DevOps Platform Engineer - Xebia
3 days ago
Girona
About us For more than 20 years, our global network of passionate technologists and pioneering craftspeople has delivered cutting-edge technology and game-changing consulting to companies on the brink of AI driven digital transformation. Since 2001, we have grown into a full service digital consulting company with 5500+ professionals working on a worldwide ambition. Driven by the desire to make a difference, we keep innovating. Fuelling the growth of our company with our knowledge worker culture. When teaming up with Xebia, expect in-depth expertise based on an authentic, value-led, and high quality way of working that inspires all we do. At Xebia, we put ‘People First’—committed to attracting diverse talent and fostering an inclusive, respectful workplace where everyone is valued for their contributions. We welcome all individuals and evaluate solely on the quality of their work and teamwork. About the Role We’re looking for a DevOps/Platform Engineer with hands-on experience implementing and operating DevOps modernization and accelerating our software delivery lifecycle. You’ll design and maintain CI/CD pipelines, standardize deployment patterns, and improve reliability across services. You’ll partner closely with developers, SREs, security, and FinOps to deliver safe, fast, and cost-efficient‑ releases. What You’ll Do • Harness Platform Ownership, • Design, implement, and maintain pipelines (Kubernetes, ECS, serverless, VMs, Harness CD) with multistage approvals, canary/‑blue-green strategies, and automated rollbacks., • Administer CI builds, shared build infrastructure, and caching to optimize developer feedback loops., • Configure Feature Flags for progressive delivery, experimentation, and kill switches‑., • Integrate Harness SRM/Chaos (if applicable) for SLOs, error budgets, verification steps, and resilience testing in the release process., • Partner with FinOps to leverage Cloud Cost Management (e.g. Harness) dashboards, budgets, and guardrails., • Pipeline & Environment Engineering, • Create reusable pipeline templates, modules, and governance policies; codify best practices as “paved roads.”, • Implement secrets management, artifact versioning, and environment promotion (dev → test → staging → prod)., • Standardize infrastructure provisioning with IaC (Terraform, Helm/Kustomize, CloudFormation, ARM/Bicep) and GitOps workflows (e.g., Argo CD/Flux where appropriate)., • Reliability, Security & Compliance, • Embed quality gates (unit/integration/security scans) and deployment verification (metrics/logs/traces) into pipelines., • Enforce least privilege, RBAC, SSO/SCIM, and audit readiness across pipelines and runtime environments., • Contribute to incident response, post incident‑ reviews, and continuous improvement of SLIs/SLOs., • Observability & Performance, • Integrate APM/observability (e.g., Prometheus/Grafana, OpenTelemetry, Datadog, New Relic) with deployment verification and runtime dashboards., • Drive capacity, reliability, and performance optimizations in build and runtime platforms., • Collaboration & Enablement, • Partner with product teams to onboard services to Harness, run enablement workshops, and document self-service‑ guides., • Measure and report delivery metrics (lead time, deployment frequency, change fail rate, MTTR) and drive improvements. What You’ll Bring Must Haves • 3–7+ years in DevOps/Platform/SRE roles (or equivalent), including 2+ years hands on with ‑ with Harness.io CD and/or CI., • Strong CI/CD expertise: pipelines-as-code (YAML), templates, approvals, rollout strategies, and automated rollback., • Solid experience with containers and Kubernetes (cluster operations, Helm/Kustomize, operators) and at least one major cloud (AWS/Azure/GCP)., • Infrastructure as Code (Terraform preferred) and Git-centric workflows (GitHub/GitLab/Azure Repos/Bitbucket)., • Proficiency integrating security and quality gates: SAST/DAST, dependency scanning, image scanning, SBOM, and policy-as-code (Open Policy Agent/Conftest)., • Practical knowledge of observability: metrics, logs, traces, alerting, and deployment verification., • Strong scripting skills (Bash, Python, or Go) and a builder’s mindset for automation., • Hands‑on experience with HashiCorp tooling (e.g., Terraform, Vault, Consul) to standardize infrastructure provisioning and secrets management., • Proficiency with GitHub Actions for CI/CD automation, workflow orchestration, and pipeline governance., • Strong working knowledge of Ansible for configuration management, server orchestration, and environment automation., • Expert level‑level experience with Terraform for Infrastructure‑as-Code (IaC), reusable modules, and ‑Code (IaC), reusable modules, and multicloud‑cloud provisioning. Nice-to-Have • Experience with Harness.io, Harness Feature Flags, SRM, Chaos, or Cloud Cost., • GitOps (Argo CD/Flux), service meshes (Istio/Linkerd), and progressive delivery (Argo Rollouts/Flagger)., • Secrets management (Vault/Secrets Manager/Key Vault), PKI, and workload identity., • FinOps exposure and cost optimization in CI/CD and runtime., • Compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI) and audit prep., • Background in SRE practices, SLOs, and error budgets., • Familiarity operating and integrating Kafka for event streaming, real‑time pipelines, and microservice communication., • Experience deploying and managing Elasticsearch clusters for log analytics, search, and observability use cases., • Knowledge of Redis for caching, message brokering, session management, and performance optimization.
