We are hiring a Senior DevOps Engineer to take ownership of critical infrastructure and drive meaningful improvements across Buckhill's DevOps capabilities. This role calls for strategic thinking, technical leadership, and genuine accountability for production systems where reliability, security, and scalability directly shape the client experience.
You will shape architectural decisions, mentor engineers, champion automation, and bridge the gap between development, operations, and security. You will operate, and continuously improve a complex, multi-cloud Kubernetes environment supporting single-tenant client deployments with strict compliance and data-residency requirements.
This role is for someone who has done this before. We need an engineer who can walk into a production incident, lead the response, and follow up with systemic improvements.
Croatia: €4.5k - €5k (Gross 1, monthly)
Croatia: €54k - €60k (Gross 1, annual)
United Kingdom: £69.6k - £77.4k (Gross, annual)
Europe, outside of Croatia: €56.6k - €76.8k (Gross 2, annual)
Africa & Sri Lanka: €56.6k - €69.9k (Gross 2, annual)
Rest of the world: €56.6k - €90.8k (Gross 2, annual)
Minimum 6 years in DevOps, SRE, or infrastructure engineering roles, with clear progression into senior-level ownership and technical leadership.
Degree in Computer Science, Software Engineering, or equivalent demonstrable experience.
Deep, production-grade Kubernetes experience - cluster management across EKS, AKS, or self-managed deployments. Comfortable with RBAC, network policies, Helm, HPA, pod disruption budgets, and day-2 operations at scale.
Strong cloud platform expertise (AWS and/or Azure) - multi-account architecture, IAM, VPC design, VPN, load balancers, DNS, and security best practices.
Advanced GitLab CI/CD proficiency - designing and maintaining complex multi-stage pipelines with security gates, caching strategies, and artefact management.
Solid Infrastructure as Code expertise with Terraform or OpenTofu - module design, state management, remote backends, and team-wide governance.
Proficient scripting in Bash and/or Python for automation, tooling, and integration.
Strong observability experience - Prometheus, Grafana, Loki, Tempo, or equivalent for monitoring, alerting, and distributed tracing in production.
Proven security knowledge - vulnerability scanning, secrets management (Vault/OpenBao), DevSecOps integration, and familiarity with compliance frameworks.
Incident management experience - on-call rotations, P1/P2 escalation, root cause analysis, and post-incident review processes.
Clear, structured communicator who can explain complex infrastructure decisions to both engineers and non-technical stakeholders.
Track record of mentoring junior and mid-level engineers.
Strong sense of ownership - you follow through, document decisions, and leave systems better than you found them.
Mandatory certifications
Candidates must hold at least one of the following active certifications. Kubernetes certifications are strongly preferred given that our entire compute platform runs on Kubernetes.
CKA - Certified Kubernetes Administrator
CKS - Certified Kubernetes Security Specialist
AWS Certified Solutions Architect (Associate or Professional)
AWS Certified DevOps Engineer — Professional
HashiCorp Terraform Associate
Azure DevOps Engineer Expert (AZ-400)
Nice-to-have certifications
CKAD - Certified Kubernetes Application Developer
PCA - Prometheus Certified Associate
AWS Certified Security - Specialty
Azure Administrator Associate (AZ-104)
Azure Solutions Architect Expert (AZ-305)
CISSP or equivalent security certification
ISO/IEC 27001 Lead Implementer or Auditor
Linux Foundation Certified System Administrator (LFCS)
GitLab Certified CI/CD Associate
Design, implement, and evolve scalable infrastructure across AWS, Azure, and on-premises environments, including multi-account strategies, VPC architecture, VPN connectivity, and security controls.
Architect and maintain Infrastructure as Code using OpenTofu/Terraform and establish reusable modules, enforce governance, and drive team-wide IaC adoption.
Contribute to capacity planning and cloud cost optimisation across AWS and Azure, ensuring infrastructure spend aligns with business needs.
Own Kubernetes cluster operations across EKS, AKS, and on-premises deployments - lifecycle management, version upgrades, RBAC, network policies, resource quotas, and production-grade troubleshooting.
Drive adoption of GitOps workflows and progressive delivery strategies.
Lead blue/green rollouts for infrastructure-level changes (cluster upgrades, addon deployments) and oversee rolling deployments for application workloads.
Own and optimise GitLab CI/CD pipelines - multi-stage pipelines with integrated security scanning, artefact management, and automated quality gates across all environments.
Maintain and extend the standardised pipeline catalogue serving 26+ service templates, ensuring consistency across client deployments.
Define and implement observability strategies using the Grafana OSS stack (Mimir, Loki, Tempo, Pyroscope, Alloy, OnCall) and Prometheus - comprehensive monitoring, alerting, distributed tracing, and continuous profiling across all environments.
Serve as DevOps Lead for P1/P2 events - lead the DevOps resolution and response, help to coordinate communication, participate on the root cause analysis, and implement preventive measures.
Maintain and improve on-call processes and escalation procedures.
Own secrets management across the infrastructure stack, including OpenBao (Vault fork) with Kubernetes-native authentication and CI/CD integration.
Champion DevSecOps practices - automated vulnerability scanning (Trivy, Docker Scout), SBOM generation, container image hardening, and compliance aligned to ISO 27001.
Harden the security posture of containerised workloads - image scanning at build and runtime, network policies, pod security standards.
Automate provisioning, configuration, and operational tasks using Ansible, Windmill, and scripting (Bash, Python).
Evaluate and recommend emerging tools and methodologies that align with Buckhill's strategic direction and compliance obligations.
Mentor and develop DevOps engineers - code reviews, pairing sessions, knowledge transfers, and raising the overall technical bar.
Maintain high-quality documentation - architecture decision records, runbooks, incident post-mortems, and operational procedures in Confluence and GitLab.