Platform Engineer (Kubernetes RKE2, ArgoCD, Cilium) for NATO with security clearance

A NATO organisation in Brussels runs its own Kubernetes platform on premise and itis looking for the person who keeps it healthy. This is a pure platform-operations role: theclusters the tooling inside them and the monthly evidence that the whole thing is compliant andunder control. Application development and the underlying virtual storage and networkinfrastructure sit with other teams.

• Daily monitoring of cluster health and alerts and node lifecycle operations join draincordon replacement.
• Managing the Kubernetes components: CNI CSI ingress metrics server and CoreDNS.
• Certificate rotation and secrets management RBAC administration with periodic audits andnetwork policy management.
• Upgrades and patching including quarterly upgrade readiness.
• Vulnerability scanning and remediation inside the cluster.
• Backup operations with Velero or K10 (disaster recovery testing stays with the customer).
• Maintaining documentation and runbooks and helping application teams troubleshoot theirdeployments.
• Producing the monthly artefacts: cluster health security compliance (CIS benchmarks RBACaudit network policy vulnerabilities) capacity and performance patching and upgradesincidents and root cause analysis configuration drift against the approved baseline the changelog and the risk register.

• Prometheus and Grafana a logging stack NGINX or another ingress Cilium CNI.
• Backup tooling an on-premise registry such as Harbor or SUSE ArgoCD for GitOps metricsserver cert-manager and Zabbix integration hooks.

• A university degree plus three years of relevant experience or the equivalent.
• Three or more years of hands-on Kubernetes operations.
• Experience with SUSE RKE2.
• Real experience of monitoring logging registries ingress CNI and backup tooling.
• Nice to have: an international environment with both military and civilian colleagues and anunderstanding of NATOs structure.

• Brussels Belgium on site; most daily activity has to be done in theoffice. No travel.
• 28 September to 31 Decemberhours in total.
• You must hold a valid clearance and be a citizen of a NATO member country with the right towork in Belgium.

If you would rather operate a platform properly than build a new one every quarter this is thekind of role where that is the whole point.