Senior DevOps Engineer
About the company
Oivan is looking for a Senior DevOps Engineer to own the platform that runs our internal technology, including the AI agents we build and operate for ourselves. You will report directly to the CTO and shape how Oivan ships, runs and secures its own systems.
Your tasks
This is an internal technology role, not a client delivery position. You will build and run the platform behind Oivan's own products and internal systems, the pipelines, clusters, cloud infrastructure and observability that everything else depends on. A large part of the work is deploying and operating AI agents. Oivan builds AI into its own operations, and you will be the engineer who takes those agents from a working prototype to something that runs reliably in production, with the model endpoints, orchestration, data stores, guardrails and monitoring that requires. You report directly to the CTO, which means you have a real say in platform direction, technology choices and build-versus-buy decisions. We are looking for someone who is comfortable owning a problem end to end rather than waiting for a ticket.
- Design, build and operate the CI/CD pipelines and deployment platform for Oivan's internal applications and services.
- Deploy, run and monitor AI agents and LLM-backed services in production, model endpoints, orchestration layers, vector stores, evaluation and the guardrails around them.
- Own our Kubernetes clusters end to end: provisioning, upgrades, autoscaling, networking, ingress, secrets and workload management.
- Manage cloud infrastructure, with clear cost visibility and sensible guardrails.
- Build observability that people actually use, metrics, logs, traces, alerting and dashboards.
- Automate everything repeatable with Infrastructure as Code.
- Harden the platform: identity and access, secrets management, network policy, patching and vulnerability management.
- Support the internal front-ends and the services behind them through build, release and runtime.
- Work with the CTO on platform roadmap, tooling decisions and where we build versus buy.
- Act as the escalation point for internal platform incidents, and drive the follow-up that stops them recurring.
Requirements
Must have
- 5+ years in DevOps, platform engineering or SRE, operating at strong medior to senior level.
- Hands-on Kubernetes in production, GKE, EKS or on-premise. Not just deploying to a managed cluster, but owning it
- CI/CD ownership — designing and running pipelines, not only using them.
- Infrastructure as Code — Terraform, Pulumi or equivalent.
- Cloud platform experience at production scale.
- Linux administration and scripting — Bash and Python.
- Containers and registries — Docker, image hygiene, supply chain basics.
- Observability — Prometheus, Grafana, centralized logging and alerting.
- Secrets management and identity across services and environments.
- Networking fundamentals — DNS, TLS, load balancing, firewalls.
- Advanced English and strong communication. You will work directly with the CTO and across teams, and you will be expected to explain technical decisions clearly to non-specialists.
- Based in Thailand, able to work from Khon Kaen. Bangkok is also a possibility for the right candidate.
Good to have
- Deploying and operating AI agents or LLM-backed services in production — this is the fastest way to make an impact here.
- Google Cloud Platform specifically — GKE, Cloud Run, Vertex AI, Cloud Build.
- Angular — enough to support front-end build and release pipelines and to work with the front-end team.
- GitOps — Argo CD, Flux or Rancher Fleet.
- Service mesh or API gateway experience.
- Building reusable Terraform modules and platform abstractions.
- Cost optimisation and FinOps practice.
- DevSecOps tooling and security certifications
What we offer
- 13th month salary
- 15 days annual leave, plus 15 sick leave days
- Premium insurance and full insurance salary
- Annual health check-up
- Self-study time and company-sponsored development — an average of 2 hours per week
- Flexible hours and hybrid work
- MacBook Pro, screen protector, mouse and headphones
- Company-paid team lunch weekly
- Travel opportunities to Oivan's international locations and client sites