Senior Platform Engineer/EKS

N-iX is looking for Senior Platform Engineer/EKS to join the team

Client Overview: Our client is an Azerbaijani telecommunications company, the largest mobile network operator in Azerbaijan. The main products are: Fixed telephony, Mobile telephony, Internet services, Wireless broadband, and Value-added services.

Project Objectives: The primary goal is to accelerate the client’s Data & AI initiatives via a secure, hybrid cloud foundation on AWS while systematically modernizing the IT estate as part of the cloud migration.

Key Project Objectives include:

• Cloud Foundation & Landing Zone: Deploy target hybrid network architectures, establishing a secure Landing Zone and hybrid Data/AI platforms on AWS.
• Security, Compliance & Governance: Operationalize on-prem tokenization (achieving zero raw PII in the cloud), resolve policy blockers to include AWS in the ISMS, and establish a Cloud Center of Excellence (CCoE) to govern Cloud adoption.
• AI Chatbot & Voicebot Design & Implementation: Develop and operationalize a flagship Customer Care Chatbot and Voicebot as the first hybrid-setup consumer.

Key Responsibilities:

• Design, provision, and maintain production-grade Amazon EKS clusters across AWS cloud and on-premises environments using EKS Hybrid Nodes with Cilium VXLAN CNI overlay networking.
• Implement dynamic node autoscaling and OS lifecycle management using Karpenter and immutable Bottlerocket node images across cloud and hybrid compute nodes.
• Configure and manage EMR-on-EKS platform runtimes to execute distributed Big Data and PySpark batch/streaming analytics workloads.
• Provision, optimize, and manage specialized GPU node pools (NVIDIA A100/L40S / EC2 GPU instances) for Azerbaijani SLM/LLM model training, fine-tuning, and low-latency speech inference (ASR / TTS voicebot pipelines).
• Implement automated GitOps continuous deployment workflows using Argo CD and Helm charts for all Kubernetes platform components and application workloads.
• Enforce cluster security, governance, and compliance using Kubernetes admission controllers and policy engines (e.g., OPA / Kyverno) alongside fine-grained Workload Identity (IRSA / Pod Identities).
• Build and maintain Infrastructure-as-Code (IaC) templates using Terraform and AWS CDK integrated into GitLab CI/CD pipelines for repeatable cluster lifecycle management.
• Implement container microsegmentation, network security policies, and split-horizon DNS resolution across hybrid VPCs and on-premises substrates.
• Integrate platform logging, metrics, and trace telemetry with Amazon CloudWatch and central on-premises Splunk / SOC SIEM ingestion pipelines.
• Author technical documentation, cluster operational runbooks, disaster recovery (DR) procedures, and platform upgrade playbooks.

Requirements:

Mandatory Technical Skills:

• 4+ years of hands-on experience in Platform Engineering, DevOps, or Site Reliability Engineering with a primary focus on enterprise Kubernetes / Amazon EKS.
• Deep expertise with Amazon EKS, including EKS Hybrid Nodes architecture, Cilium CNI (VXLAN), and hybrid networking topologies.
• Strong experience in cloud-native autoscaling using Karpenter and container-optimized operating systems (Bottlerocket).
• Practical experience setting up and operating EMR-on-EKS for distributed data processing and Spark runtimes.
• Hands-on experience with GPU node pool orchestration for AI/ML workloads, LLM/SLM serving, and real-time speech/voicebot inference.
• Proficient with GitOps release methodologies using Argo CD, Helm, and automated CI/CD pipelines (GitLab CI).
• Solid knowledge of Kubernetes security, admission control (OPA / Kyverno), RBAC, secrets management (HashiCorp Vault / CyberArk), and pod security standards.
• Strong proficiency in Infrastructure-as-Code using Terraform or AWS CDK.

Strong Plus (Nice-to-Have Skills):

• Certified Kubernetes Administrator (CKA) and/or Certified Kubernetes Security Specialist (CKS)
• AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional.
• Experience in telecom domain infrastructure, low-latency real-time voice/chat processing, or hybrid cloud data sovereignty architectures.
• Familiarity with AWS Landing Zone Accelerator (LZA), AWS Transit Gateway, and AWS Lake Formation.

Soft Skills & Team Fit:

• Strong critical thinking, problem-solving, and analytical skills.
• Excellent communication and collaboration skills to work closely with cross-functional teams (Data Engineering, MLOps, Cloud/Network, Security).
• Results-oriented, proactive mindset with strong ownership of deliverables within an Agile / Scrum framework.
• Upper-Intermediate+ English level (written and spoken).

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits

*not applicable for freelancers