What a Senior } should know

Applies algorithmic thinking to DevOps: deployment scheduling algorithms for zero-downtime releases, pipeline dependency resolution algorithms, artifact caching algorithms for build acceleration. Designs efficient resource allocation algorithms for CI/CD infrastructure scaling.

Designs async architectures for DevOps automation: concurrent infrastructure operations at scale, async deployment orchestration with rollback support, non-blocking monitoring data aggregation. Mentors team on async patterns for operational tooling.

Designs code quality standards for DevOps tooling: CI/CD pipeline structure, shell script best practices, configuration management code style. Refactors complex deployment scripts into modular, testable automation. Establishes review practices for pipeline reliability, secret management, and infrastructure reproducibility.

Selects optimal data structures for DevOps tooling: directed acyclic graphs for CI/CD pipeline dependencies, tree structures for configuration hierarchy management, key-value stores for deployment state. Optimizes artifact storage and caching structures for build acceleration. Designs efficient data models for infrastructure inventory and change tracking.

Applies OOP/SOLID in DevOps tooling: abstract interfaces for cloud provider abstraction, strategy pattern for deployment strategies (blue-green, canary), template method for standardized pipeline stages. Designs extensible automation frameworks following dependency inversion for testable infrastructure code.

Deploys and maintains Kafka clusters in Kubernetes: configures Strimzi operator, manages topics and partitions, monitors through JMX metrics in Prometheus. Ensures reliable stream processing of infrastructure and CI/CD events.

Develops internal DevOps tools on Flask/FastAPI: infrastructure status dashboards, deployment management API, webhook handlers for CI/CD events. Integrates with Kubernetes API and cloud SDKs through async endpoints.

Deploys and manages Redis clusters for DevOps needs: CI/CD result caching, self-service portal session storage, pub/sub for real-time notifications. Configures Redis Sentinel for high availability, monitors through Prometheus exporter.

Designs fault-tolerant PostgreSQL clusters: Patroni for automated failover, PgBouncer for connection pooling, WAL archiving to S3. Automates migrations in CI/CD, configures monitoring through PostgreSQL exporter in Prometheus.

Designs API for internal DevOps tools: deployment management endpoints, self-service infrastructure API, integrations between monitoring systems. Implements authentication through API keys and OAuth, versioning and rate limiting.

Designs Ansible automation architecture for organization-wide DevOps workflows including rolling deployments, zero-downtime upgrades, and disaster recovery procedures. Implements advanced patterns with custom modules, callback plugins, and Ansible Tower/AWX for scheduled automation and self-service operations. Optimizes execution at scale through strategy plugins, mitogen acceleration, and efficient fact gathering patterns for large inventories.

Designs production architecture on AWS: multi-AZ deployments, EKS with Fargate and Karpenter, complex VPC topologies with Transit Gateway. Optimizes costs through Reserved Instances, Savings Plans and Spot strategies. Configures AWS Organizations and SCPs.

Designs CDN architecture for production: multi-CDN strategy, intelligent routing, edge computing for API. Optimizes global content delivery, configures WAF and DDoS protection at the edge, automates configuration through Terraform.

Designs comprehensive container security system: scanning at all stages (build, registry, runtime), Kubernetes admission controller integration. Implements runtime security through Falco, configures automated base image patching.

Designs containerization strategy: organizational standard base images, rootless containers, distroless final images. Optimizes layers for maximum caching, configures Trivy/Snyk scanning in pipelines. Implements Docker Content Trust and image signing.

Designs library Helm charts for unified deployments: shared templates for all microservices, built-in best practices (security contexts, resource limits, probes). Implements Helmfile for managing multiple releases, tests charts through helm test and ct.

Designs production cluster architecture: multi-tenancy through namespaces and RBAC, service mesh (Istio/Linkerd), custom controllers. Configures cluster autoscaler, optimizes resources through VPA and Goldilocks. Implements GitOps for cluster management.

Designs production-ready Kubernetes deployments: update strategies (rolling, blue-green), PDB and disruption budgets configuration, monitoring through kube-state-metrics. Manages application lifecycle from development to production through GitOps approach.

Designs load balancing architecture for production: multi-level LB (Global → Regional → Pod), GSLB for geo-distribution, circuit breaking. Configures advanced routing through Istio/Envoy, optimizes for latency and throughput.

Designs network architecture for production: Transit Gateway for multi-VPC, VPN and Direct Connect, DNS strategies for failover. Configures Calico/Cilium in Kubernetes for advanced networking, implements network policies and eBPF traffic monitoring.

Designs scalable Terraform infrastructure: modular architecture for 50+ services, Terragrunt for DRY configurations, custom providers. Implements policy-as-code through Sentinel/OPA, automates drift detection and remediation in CI/CD pipelines.

Designs VPN infrastructure for production: redundant site-to-site VPN with BGP, Direct Connect/ExpressRoute as primary with VPN failover. Implements zero-trust alternatives (Tailscale, Boundary), configures monitoring and automatic tunnel failover.

