JD

As a DevOps Engineer, you’ll be responsible for deploying, managing, and troubleshooting our on-prem platform across customer datacentres. We’re looking for someone with 3-4 years of hands-on experience across self-managed databases, Linux and networking, Kubernetes operations, and Ansible automation. You’ll also own production issues and work closely with customer infrastructure, network, and security teams.

Key Responsibilities

Deploy and upgrade Java/Spring Boot services on Kubernetes clusters inside customer datacentres, using Helm with per-customer value sets.

Manage the Kubernetes clusters themselves — installation and version upgrades, node lifecycle and capacity, control-plane and etcd health, certificate rotation, CNI, ingress and storage classes — both on clusters we build and on enterprise distributions the customer provides.

Provision, tune and operate self-managed databases on Linux VMs — MySQL, PostgreSQL and MongoDB — including replication, backup, verified point-in-time restore, and version upgrades.

Provision and operate the middleware layer on VMs — Redis (Sentinel), Apache Kafka and RabbitMQ — including clustering, authentication and capacity planning.

Run OpenSearch as the centralised application log store: shard and heap sizing, index lifecycle and retention policies, cluster health.

Automate the full infrastructure build with Ansible — reusable roles plus per-customer inventories,



so the same automation installs the stack at every customer without being forked.

Own day-2 Kubernetes operations: rollouts, probe and resource tuning, persistent storage, ingress and TLS, and diagnosis of pod, scheduling and networking failures.

Troubleshoot production issues across the VM, network, Kubernetes and JVM boundaries — determine whether a fault is infrastructure or application, and drive root-cause analysis.

Debug connectivity problems at the command line: routing, firewalls, DNS, MTU, TLS chains and certificate trust, packet capture.

Manage certificates, truststores and private container registry (Harbor) content for restricted and air-gapped environments.

Monitor the platform using Prometheus, Grafana and OpenSearch — define what gets alerted on, not only what gets dashboarded.

Write Python and Shell automation for provisioning, health checks and routine operational tasks.

Apply security and access hygiene appropriate to regulated customer environments — least privilege access, secret handling, network segmentation, audit readiness.

Produce and maintain runbooks and handover documentation so a customer's own operations team can run what we install.

Work directly with customer infrastructure, network and security teams during deployment and issue resolution, in office where required.

Collaborate with development and QA teams to plan and execute releases.

📌 Middleware & Infrastructure Administrator (Bengaluru)
🏢 Xebia
📍 Bengaluru