernetes Gateway API, and Keycloak/OIDC identity integration
- Experience operating Temporal or other workflow engines in production
- Experience delivering software into air-gapped or sovereign environments using private registries and mirrored artifacts
- Experience designing cross-region disaster recovery for stateful services, including RPO/RTO trade-off decisions
- CKA/CKS or AWS Certified DevOps Engineer – Professional certifications
- Contributions to open-source infrastructure projects (Helm charts, Kubernetes operators, CNCF projects)
