DevOps Architect

Company Overview

Synkcode FZCO, situated in Dubai Silicon Oasis, UAE, is a forward-thinking software company specializing in blockchain and AI-driven innovative solutions. They aim to revolutionize technology landscapes by developing cutting-edge software tailored for complex industrial and business needs worldwide.

Role Summary

We are in search of an accomplished Platform Deployment Engineer specializing in Red Hat Enterprise Linux virtualization and Kubernetes orchestration. Your core responsibility will be to deploy and manage a segmented single-host RHEL/KVM environment supporting a Kubernetes platform within a digital transformation project. The role entails constructing the virtualization infrastructure, deploying and configuring API gateways and reverse proxies, provisioning segmented Kubernetes worker nodes, and enforcing network, firewall, and security controls as per authorized architectural designs.

Platform & Virtualization Responsibilities

• Install, configure, and secure RHEL as the KVM hypervisor for hosting virtual machines.
• Develop and maintain Open vSwitch/Linux bridge networking mapping VM interfaces to VLANs such as operations, database, KVM host, private/public workers, backup, inbound/outbound DMZs.
• Provision and uphold VLAN-segmented virtual networks strictly adhering to approved VLAN allocation tables, avoiding unauthorized trunking or routing.
• Configure isolated public-worker network paths limited to hypervisor use and coordinate segmentation controls compliant with managed firewall policies.

Kubernetes Platform Engineering

• Deploy and maintain a Kubernetes cluster with distinct public and private worker node groups aligned to specified VLAN and subnet assignments.
• Implement default-deny NetworkPolicies, namespace isolation, and approved service/DNS exposure rules to prevent unauthorized same-VLAN or cross-subnet API bypass.
• Enforce strict workload placement ensuring public workloads reside solely on public nodes and private workloads on private nodes, unless formally exempted.
• Support cluster capacity planning, scaling, health monitoring, and document node and network interface mappings for detailed design registers.

Network Security and Segmentation

• Enforce segmentation applying default-deny policies between zones such as inbound/outbound DMZ, public/private worker groups, data, and operations/backup.
• Collaborate with firewall, WAF, and NAT teams to propose, validate, and test firewall rules, NAT policies, and stateful return traffic regulations.
• Manage controlled DNS resolution, including FQDN/IP/port allowlists and outbound egress restrictions.
• Ensure routing configurations across zones align with approved tables, disallowing unauthorized cross-VLAN or cross-role network paths.

Validation, Testing and Documentation

• Perform comprehensive validation tests verifying allowed and denied network traffic, documenting evidence for security and architectural approval.
• Maintain detailed LLD records including firewall rules, route tables, NAT/DNS entries, VLAN registers, and worker-node address logs.
• Address outstanding configuration elements with Network, Platform, and Cybersecurity teams.
• Contribute to operational documentation focused on certificate management, backup and restore, monitoring, and incident escalation procedures.

Operations and Monitoring

• Integrate logs from WAF, firewall, API gateways (APISIX, NGINX), Kubernetes, NAT, and DNS into central SIEM and logging systems.
• Configure service health checks, availability monitoring, and alerts for gateways, proxies, and Kubernetes endpoints.
• Participate in high-availability planning and document any acceptance of risk related to single-host deployment scenarios.

Additional Information

This position is based in Pune, India. Candidates from all educational backgrounds are welcome to apply. The salary range offered is between 1,000,000 and 2,000,000 INR annually.