Senior DevOps & Integration Engineer (GxP, Kubernetes, MQTT, OT)

RITS Software House, part of RITS Group, is an IT company specializing in software development and high-level service provision for domestic and international clients.

• Professional experience as a DevOps or integration engineer in projects using Kubernetes and MQTT brokers; experience in OT environments is an advantage.
• Practical knowledge of Infrastructure as Code tools (e.g., Terraform), Helm, CRD/Operator Patterns, and GitOps tools (ArgoCD, Flux).
• Skills in designing, implementing, and optimizing MQTT brokers and configuring Kubernetes clusters for high availability and performance.
• Familiarity with industrial protocols (OPC UA, Modbus, Profinet, EtherNet/IP) and edge-to-cloud integration.
• Experience in regulated environments (GxP) and processes for computer system validation (CSV, IQ/OQ) and ALCOA+ principles.
• Knowledge of security technologies: mTLS, cert-manager, RBAC, ACL, and network segmentation compliant with Purdue/ISA-95.
• Ability to create and maintain automated CI/CD pipelines (GitHub Actions, ArgoCD, Flux) and monitoring tools (Prometheus, Grafana, Loki).
• Higher technical education or equivalent professional experience in IT systems, automation, or related fields.
• Communication skills enabling collaboration with IT, OT teams, and business stakeholders.

• Operate and manage the lifecycle of Kubernetes clusters and deploy high-availability MQTT brokers using Helm, CRD, and Operators.
• Maintain fully reproducible, versioned infrastructure deployments to prevent configuration drift across development, testing, validation, and production environments.
• Optimize MQTT broker connection parameters, message queues, and JVM memory for high volume and low latency processing.
• Configure persistent container storage volumes (CSI) and manage low-latency network plugins (CNI) for thousands of edge connections.
• Build and maintain reliable interfaces between IT networks and plant systems (SCADA, MES, historians, PLC).
• Implement and maintain edge gateways converting industrial protocols (OPC UA, Modbus, Profinet, EtherNet/IP) into standardized MQTT payloads.
• Design secure, deterministic data routes according to Purdue/ISA-95 models through network segments, firewalls, and DMZ zones.
• Implement unified payload schemas, serialization (e.g., Protocol Buffers, JSON), and semantic context preservation from sensors to cloud.
• Create, execute, and automate IQ/OQ validation protocols in containerized environments.
• Maintain data integrity according to ALCOA+ principles.
• Enforce GitOps patterns (ArgoCD/Flux) for versioned, auditable change control.
• Implement secure communication channels using mTLS / MQTT-over-TLS with certificate managers (e.g., cert-manager).
• Manage RBAC and MQTT broker ACLs for fine-grained access control.
• Deploy IT/OT telemetry and monitoring solutions (Prometheus, Grafana, Loki) and participate in incident management.