Designs ArgoCD platform architecture for organization-wide GitOps adoption with multi-cluster management. Implements advanced patterns including App of Apps, progressive delivery with Argo Rollouts, and custom health checks for complex workloads. Optimizes ArgoCD at scale with sharding, resource caching, and high-availability controller configurations.

Designs blue-green strategy for production: automated switching with pre/post-deployment hooks, monitoring integration for automatic rollback. Solves database migration, session management and cache invalidation challenges during switching.

Designs canary deployment platform: Argo Rollouts with analysis templates, Prometheus metrics for automatic promotion/rollback. Implements Flagger for service mesh-based canary, configures custom metrics and webhook analyzers.

Designs feature management strategy: architecture for progressive delivery with flags, ArgoCD/Argo Rollouts integration. Implements canary releases through percentage flags, configures observability for evaluating feature impact on metrics.

Designs scalable CI/CD platform on GitHub Actions: self-hosted runners on Kubernetes (ARC), custom actions for the organization, OIDC integration with clouds. Optimizes execution time through caching, parallelism and condition-based execution.

Designs CI/CD platform on GitLab: shared pipeline templates for the organization, dynamic child pipelines, DAG optimization. Configures GitLab Runner autoscaling on Kubernetes, integrates with Vault for secrets, implements compliance pipelines.

Designs GitOps architecture: defines multi-environment promotion strategy (dev → staging → prod through Git), configures progressive delivery (canary/blue-green) through Argo Rollouts, implements drift detection and auto-remediation. Designs RBAC for GitOps with team-scoped access.

Designs CI/CD architecture with Jenkins. Optimizes pipeline speed and reliability. Implements progressive delivery.

Designs chaos engineering program: defines steady-state metrics, designs experiments with increasing complexity (single pod → availability zone → region), configures automated chaos runs in CI/CD. Integrates results with SLO/SLI monitoring to identify weaknesses.

Designs DevSecOps pipelines: automated scanning at all CI/CD stages, policy-as-code through OPA/Gatekeeper, infrastructure compliance checks. Implements shift-left security, configures SBOM generation and vulnerability management.

Designs secrets management architecture: Vault cluster in HA mode, automated certificate and password rotation, dynamic secrets for databases and clouds. Implements Vault Agent Injector in Kubernetes, configures audit logging.

Optimizes Copilot usage for infrastructure code: fine-tuning context for accurate IaC suggestions, creating custom instructions for DevOps patterns. Automates code review with Copilot, integrates into quality assurance pipelines.

Designs DR architecture: multi-region active-passive and active-active configurations, automated failover with DNS. Implements chaos engineering (Chaos Monkey, Litmus) for DR validation. Defines RPO/RTO for each service, automates DR testing.

Designs infrastructure for high-load systems: multi-tier architecture with auto-scaling, event-driven microservices, CQRS for separating read/write workloads. Conducts capacity planning, defines SLO/SLI and designs for target reliability.

Designs custom metrics system: DORA metrics for delivery performance evaluation, SLI metrics for each service, business KPIs in Prometheus. Implements OpenTelemetry Metrics, develops custom collectors for non-standard sources.

Designs scalable logging platform: Elasticsearch cluster for terabytes of logs, hot-warm-cold architecture, cross-cluster search. Optimizes mapping and query performance, implements Elastic APM for distributed tracing. Configures anomaly detection.

Designs incident management process: automated incident classification, PagerDuty integration with Slack/Jira/StatusPage. Implements incident commander role, automates communication through ChatOps. Configures SLO-based alerting to reduce alert fatigue.

Designs observability platform on OpenTelemetry: unified collection pipeline for traces/metrics/logs, tail-based sampling, context propagation. Implements OTel Operator for Kubernetes, configures adaptive sampling and cross-signal correlation.

Designs scalable monitoring system: Thanos/Mimir for long-term storage and multi-cluster, recording rules for optimization. Creates SLO dashboards with burn rate alerts, implements custom exporters. Configures federation and remote write.

Designs SLO framework for the organization: SLI definition standards for different service types, automated error budget calculation. Implements SLO-based alerting through Sloth/Pyrra, integrates with incident management and capacity planning.

Designs organizational logging standards: unified logging schema, semantic conventions (OpenTelemetry), automatic context enrichment. Implements distributed tracing correlation, configures sampling for high-load services.

Designs infrastructure code review process: automated checks (Checkov, tfsec, Conftest), mandatory reviewers through CODEOWNERS. Implements plan review for Terraform (Atlantis/Spacelift), defines approval criteria for different change types.

Designs documentation system for DevOps: unified portal (Backstage) with auto-generated documentation, runbooks with monitoring integration. Implements docs-as-code pipeline: automated validation, link checking, freshness alerts.

Designs Git strategy for infrastructure code: branching model for GitOps (trunk-based vs gitflow), monorepo/polyrepo structure. Configures advanced hooks (pre-commit for terraform fmt/validate), automates releases through semantic versioning.