DevOps Engineer - Kubernetes

Enterprise Bot is the leading provider of GenAI, Conversational AI, and automation software, headquartered in Zurich, Switzerland. Our intelligent virtual assistants and automation tools help organizations improve efficiency, reduce costs, and deliver exceptional customer experiences across industries such as banking, insurance, and logistics. Our mission is to become the world’s #1 AI-driven automation software provider within the next five years. We work with leading companies such as the SIX Group (Swiss Stock Exchange), SWICA, Generali, and others to enhance customer interactions and automate business processes using our cutting-edge Conversational AI technology. Our global team includes more than 70 highly skilled professionals from diverse backgrounds. We foster an open, progressive company culture with state-of-the-art technology and flat hierarchies. At Enterprise Bot, you’ll experience a unique blend of passion, purpose, challenge, and fun. We are looking for an Automation-Focused DevOps Engineer with 2-3 years of experience to support the deployment, operation, automation, and reliability of our conversational AI platform, which runs entirely on Kubernetes. Our workloads run primarily on Google Kubernetes Engine (GKE) on GCP, with additional on-premise Kubernetes/OpenShift deployments for enterprise clients in regulated industries. Our platform is fully GitOps-driven and built on cloud-native open-source tooling. You will work closely with software engineers to keep clusters healthy, ship changes safely through Argo CD, and ensure smooth, secure, and reliable software delivery. A key focus of this role is automation. You will help identify repetitive operational tasks, build scripts and automation workflows, improve CI/CD and GitOps processes, automate infrastructure and Kubernetes operations, and reduce manual intervention across deployments and day-to-day platform operations. This is an excellent opportunity for someone passionate about Kubernetes, DevOps automation, cloud-native tooling, GitOps, and Infrastructure as Code (IaC) who wants to grow in a fast-paced, AI-driven, and compliance-conscious environment. Key Responsibilities Support GitOps-based application delivery with Argo CD (including Dex/OIDC SSO): help manage Argo CD applications, Helm charts, and Kubernetes manifests across development, staging, and production clusters. Assist in maintaining GitLab CI pipelines that build container images and keep upstream OSS image mirrors up to date in Docker Hub and GCP Artifact Registry (version upgrades, CVE patching). Help operate GKE clusters day to day: namespaces, Deployments, StatefulSets, DaemonSets, CronJobs, ConfigMaps and Secrets, PersistentVolumes/PVCs, and node pools. Support the ingress and API gateway layer: ingress-nginx controllers, the Kubernetes Gateway API with Envoy-based ingress (Envoy Gateway) including Gateway/HTTPRoute configurations, and Kong (hybrid CP/DP mode), with TLS certificate lifecycle managed via cert-manager. Assist with secrets management using HashiCorp Vault and the Vault Secrets Operator (syncing Vault secrets into Kubernetes). Help configure workload autoscaling with KEDA ScaledObjects and Kubernetes-native mechanisms. Monitor cluster and application health using the Prometheus Operator stack (Prometheus, Alertmanager, Grafana, node and blackbox exporters) and centralized logging with Loki and Grafana Alloy; assist in troubleshooting pod, networking, DNS, and storage issues. Support stateful data stores running in our clusters — PostgreSQL, MongoDB, Redis, Elasticsearch, MinIO, and PocketBase — including their Prometheus exporters and alerting. Contribute to platform security operations: RBAC, network policies, ClamAV-based file scanning, and container image vulnerability management. Contribute to infrastructure automation using Bash and Python scripting. Participate in backup, disaster recovery, and incident response procedures for cluster workloads. Document cluster configurations, deployment runbooks, and operational procedures, supporting audit and compliance requirements (SOC 2, GDPR, ISO 27001). Education Bachelor's degree in Computer Science, Information Technology, or a related field. Experience 2-3 years of experience in DevOps, Cloud Engineering, SRE, or System Administration. Fresh graduates with strong Kubernetes-focused internships, home labs, or academic projects are encouraged to apply. Technical Skills Solid understanding of Linux system administration fundamentals. Familiarity with Git and version control workflows. Automation mindset: Ability to identify repetitive operational tasks and automate them using Bash, Python, Go, CI/CD pipelines, Terraform, or Kubernetes-native tooling. Hands-on experience with Docker: building images, writing Dockerfiles, and managing container lifecycles. Working knowledge of core Kubernetes concepts: Pods, Deployments, StatefulSets, Services, Ingress, ConfigMaps, and Secrets — this is the core of the role. Exposure to Helm or writing Kubernetes YAML manifests. Familiarity with at least one cloud platform, preferably GCP/GKE. Exposure to CI/CD tools, preferably GitLab CI. Basic knowledge of databases and data stores such as PostgreSQL, MongoDB, or Redis; exposure to Elasticsearch, MinIO, or PocketBase is a plus. Intermediate scripting skills in Bash and/or Python or Go . Understanding of networking fundamentals: HTTP/HTTPS, DNS, TLS/SSL certificates, load balancing, and Kubernetes Services/Ingress networking. Familiarity with monitoring and logging concepts (Prometheus, Grafana, Loki, or similar). Preferred Skills Hands-on exposure to any of the following is a strong plus — we don't expect all of them at this level: GitOps workflows with Argo CD (or Flux) and app-of-apps / ApplicationSet patterns. Strong interest in automation, with the ability to identify repetitive operational tasks and automate them using Bash, Python, Go, CI/CD pipelines, APIs, or Infrastructure as Code. The Prometheus Operator / kube-prometheus-stack: ServiceMonitors, alerting rules, Grafana dashboards. Log aggregation with Loki and Grafana Alloy (or equivalent OpenTelemetry collectors). Secrets management with HashiCorp Vault or the Vault Secrets Operator. Event-driven autoscaling with KEDA. cert-manager and TLS certificate automation (Issuers, ClusterIssuers, ACME). API gateways (Kong) and ingress-nginx configuration; authentication concepts such as OAuth2, OIDC, and mTLS. Familiarity with the Kubernetes Gateway API (GatewayClass, Gateway, HTTPRoute) and Envoy or Envoy Gateway. Understanding of Kubernetes operators and CRDs. GKE specifics: node pools, Workload Identity, Cloud NAT, and VPC networking. Infrastructure as Code (Terraform) or configuration management (Ansible). Exposure to on-premise Kubernetes or OpenShift environments. Familiarity with deploying Node.js or Python applications on Kubernetes. Interest in AI/LLM platforms, conversational AI, or MLOps. Strong troubleshooting and problem-solving skills, with the ability to learn quickly in an Agile environment. Be part of a rapidly growing company at the forefront of AI automation and conversational AI solutions used by leading global enterprises. Shape solutions that make a measurable impact for Fortune 500 clients and leading European enterprises. A culture comprised of diverse, global teams who have a passion for collaboration, creativity, and excellence in client service A competitive salary and scope for further advancement. A great environment that promotes open feedback and a flat hierarchy, working at Enterprise Bot is a refreshing mix of purpose, challenge, and fun.