Senior Cloud & Kubernetes DevOps Engineer

About The Role & Project We are launching an ambitious greenfield infrastructure initiative to build a modern, scalable, and fully automated cloud platform. Built on robust open-source foundations — including Apache CloudStack, OpenStack, and Kubernetes — this platform will deliver secure, highly available, and self-service containerized infrastructure tailored for high-compliance and performance-critical operations. As a Senior Cloud & Kubernetes DevOps Engineer, you will be instrumental in designing and bootstrapping this platform from the ground up. You will own the end-to-end Infrastructure as Code (IaC) architectures, build enterprise-grade Kubernetes container platforms, establish modern GitOps/CI/CD pipelines with GitLab, and implement cloud-native open-source technology stacks. Your Role In this role, you will take lead ownership of provisioning, Kubernetes orchestration, automation, and pipeline integration for our new open-source cloud platform. You will: Design & Provision Greenfield Cloud Architectures: Architect declarative, reproducible cloud infrastructure using Apache CloudStack or OpenStack integrated with automated compute, storage (e.g., Ceph), and networking topologies.Architect Enterprise Kubernetes Ecosystems: Design, deploy, and manage production-grade Kubernetes clusters on top of hybrid cloud platforms, enabling dynamic container workloads at scale.Master Infrastructure as Code (IaC): Lead the strategy and automated deployment of virtualized and cloud-native resources using Terraform or Pulumi (Go).Build Modern GitOps & Container Pipelines: Engineer robust CI/CD, container registry integrations, and GitOps workflows in GitLab CI/CD (using ArgoCD) for automated application and cluster lifecycle management.Automate & Orchestrate: Automate day-0 to day-2 cluster operations, node provisioning, and configuration management using Ansible, Helm and modern cloud-init mechanisms.Integrate Cloud-Native Open Source Tooling: Implement open-source observability, security, and networking solutions across the stack (e.g., Prometheus, Grafana, OpenAPI, Istio/Envoy, HashiCorp Vault).Ensure Security & Operational Excellence: Enforce strong container security, network policies, RBAC, and self-healing mechanisms to ensure high availability across environments. What You Bring Technical Expertise Kubernetes & Containers: 3+ years of hands-on experience designing, operating, and troubleshooting Kubernetes clusters in production, including strong proficiency with Helm and cloud-native networking (CNI).Cloud Platforms: Experience administering, configuring, or automating Apache CloudStack or OpenStack environments.Infrastructure as Code (IaC): Deep hands-on experience using Terraform or Pulumi to automate virtualized, containerized, networking, and storage infrastructure.CI/CD & GitOps: Advanced expertise in GitLab / GitLab CI, including building reusable pipeline templates, containerized build environments, dynamic environments, and GitOps delivery frameworks.Scripting & Development: Strong proficiency in Python/Go and Bash for custom tooling, Kubernetes operators, API integrations, or IaC scripts.Linux & Systems Fundamentals: Strong expertise in Linux administration (Debian/Ubuntu, RHEL/Rocky), hypervisors (KVM), storage systems (Ceph, LVM), and core networking concepts (VLANs, VXLAN, BGP). Mindset & Soft Skills Greenfield Architecture Mindset: Proven ability to build solutions from scratch, establish standard operating procedures, and define clean, scalable architecture patterns.Open Source & Cloud-Native Passion: Active interest in CNCF projects, open-source cloud technologies, and community-driven tools.Collaboration & Communication: Clear communication skills with the ability to articulate architectural decisions to cross-functional engineering teams.On-Call Flexibility: Readiness to participate in shared operational escalation and on-call rotations as the platform matures. Bonus Points (Optional Plus) Kubernetes certifications such as CKA (Certified Kubernetes Administrator), CKAD, or CKS (Certified Kubernetes Security Specialist).Experience with service meshes (Istio, Linkerd) and policy-as-code frameworks (Kyverno, OPA / Rego, or Pulumi Crossguard).Experience with secrets management (HashiCorp Vault) and advanced GitOps engines (ArgoCD / Flux).Exposure to public cloud providers (AWS, Azure, GCP, or OCI) for multi-cloud or hybrid infrastructure setups. Why Join Us? Greenfield Impact: Build a modern Kubernetes and open cloud platform from scratch without the burden of legacy code or technical debt.Open Source First: Work in an engineering environment that prioritizes open-source tools, CNCF standards, and community best practices.Growth & Empowerment: Flat Nordic-style culture, strong emphasis on autonomy, and direct influence over architectural choices.Modern Stack: Full backing to use cutting-edge tools like Pulumi, GitLab CI, Cilium, and Kubernetes to craft ideal developer and platform experiences. Benefits Up to 6 weeks of paid time off per year5 sick days per yearFlexible working hoursPossibility to work from homeFlexible cafeteria account for leisure (18,000 CZK per year) allowing you to use points for MultiSport, public transport tickets, or contribute to your pension savingsMeal vouchers in the amount of 200 CZK per workday (Aeven covers 55%)Referral bonus (20,000 – 60,000 CZK)Free snacks on Mondays and monthly get-togethersFree fruits and vegetables every dayHeight-adjustable tablesCo-working offices in Ostrava and BrnoCzech language lessonsAnnual flu vaccination for free