Senior Devops Engineer

Job Summary

We are hiring a strong hands-on DevOps Engineer to own our AWS platforms, work knowledge of Oracle Cloud Infrastructure (OCI), run production-grade PostgreSQL as a DBA, and deliver reliable CI/CD with GitLab for Odoo and related services using Terraform. The role focuses on cloud operations, automation, and performance tuning across application and database layers.

Key Responsibilities

• Cloud Platforms (AWS primary + OCI knowledge)
• AWS (primary): Design, build, and operate VPC, EC2/EKS/ECS, ALB/NLB, S3, Route 53, IAM/KMS, CloudWatch, Systems Manager, Backup, and cost optimization.
• OCI (knowledge requirement): Configure and operate VCN, Compute, Load Balancer, Object Storage, Block Volumes, File Storage, OCI IAM/Policies/Compartments, Monitoring/Alarms, Logging, WAF, Bastion, and Cloud Guard.
• Implement secure networking (subnets, routing, security lists/NSGs), image hardening, patching, and cost governance across both clouds.

• PostgreSQL — DBA & Performance:
• Install, upgrade, and harden PostgreSQL; manage replication (streaming/logical), backup/restore (e.g., pgBackRest), and connection pooling (pgbouncer).
• Deep performance tuning with EXPLAIN (ANALYZE), indexing strategies, partitioning, autovacuum tuning, and query optimization.

• Odoo Operations (Linux):
• Deploy, configure, and scale Odoo (workers & long‑polling), manage add‑ons, reverse proxy (Nginx/HAProxy), SSL/TLS, scheduled backups, and Redis caching.
• Troubleshoot end‑to‑end bottlenecks across Python/Odoo ↔ PostgreSQL and the OS/network stack.

• CI/CD & Automation:
• Build GitLab CI/CD pipelines (multi‑stage, environment promotions, blue/green or canary as needed) with quality gates and security scans (SAST/DAST where applicable).
• Manage GitLab Runners and secrets; standardize infra pipelines using Terraform modules & remote state.

• Observability, Reliability & Security:
• Implement metrics, logs, and traces (CloudWatch, Prometheus/Grafana, ELK/OpenSearch or Loki).
• Own incident response and runbooks; drive MTTR down and change success up.
• Apply least privilege (IAM), secrets management (AWS Secrets Manager/HashiCorp Vault), key rotation, and vulnerability management.

• Collaboration & Governance:
• Partner with ERP/Odoo, Infra/SecOps, and Support teams on releases and maintenance windows.
• Maintain architecture docs, SOPs, and contribute to audits and change control.

• Minimum Qualifications (Must‑Have):
• 5+ years in DevOps/SRE/Platform Engineering, including 3+ years as a PostgreSQL DBA in production.
• Strong hands-on AWS architecture/operations/security.
• Working knowledge of OCI services (VCN, Compute, Load Balancer, Object Storage, IAM/Policies/Compartments, Monitoring/Logging, WAF/Cloud Guard).
• Proven GitLab CI/CD experience and solid Terraform (modules, remote state).
• Production experience running Odoo on Linux.
• Strong Linux administration, networking (TCP/IP, DNS, TLS), and scripting (Bash/Python).
• Excellent documentation and cross‑team communication (Arabic & English).

• Preferred Qualifications (Nice‑to‑Have)
• Containers/Kubernetes (EKS) and Helm; container security.
• HashiCorp Vault; Redis; advanced Nginx/HAProxy.
• Open Telemetry; dashboards as code (Grafana/Loki).
• Security/compliance exposure (ISO 27001, SOC 2) and change management.
• Retail/POS integrations; Entra ID SSO.
• Certifications: AWS SAA/SAP/SysOps, Terraform Associate, PostgreSQL admin.

• Success Metrics (KPIs):
• Reliability: SLO attainment; lower MTTR & change failure rate.
• Velocity: Higher deployment frequency; shorter lead time.
• DB performance: Lower p95/p99 latencies; fewer slow queries; healthy vacuum.
• Cost: Month‑over‑month cloud cost efficiency with preserved SLAs.
• Security: Backup success rate, periodic restore drills, and least‑privilege adherence.