Senior Staff Engineer(Senior DevOps Engineer)
Nagarro · Shanghai, China · 20h ago
Company Description
Job Description
Must have Skills : Cloud development (Strong)
Job Summary
We are seeking an experienced and highly skilled Senior DevOps Engineer to join our Cloud Infrastructure and Platform Engineering team, supporting enterprise-scale applications and cloud platforms for a leading global hospitality organization.
The ideal candidate will have strong hands-on experience with Alibaba Cloud, Terraform, Harness, Open Policy Agent (OPA), and Kubernetes, with a proven ability to design, implement, automate, and maintain secure, scalable, and highly available cloud infrastructure and DevOps platforms.
This role requires deep technical expertise in cloud infrastructure, CI/CD pipeline engineering, Infrastructure as Code (IaC), Kubernetes platform management, and policy-driven security automation.
The successful candidate will work closely with global Development, Cloud Infrastructure, Security, Architecture, and Operations teams to ensure reliable application delivery, infrastructure stability, and continuous improvement of enterprise DevOps capabilities.
Key Responsibilities
1. Cloud Infrastructure Engineering Design, provision, operate, and optimize enterprise cloud infrastructure on Alibaba Cloud. Manage cloud resources, including ECS, VPC, SLB/ALB, NAT Gateway, Cloud Enterprise Network (CEN), storage, and security services. Develop and maintain reusable Terraform modules to automate cloud infrastructure provisioning and configuration. Implement Infrastructure as Code best practices, including version control, remote state management, infrastructure testing, and configuration consistency. Ensure cloud infrastructure meets enterprise requirements for availability, scalability, security, performance, and cost efficiency. Troubleshoot complex infrastructure issues across cloud compute, networking, storage, and application environments.
2. DevOps & CI/CD Engineering Design, implement, maintain, and optimize enterprise CI/CD pipelines using Harness. Configure and manage Harness pipelines, connectors, environments, infrastructure definitions, deployment strategies, and approval workflows. Integrate Harness with source code repositories, artifact repositories, container registries, Kubernetes, and cloud infrastructure. Implement automated application deployment, validation, rollback, and release management processes. Support advanced deployment strategies such as blue-green deployments, canary releases, and progressive delivery. Troubleshoot pipeline failures and improve deployment reliability, security, and efficiency. Collaborate with Development and Operations teams to standardize DevOps practices and accelerate application delivery.
3. Kubernetes & Container Platform Engineering Deploy, operate, maintain, and troubleshoot Kubernetes clusters and containerized applications. Manage Kubernetes resources, including Deployments, StatefulSets, Services, Ingress, ConfigMaps, Secrets, RBAC, and autoscaling. Support Alibaba Cloud Container Service for Kubernetes (ACK) and enterprise Kubernetes environments. Develop, maintain, and customize Helm charts to support standardized application deployments. Troubleshoot Kubernetes networking, resource allocation, scheduling, storage, application availability, and performance issues. Work with Kubernetes Operators and controllers to automate application lifecycle management and platform operations. Implement Kubernetes security, monitoring, capacity management, and high-availability best practices.
4. Security Automation & Policy Management Design, implement, and maintain policy-based security and governance controls using Open Policy Agent (OPA). Develop and manage OPA policies using Rego to enforce enterprise security, compliance, and operational requirements. Integrate OPA with Kubernetes admission control, CI/CD pipelines, and infrastructure deployment workflows. Implement Policy as Code to automate compliance checks and prevent unauthorized or non-compliant deployments. Collaborate with Security and Architecture teams to establish and maintain infrastructure and application deployment standards. Support access control, secrets management, vulnerability remediation, and secure configuration management.
5. Platform Reliability & Operational Excellence Maintain the reliability, availability, performance, and security of cloud infrastructure and DevOps platforms. Support production incident investigation, root cause analysis, and permanent corrective actions. Identify opportunities to improve platform stability, deployment efficiency, and operational automation. Develop and maintain technical documentation, operational runbooks, deployment procedures, and infrastructure standards. Collaborate with globally distributed teams to support production releases, infrastructure changes, and platform upgrades. Support business-critical applications operating in a 24x7 global hospitality environment.
