日日噜夜夜草|一级黄色录像高清版|调教白富美加勒比久久|亚洲欧洲精品婷婷|日韩综合无码色色|日韩精品一区妖精视频|亚洲无码中文字幕hd|99亚洲思思丝袜|手机看片国产精品大胆亚洲|成人无码视频一区二区在线播放

Business Value
? Deployment Process
? Secret Management Risks
? AWS Infrastructure Security & Governance
? Environment & Configuration Management
? Infrastructure Performance, Scaling & Optimization
Key Responsibilities
? Own and enforce zero-downtime deployment strategies across all production workloads.
? Design and enforce custom Helm rollback and deployment patterns with automated validation.
? Review and refactor existing Terraform modules to reduce excessive granularity and simplify dependency chains.
? Implement strict CI/CD governance in GitLab and GitHub Actions including mandatory PR approvals, automated security checks (Snyk/SonarQube), and enforced policy gates.
? Migrate secret management away to AWS Secrets Manager or similar.
? Standardize environment drift detection across pre-prod and production via Terraform Cloud and automated config audits.
? Define and maintain infrastructure runbooks, operational SOPs, and DR playbooks.
? Mentor junior engineers, define DevOps KPIs, and participate in postmortems.
Requirements
? Minimum of 3 years of experience in a DevOps, SRE, or Infrastructure Engineering role.
? Solid understanding of Terraform and experience maintaining reusable module libraries.
? Hands-on experience managing workloads on Kubernetes (preferably EKS).
? Working knowledge of CI/CD tools such as GitHub Actions and Helm.
? Familiarity with AWS Cloud services, including networking, RDS/Aurora (PostgresSQL), and container security.
? Competence in observability tooling, especially Datadog dashboards and alert configurations.
? Strong operational mindset with attention to detail in release processes and deployment integrity.
Desirable Experience
? Exposure to GitOps tooling such as ArgoCD or FluxCD.
? Experience developing or integrating Kubernetes operators.
? Familiarity with service-level indicators (SLIs), service-level objectives (SLOs), and structured alerting.
Tools and Expectations
? Terraform / HCP Terraform - Core to infrastructure provisioning. Required to build, refactor, and maintain reusable infrastructure modules across environments, enforce naming/tagging standards, and leverage state management for drift detection and rollback.
? GitHub / GitLab / GitHub Actions - Central to CI/CD workflows. Expected to enforce secure release procedures, set up integration with code quality tools, and prevent direct changes to critical branches.
? Helm - Used for Kubernetes application packaging and deployment. Must implement pre/post deployment logic, rollback plans, and chart lifecycle automation.
? EKS / Kubernetes - Platform for hosting applications. The engineer must manage node pools, service networking, security contexts, and namespace segmentation.
? AWS Services (Amazon RDS/Aurora, VPC, IAM) - Backend for infrastructure workloads. Expected to configure VPC isolation, IAM boundaries, and implement private access wherever possible connecting to PostgresSQL on RDS/Aurora
? Secrets Manager / Kubernetes Secrets / CSI Driver - Secret handling is critical. Migrate legacy init-container pattern to scoped access through Secrets Manager sync or CSI injection.
? Datadog - Observability backbone. Responsible for building actionable metrics, tracking SLOs, and managing alert noise to reduce operational fatigue.
? Cloudflare - Interface layer. Use Terraform to define DNS entries, WAF rules, and validate exposure configuration per environment.
? Snyk / SonarQube / Wiz - Code and container security enforcement. Ensure pipeline integration catches vulnerabilities and provides immediate feedback to development.

About WPP

WPP is the global leader in marketing and communications services and one of the world’s largest creative transformation companies. It comprises leading companies in advertising, media investment management, PR and public affairs, branding and identity, healthcare communications, digital, ecommerce and shopper marketing, and specialist communications. WPP works with 317 of the Fortune Global 500, all 30 of the Dow Jones 30, 62 of the NASDAQ 100, and 61 of the FTSE 100. Headquartered in London, it employs over 100,000 people. The business is listed on the London and New York Stock Exchanges.

Why we’re hiring:

WPP Open, our advanced AI-powered marketing platform, is at the heart of WPP's transformation, redefining how global brands create, plan, and measure campaigns through a seamless operating system. This role offers a pivotal opportunity to immerse yourself in the cutting-edge convergence of cloud-native engineering, AI, and advertising innovation, specifically adapting and scaling this transformative technology for China's unique market.


This role is strategically located in Wuxi, our newly established, state-of-the-art AI innovation hub. Here, you'll join a pioneering team dedicated to engineering intelligent, scalable solutions that empower global brands with unprecedented impact. This isn't just a job; it's an exceptional opportunity to contribute to something truly transformative and directly shape the future trajectory of marketing itself.

