DevOps Engineer, Frontend (M/F) | Rabat (Morocco)

Ce que nos collaborateurs aiment le plus chez nous ❤ : Pour consulter leurs avis certifiés

Company culture :

Sofrecom Maroc stands out for its strongly collaborative culture, where people, trust and employee well-being are central priorities. A close management approach promotes support, accountability and long-lasting teamwork. This collaborative foundation is complemented by a notable innovation dimension, encouraging initiative, agility and experimentation. Structured processes ensure reliability and operational efficiency, while performance-driven practices play a more supportive and balanced role.

Job :

Context
Reporting to the IDH Infra team, you will work in a Huawei Cloud Stack (HCS) private cloud environment, within an ecosystem combining managed services and resources deployed from scratch, including Kubernetes clusters hosting data operators (Spark, Strimzi/Kafka, Airflow...).
The tooling is based on GitLab (code management, GitLab Registry, GitLab CI), Terraform, Ansible, Helm, and Kustomize.
The team provides project teams with a set of infrastructure enablers: ready-to-use cross-functional components (identity, observability, secrets, service exposure...). This position is dedicated to the development and evolution of these enablers: it is a developer role, with a good understanding of the cloud-native execution environment.
Main Missions
1. IAM - Ory (Kratos, Hydra, Keto, Oathkeeper)
Develop evolutions for the IAM component: authentication flows (login, registration, MFA, account recovery), identity federation, and SSO.
Integrate applications via OAuth2 / OpenID Connect (Hydra): manage clients, scopes, consent, tokens.
Model and implement authorization policies (Keto, Zanzibar-type model) and access rules (Oathkeeper).
Develop specific components: self-service UI, login/consent services, hooks and webhooks, connectors to existing directories (LDAP/AD).
Contribute to application maintenance and operations: Ory version upgrades, schema migrations, non-regression tests.
2. Observability
Design and evolve the observability stack: metrics (Prometheus), logs (Loki), traces (Tempo / Jaeger), visualization (Grafana).
Standardize application instrumentation with OpenTelemetry (SDK, collector, conventions).
Develop exporters, dashboards, and alerting rules "as code"; define reusable SLOs/SLIs.
Provide project teams with ready-to-use templates (libraries, Helm charts, dashboard templates).
3. Other infrastructure enablers
Secrets: integrate HashiCorp Vault (Kubernetes auth, secret injection, rotation).
Certificates: Cert-Manager, internal issuers and PKI, lifecycle automation.
Service exposure: Ingress controllers and API Gateway (routing, rate limiting, front-end authentication).
S3-compatible object storage (MinIO): self-service provisioning and access policies.
Develop Kubernetes operators or controllers and internal tools (CLI, API) to expose these components as self-service.
4. Industrialization & Quality
Package enablers with Helm and Kustomize and deliver them via GitLab CI (build, tests, security scan, publication in GitLab Registry).
Write automated tests (unit, integration, end-to-end) and apply code review best practices.
Write technical documentation and user guides for project teams.
Provide occasional support to operations and project teams on the enablers.