DevOps Engineer
Software Engineering
Bengaluru, Karnataka, India
About H2Loop
H2LooP.ai is building next-generation sovereign coding models and context platforms for system engineers across embedded systems, robotics, UAV, avionics, automotive, consumer electronics, and industrial IoT.
Our core team comes from Google, Toshiba, Cisco, Bosch, Philips, and NXP.
As a Founding Engineer, you won’t just write firmware ,you will bridge real hardware with AI-driven engineering workflows and help define how future system engineers build software.
We run a multi-service platform on Kubernetes, serve enterprise customers including on-prem deployments, and are in the middle of a significant infrastructure maturation push — hardening CI/CD, migrating secrets, and building proper multi-environment release discipline. You'll be the first dedicated DevOps hire, working in-person with the engineering team in our Bangalore office.
What you'll own
CI/CD & GitOps
Drive our CI/CD overhaul to completion: immutable image tags, GitOps dispatch, multi-environment overlays (dev / preprod / prod / on-prem)
Own the release pipeline: release branches, RC tags, QA gates, and prod promotion
Enforce secure secret handling in container builds — no secrets in image layers
Kubernetes & infrastructure
Own the Kubernetes config repo: overlay management, autoscaling, ingress, and service mesh
Manage production application workloads, background worker fleets, and stateful services (database, cache, object storage)
Handle on-prem deployments for enterprise customers
Secrets & security
Drive migration from hardcoded secrets to a secrets manager (e.g. GCP Secret Manager, AWS Secrets Manager) with a secrets sync operator
Maintain branch protection and CI gates across all code repositories
Manage TLS, identity provider credentials, and cloud service accounts
Observability
Own the metrics, logging, and tracing stack (e.g. Prometheus / Grafana / Loki / Jaeger or equivalent)
Build and maintain dashboards for platform health, LLM proxy usage, and pipeline throughput
Be the first person paged when things go wrong
Infrastructure reliability
Manage scheduled backups for databases and persistent data stores
Tune autoscaling across heterogeneous workloads (API, document processing, code indexing)
Maintain local development environment tooling and environment parity
Required experience
3+ years in a DevOps / platform / SRE role
Production Kubernetes (GKE, EKS, AKS, or similar) — comfortable with config management, autoscaling, ingress controllers, and service mesh basics
CI/CD pipelines from scratch — gates, matrix builds, environment approvals, cross-repo dispatch (GitHub Actions, GitLab CI, or similar)
Cloud platform experience (GCP, AWS, or Azure) — IAM, secrets management, container registries, load balancers
Container build pipeline hygiene — multi-stage Dockerfiles, secret mounts, layer caching
Linux fundamentals, shell scripting, debugging running services
Strong-to-have
Secrets sync tooling (External Secrets Operator, Vault Agent, or equivalent)
OpenShift or other on-prem Kubernetes for enterprise deployments
Service mesh operations (Linkerd, Istio, or similar)
LLM proxy or AI gateway experience (LiteLLM, Ollama, or similar)
Observability stack depth — log aggregation, distributed tracing, dashboarding
Relational database operations at moderate scale — backups, slow query triage, multi-tenant setups
Python or TypeScript at a reading level — you'll read service code, startup scripts, and task queue configs
What we don't need
A team of one who builds everything from scratch for its own sake. We have a working platform. We need someone who ships reliable improvements methodically, prefers boring infrastructure over clever infrastructure, and communicates blockers clearly in a small team.
First 90 days
Days 1–30: Learn the platform — cluster topology, config repo layout, CI/CD workflows, and infrastructure roadmap. Close out the most pressing security and build pipeline work.
Days 30–60: Drive the overlay restructure and GitOps dispatch pattern live in dev. Stand up the preprod environment.
Days 60–90: Run the first full prod release cycle end-to-end on the new pipeline. Complete the secrets migration to production.
Compensation & logistics
Competitive early-stage equity + salary
In-person, Bangalore office
Small team — direct access to founders and engineering