Required Qualifications & Technical Skills
1. Alibaba Cloud Strong hands-on experience designing, deploying, and managing production infrastructure on Alibaba Cloud. Solid understanding of Alibaba Cloud services, including ECS, VPC, SLB/ALB, NAT Gateway, RAM, OSS, and related infrastructure components. Experience implementing secure, scalable, and highly available cloud architectures. Ability to independently troubleshoot cloud infrastructure and platform-related issues.
2. Terraform Strong hands-on experience using Terraform for Infrastructure as Code. Proven experience developing reusable Terraform modules for cloud infrastructure provisioning. Familiarity with Terraform state management, remote backends, workspaces, providers, and dependency management. Experience integrating Terraform into automated CI/CD workflows. Ability to manage infrastructure changes safely across multiple environments.
3. Harness Strong hands-on experience designing, implementing, and maintaining CI/CD pipelines using Harness. Experience configuring Harness connectors, environments, deployment stages, approval workflows, and deployment strategies. Experience integrating Harness with Kubernetes, Terraform, Git repositories, and container registries. Ability to independently troubleshoot and optimize complex deployment pipelines.
4. Open Policy Agent (OPA) Strong understanding of Open Policy Agent and Policy as Code principles. Hands-on experience developing, testing, and maintaining OPA policies using Rego. Experience integrating OPA with Kubernetes and/or CI/CD pipelines. Ability to implement automated security and compliance controls for infrastructure and application deployments.
5. Kubernetes Strong hands-on experience administering and troubleshooting production Kubernetes environments. Experience deploying and managing containerized applications using Docker and Kubernetes. Practical experience developing, customizing, and maintaining Helm charts. Understanding of Kubernetes Operators, custom resources, and controller-based automation. Strong knowledge of Kubernetes networking, RBAC, resource management, scheduling, storage, and security. Experience with Alibaba Cloud ACK or equivalent managed Kubernetes services.
Preferred Qualifications & Technical Skills
1. CDN & Edge Computing Experience configuring and managing enterprise CDN solutions, preferably Akamai or Tencent Cloud EdgeOne. Understanding of CDN caching strategies, cache invalidation, cache-control policies, and content delivery optimization. Experience configuring CDN security policies, WAF, access control, and edge security rules. Familiarity with edge computing, edge rules, and traffic routing optimization. Ability to troubleshoot CDN-related performance, availability, and security issues.
2. Scripting & Automation Experience developing automation scripts using Python, Bash, Shell, or similar scripting languages. Ability to automate infrastructure operations, deployment processes, system configuration, and routine maintenance activities. Experience improving DevOps backend platforms through automation, integration, and workflow optimization. Familiarity with REST APIs and integration between cloud platforms, CI/CD tools, and enterprise systems.
3. Cloud Networking Good understanding of enterprise cloud networking concepts, including VPC, vSwitch, routing tables, gateways, NAT, VPN, DNS, and load balancing. Experience designing or troubleshooting Alibaba Cloud Enterprise Network architectures. Familiarity with Cloud Enterprise Network (CEN), VPC connectivity, hybrid-cloud networking, and network segmentation. Understanding of network security, traffic routing, and connectivity between cloud and on-premises environments.
Professional Experience & Education Bachelor™s degree in Computer Science, Information Technology, Software Engineering, or a related technical discipline.
7+ years of experience in IT Infrastructure, Cloud Engineering, DevOps, Platform Engineering, or related technical roles.
3+ years of hands-on experience in a senior DevOps or Cloud Platform Engineering role. Proven experience supporting enterprise-scale production environments and business-critical applications. Strong analytical, troubleshooting, and problem-solving skills.
Ability to independently investigate complex technical issues and deliver sustainable engineering solutions. Strong ownership, collaboration, and communication skills.
Good written and spoken English, with the ability to collaborate effectively with international technical teams. Additional Advantages Experience supporting large-scale hospitality, e-commerce, travel, financial services, or other high-availability enterprise platforms.
Experience working with globally distributed Development, Infrastructure, Security, and Operations teams. Familiarity with DevSecOps, GitOps, cloud security, and enterprise change management. Relevant certifications in Alibaba Cloud, Kubernetes (CKA/CKAD), Terraform, or cloud security.