Job Summary: We are seeking an infrastructure subject matter expert with experience in designing and implementing solutions on AWS and Kubernetes, with a focus on IaC, CI/CD, security, networking, and observability. Key Highlights: 1. Infrastructure-as-Code (IaC) design and provisioning on AWS 2. Amazon EKS and Kubernetes cluster management 3. CI/CD pipeline design and implementation Profile Description: Infrastructure-as-Code (IaC) design and provisioning: Design, implement, and maintain project infrastructure on AWS using Terraform, covering dev, staging, and prod environments—including EKS, Aurora PostgreSQL, MSK Kafka, ElastiCache Redis, S3, API Gateway, CloudFront, WAF, KMS, Cognito, ECR, and IAM policies adhering to the principle of least privilege. All IaC code must be versioned in Git, modularized by service, and executed from the CI/CD pipeline. Amazon EKS and Kubernetes cluster management: Provision and manage the EKS cluster, including node groups, namespaces, RBAC, network policies, and auto-scaling resources (HPA). Define and maintain Kubernetes manifests for PIV microservices—Deployments, Services, ConfigMaps, Secrets integrated with AWS Secrets Manager, liveness/readiness probes, and resource limits aligned with SLA requirements. CI/CD pipeline design and implementation: Build and operate continuous integration and deployment pipelines using AWS CodePipeline and CodeBuild—including linting, building, executing unit tests, building Docker images, pushing to ECR, and deploying to EKS. Implement Blue-Green deployments with automatic rollback upon post-deployment failures. Infrastructure security and compliance: Design and implement AWS security architecture aligned with regulatory requirements—including encryption via KMS, certificates managed via ACM, WAF and AWS Shield configuration, and CloudTrail activation with log retention in S3\. Ensure production resources are not directly exposed to the internet. Network configuration and connectivity: Design VPC network topology, public and private subnets, route tables, security groups, and private service-to-service connectivity. Configure DNS and portal distribution via CloudFront and Route 53\. Observability and monitoring: Implement observability strategy using CloudWatch logs, metrics, and alarms; AWS X-Ray for distributed tracing; and Prometheus/Grafana on EKS for operational metrics. Configure alerts for errors, latency, and availability. Secret management: Implement centralized secret management using AWS Secrets Manager—including automatic credential rotation—and ensure no sensitive information is exposed in code or configurations. Technical reference: Act as the infrastructure subject matter expert for the development team—supporting Kubernetes service configuration, resolving technical blockers, documenting architectural decisions, and participating in sprint planning alongside the team. As a partner for IT consulting and software development, we specialize in the digital transformation of our clients in finance, insurance, and industry. Our approximately 700 talents in Germany develop sustainable solutions using cutting-edge technologies. **Five reasons to join \#TeamGFT** ---------------------------------------------- * **Flexibility:** Balance is everything here! We offer an environment that supports flexible working hours and remote work. * **Collaboration:** Collaboration is fundamental. We work in multidisciplinary teams where each person contributes their unique skills. * **Multiculturalism:** We have a diverse global team that fosters an atmosphere of learning and personal growth. * **Development:** We offer customized career paths and training programs to unlock your potential. * **Relevance:** We collaborate with industry-leading clients on high-impact projects that define the technological future.