Senior DevOps Engineer

Tanggung Jawab

Senior-level position responsible for designing, building, and maintaining the infrastructure and delivery pipeline of a large-scale government web platform. The engineer owns the full DevSecOps lifecycle — from CI/CD pipeline setup and containerized deployment to monitoring, observability, and security hardening.

The role ensures that every module can be built, tested, and deployed independently and reliably, that the production environment meets high availability requirements, and that security controls are embedded at every stage of the pipeline rather than treated as an afterthought. The engineer works closely with backend, frontend, and data engineers to support smooth delivery while maintaining infrastructure stability and compliance with security standards.

Kualifikasi

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 5+ years of DevOps or infrastructure engineering experience in production environments.

Hands-on experience setting up and maintaining CI/CD pipelines — GitLab CI or equivalent — covering build, test, SAST, dependency scanning, and deployment stages with environment-specific approval gates.

Experience deploying and managing containerized services on baremetal servers using Docker Swarm or Podman — including service configuration, resource limits, and scaling policies.

Proficiency with infrastructure provisioning and configuration management using Ansible — writing and maintaining playbooks for VM provisioning and service configuration.

Experience managing reverse proxy and load balancer configurations — Nginx, Traefik, or equivalent — including TLS termination and routing rules.

Experience configuring and operating centralized monitoring stacks — Prometheus, Grafana — and log aggregation pipelines using ELK or Loki, including dashboard setup and alerting rules.

• Experience setting up and managing API gateways — Kong or equivalent — for routing, rate limiting, and service exposure.
• Solid understanding of network security — WAF configuration, firewall rules, TLS certificate lifecycle management.
• Experience managing secret and credential storage outside of source code using centralized secret management solutions.
• Familiarity with SAST tooling and dependency vulnerability scanning integrated into CI pipelines.

Experience managing multi-environment setups (development, staging, production) with clear promotion workflows and documented approval processes.

Experience designing and automating backup strategies for databases and file storage, including regular restoration testing.

Experience operating infrastructure-level services — Redis cluster, message broker (RabbitMQ or equivalent), and object storage (MinIO or equivalent).

• Infrastructure-as-code discipline — all configuration stored in version-controlled repositories, no manual snowflake environments.
• Strong incident response skills — able to diagnose production issues using observability tooling and coordinate resolution under pressure.
• Experience with PostGIS installation, configuration, and tile server setup for geospatial services. (Plus)
• Experience with image registry setup and management for internal container image distribution. (Plus)
• Exposure to penetration testing support workflows and remediation tracking for VA/pentest findings. (Plus)
• Familiarity with PostgreSQL or ClickHouse operational concerns — replication, monitoring, and backup. (Plus)
• Experience working on government or regulated-sector infrastructure with compliance documentation requirements. (Plus)
• Familiarity with frequency management, spectrum monitoring, or telecommunications domain. (Plus)