Senior Site Reliability Engineer (SRE / DevOps / DevSecOps) Telkoa · Remote, Egypt-based · Full-time contract

About Telkoa

Telkoa builds SimX , a SIM-native intelligence platform for mobile operators and IoT providers. Our applet runs on the SIM card and streams real-time network, device and location intelligence into a cloud platform built on Kafka, PostgreSQL/TimescaleDB and Kubernetes. Operators use it for dynamic IMSI steering, network quality analytics, device location and security, across fleets of hundreds of thousands to millions of SIMs.

The role

You’ll be the single accountable owner of production : every customer deployment, our infrastructure, releases, monitoring and incident response. Each customer runs a dedicated SimX deployment, on our cloud or on their own Kubernetes, so you’ll run a fleet, not a single platform. Developers build the software; you decide how and when it reaches production, and you keep it secure, available and observable.

This is a senior, hands-on role with a clear path to Lead SRE as we add on-call engineers in other time zones.

What you’ll own

• Deployments and releases: GitOps-based rollouts across all customer environments, staged release strategies (canary, blue-green), zero-downtime upgrades, and a version register of what runs where.
• Infrastructure as code: Kubernetes (K3s/K8s) clusters, networking and environments on cloud and on-premises, managed with Terraform and Helm.
• CI/CD: pipelines from image build to production in GitLab CI, with quality and security gates.
• Reliability and HA: high availability for stateful services (Kafka, PostgreSQL, Kafka Connect/CDC), backup and tested restore, disaster recovery, and capacity planning with load testing.
• Observability: Prometheus, Grafana and Loki across the fleet. You design the alerts that catch problems before customers do.
• On-call and incidents: you carry the pager for production P1s (paid on-call), act as incident commander, and run blameless postmortems that prevent repeats.
• Security (DevSecOps): secrets management, least-privilege and time-bound production access, hardening, vulnerability and dependency scanning, network policy, and support for customer security audits.
• Customer-hosted deployments: release packages, upgrade runbooks and technical guidance for operators running SimX on their own infrastructure.
• Documentation: runbooks and architecture docs, so the team can operate without tribal knowledge.

Your first 90 days

• Get to know the platform, every customer environment and how they’re deployed today.
• Assess security, reliability and operational risks, and agree a prioritized improvement plan.
• Bring all environments under consistent, automated, version-controlled deployment.
• Strengthen secrets management, access control and alerting across the fleet.
• Raise the availability and resilience of the platform’s critical services.

What you bring

• 5+ years in SRE, DevOps or platform engineering, including end-to-end ownership of production systems , not only operating parts of them.
• Strong Kubernetes in production (CKA/CKS a plus), Terraform, Helm, and GitOps (ArgoCD or Flux).
• Hands-on experience operating Kafka and PostgreSQL in production, including HA, replication, backup and restore.
• Real on-call and incident-response experience, and you’re comfortable carrying a pager.
• A strong security mindset: secrets, access control, hardening, auditability.
• Scripting and automation (Python, Bash) and solid Linux and networking fundamentals.
• Clear written English. Runbooks and postmortems are part of the job.

Nice to have

• Telecom, IoT or operator-environment experience.
• CloudNativePG, Debezium or the Confluent stack, and service meshes (Consul, Envoy).
• Multi-cloud and on-premises Kubernetes (AWS, Hetzner, OpenShift).
• ISO 27001 or SOC 2 audit experience.

What we offer

• Real ownership: production is yours, with the authority that goes with it.
• A small, senior, remote team where your work is visible and matters.
• A path to Lead SRE, building the on-call team across time zones.
• Paid on-call and a modern, AI-assisted way of working.
• Hard, interesting problems: a telecom-grade platform running on SIM cards in millions of devices.
• To apply, send your CV with a short note about a production system you owned end to end, and the hardest incident you’ve handled there.