Learn more about WPP Open: WPP Open | WPP

運(yùn)維經(jīng)理 - WPP Open China
工作地點(diǎn)：無錫
類型：全職

業(yè)務(wù)價(jià)值
? 部署流程
? 密鑰管理
? AWS基礎(chǔ)設(shè)施安全與治理
? 環(huán)境與配置管理
? 基礎(chǔ)設(shè)施性能、擴(kuò)展與優(yōu)化
主要職責(zé)
? 負(fù)責(zé)并強(qiáng)制執(zhí)行所有生產(chǎn)環(huán)境負(fù)載的zero-downtime部署策略
? 設(shè)計(jì)并實(shí)施自定義Helm回滾和部署模式，包含自動化驗(yàn)證
? 審查并重構(gòu)現(xiàn)有Terraform模塊，減少過度細(xì)粒度化并簡化依賴鏈
? 在GitLab和GitHub Actions中實(shí)施嚴(yán)格的CI/CD治理，包括強(qiáng)制PR審批、自動化安全檢查（Snyk/SonarQube）和強(qiáng)制執(zhí)行策略門控
? 將密鑰管理遷移至AWS Secrets Manager或類似工具
? 通過Terraform Cloud和自動化配置審計(jì)，標(biāo)準(zhǔn)化預(yù)生產(chǎn)和生產(chǎn)環(huán)境中的漂移檢測
? 定義并維護(hù)基礎(chǔ)設(shè)施操作手冊、SOP和DR預(yù)案
? 指導(dǎo)初級工程師，定義DevOps KPI，并參與事故復(fù)盤
任職要求
? 至少3年DevOps、SRE或Infrastructure相關(guān)經(jīng)驗(yàn)
? 扎實(shí)的Terraform知識，并有維護(hù)可重用模塊庫的經(jīng)驗(yàn)
? Kubernetes（優(yōu)先EKS）工作負(fù)載管理的實(shí)際操作經(jīng)驗(yàn)
? 熟悉CI/CD工具，如GitHub Actions和Helm
? 了解AWS云服務(wù)，包括網(wǎng)絡(luò)、RDS/Aurora（PostgreSQL）和容器安全
? 熟練使用可觀測性工具，尤其是Datadog儀表盤和警報(bào)配置
? 具備強(qiáng)烈的運(yùn)維意識，注重發(fā)布流程和部署完整性的細(xì)節(jié)
優(yōu)先考慮經(jīng)驗(yàn)
? 接觸過GitOps工具（如ArgoCD或FluxCD）
? 有開發(fā)或集成Kubernetes Operator的經(jīng)驗(yàn)
? 熟悉服務(wù)級別指標(biāo)（SLIs）、服務(wù)級別目標(biāo)（SLOs）和結(jié)構(gòu)化警報(bào)
工具與期望
? Terraform/HCP Terraform：基礎(chǔ)設(shè)施配置核心。需構(gòu)建、重構(gòu)和維護(hù)跨環(huán)境可重用基礎(chǔ)設(shè)施模塊，強(qiáng)制執(zhí)行命名/標(biāo)記標(biāo)準(zhǔn)，并利用狀態(tài)管理進(jìn)行drift detection和回滾。
? GitHub/GitLab/GitHub Actions：CI/CD工作流核心。需確保安全的發(fā)布流程，設(shè)置與代碼質(zhì)量工具的集成，并防止直接修改關(guān)鍵分支。
? Helm：用于Kubernetes應(yīng)用打包和部署。需實(shí)現(xiàn)部署前后邏輯、回滾計(jì)劃和圖表生命周期自動化。
? EKS/Kubernetes：應(yīng)用托管平臺。需管理節(jié)點(diǎn)池、服務(wù)網(wǎng)絡(luò)、安全上下文和命名空間隔離。
? AWS服務(wù)（Amazon RDS/Aurora、VPC、IAM）：基礎(chǔ)設(shè)施負(fù)載后端。需配置VPC隔離、IAM邊界，并盡可能實(shí)現(xiàn)私有訪問，連接RDS/Aurora上的PostgreSQL。
? Secrets Manager/Kubernetes Secrets/CSI Driver：密鑰處理關(guān)鍵。需將傳統(tǒng)init-container模式遷移至通過Secrets Manager同步或CSI注入的范圍訪問。
? Datadog：監(jiān)控支柱。需構(gòu)建可操作的指標(biāo)、跟蹤SLOs，并管理警報(bào)噪音以減少運(yùn)維疲勞。
? Cloudflare：接口層。使用Terraform定義DNS條目、WAF規(guī)則，并按環(huán)境驗(yàn)證暴露配置。
? Snyk/SonarQube/Wiz：代碼和容器安全執(zhí)行。確保流水線集成能捕獲漏洞并向開發(fā)提供即時(shí)反饋。