Senior DevOps Engineer

TBC Bank Uzbekistan, the first digital bank in Uzbekistan and a part of TBC Bank Group PLC, commenced its operations in 2020. Today, the bank is rapidly developing, offering retail banking solutions through its innovative fintech platform. Over 4 million registered users have access to banking services via its mobile application. "Making People's Life Easier" - the core principle of TBC Bank's operations. By advancing digital technologies across all spheres of life, TBC Bank is dedicated to building a bank free from queues, physical offices, bureaucracy, complex terminologies, and lengthy waits.

We are looking for talented individuals with Senior DevOps Engineering experience to join our team

Primary Focus:

• Build and operate highly available Kubernetes platforms (EKS/EKS-Anywhere on vSphere) and supporting AWS networking, storage, and DNS (Route 53);
• Implement Infrastructure-as-Code and GitOps (Terraform, Helm, Argo CD/Flux) for repeatable, audited changes;
• Design and maintain CI/CD pipelines (GitHub Actions/GitLab CI) with progressive delivery and policy controls;
• Own observability (Prometheus, Grafana, Loki, alerting), SLOs/error budgets, incident response and post-mortems;
• Ensure platform security and compliance (secrets management, image scanning, RBAC/IAM, PCI-DSS/ISO 27001 controls);
• Plan and execute backup/restore, disaster recovery, and multi-DC failover; capacity and cost optimization;
• Operate ingress/gateway and L4/L7 load balancing (Emissary/Traefik/Nginx), CNI (Cilium/Calico), and GSLB/DNS (dnsdist/PowerDNS/Route 53);
• Support core data/messaging platforms (PostgreSQL, Kafka, Redis) with HA and performance tuning.
  

Qualifications:

• 5+ years in DevOps/SRE/Platform Engineering running production systems at scale;
• Strong Kubernetes expertise (cluster lifecycle, upgrades, scaling, zero-downtime deploys);
• Solid AWS knowledge (VPC, IAM, ALB/NLB, Route 53, S3) and Linux fundamentals;
• Infrastructure-as-Code (Terraform/Terragrunt), GitOps (Argo CD or Flux), Helm/Helmfile;
• CI/CD design and automation (GitHub Actions/GitLab CI), artifact management, release strategies;
• Observability stack (Prometheus/Grafana/Loki), on-call experience, incident management and SLOs;
• Security-by-default mindset: Vault/KMS, image scanning/SBOM, policy as code (OPA/Gatekeeper/Kyverno), hardening;
• Networking fundamentals (TCP/IP, TLS/mTLS, BGP/Anycast concepts, L7 proxies), troubleshooting skills;
• Scripting in Bash/Python (Go is a plus); documentation and collaboration skills;
• Nice to have: vSphere/EKS-Anywhere, MetalLB (BGP), Cilium/eBPF, service mesh/Emissary, Kafka/PostgreSQL ops, Ceph/NFS, exposure to PCI-DSS/ISO 27001.

Working with us means:

• An open atmosphere and vibrant team life without unnecessary bureaucracy or dress code;
• Medical insurance with extended coverage after the probation period;
• Coverage for conference participation, discounts for English language courses, and access to educational platforms (Coursera, Udemy);
• Internal meetups: lightning & thunder talks;
• High-performance equipment and additional monitors for productive work;
• Class "A" office in the city center
• A multicultural team (Georgia, Russia, Poland, Kazakhstan, Kyrgyzstan, Ukraine, Tajikistan);
• Referral program "Bring a Friend" with bonus opportunities;
• Coffee points for snacks at any time;
• Team-building and sports events that foster team spirit.