Cloud Kubernetes Platform Engineer

Hello

This is Kumar from Tek Leaders Inc hope you are doing great. Please find the below Job Description.

Role: Cloud Kubernetes Platform Engineer

Location: Jersey city NJ (Hybrid Position)

Duration: Long Term

Job Description:

We are seeking an experienced Cloud Kubernetes Platform Engineer to join the App Engine Engineering team. This role focuses on building operating and maintaining production-grade Kubernetes clusters across Azure AKS and Google GKE managing GitOps workflows with ArgoCD developing Terraform infrastructure-as-code modules and remediating security vulnerabilities across our container and cluster estate.

The ideal candidate has deep hands-on experience with Kubernetes in a large enterprise environment and is comfortable working across the full lifecycle from provisioning new clusters to day-2 operations upgrades security hardening and decommissioning.

Key Responsibilities

Kubernetes Cluster Build & Operations

• Build configure and maintain AKS and GKE clusters across multiple environments (lab nonprod preprod production) and regions
• Manage cluster lifecycle including provisioning upgrades scaling patching and decommissioning
• Configure and manage node pools namespaces RBAC network policies (Calico) and resource quotas
• Implement and maintain cluster bootstrap components: ingress controllers (Nginx) monitoring (Prometheus/Grafana) logging (Fluentd/Splunk integration) and service mesh (Istio)
• Manage cluster identity and access: Azure AD integration Managed Identities Service Principals PIM and Workload Identity Federation
• Support disaster recovery operations across primary and DR clusters

Terraform & Infrastructure as Code

• Develop maintain and enhance Terraform modules for AKS/GKE cluster provisioning IAM bootstrap namespaces and node pools

• Work with Terraform Enterprise (TFE) workspaces manage workspace configuration variable sets VCS integration and Sentinel policies

• Maintain Storefront (SF) product definitions and composite workflows for automated cluster provisioning via Genie

• Ensure infrastructure code follows GitLab branching strategy release tagging and merge request workflows

• Collaborate with CloudOps and Platform teams on landing zone configurations networking and DNS

ArgoCD & GitOps

• Deploy configure and maintain ArgoCD across all cluster environments

• Manage ArgoCD application definitions projects RBAC policies and repository configurations

• Implement and maintain GitOps workflows for application and platform component deployments

• Troubleshoot ArgoCD sync issues drift detection and webhook integrations

• Manage ArgoCD hub-spoke architecture across multiple clusters

Security & Vulnerability Remediation

• Triage and remediate container image vulnerabilities identified by Microsoft Defender and X-Ray scanning

• Maintain and update base images across the container registry (Hubble/Artifactory)

• Implement and enforce Azure Policy / OPA Gatekeeper constraints for CIS Kubernetes benchmarks

• Manage CCM findings exemptions and compliance documentation

• Perform security hardening: FIPS-enabled nodes host encryption private clusters seccomp/AppArmor profiles read-only root filesystems

• Manage PKI certificates and Service Principal certificate lifecycle (creation renewal rotation)

• Maintain secrets management using SMS2 Azure Key Vault and Secrets Store CSI driver

Monitoring Alerting & Support

• Monitor cluster health resource utilization and platform service availability

• Investigate and resolve platform incidents node failures network issues pod scheduling problems

• Support application teams with onboarding namespace provisioning and troubleshooting

• Participate in on-call rotation for production cluster support

Required Qualifications

• 5 years of hands-on experience with Kubernetes in production environments

• 3 years with Azure AKS and/or Google GKE

• 3 years with Terraform (HCL) writing modules managing state working with Terraform Enterprise or Terraform Cloud

• 2 years with ArgoCD or equivalent GitOps tooling (Flux)

• Strong experience with container security scanning and vulnerability remediation

• Proficiency with Linux shell scripting (Bash) and at least one of: Go Python

• Deep understanding of Kubernetes networking: CNI plugins (Azure CNI Calico Kubenet) network policies ingress controllers DNS load balancers

• Experience with Kubernetes RBAC Azure AD/Entra ID integration Managed Identities and Workload Identity

• Experience with CI/CD pipelines using GitLab CI Jenkins or TeamCity

• Familiarity with monitoring stacks: Prometheus Grafana Splunk or equivalent

Preferred Qualifications

• Experience with OpenShift (OCP) in addition to AKS/GKE

• Experience with Helm chart development and management

• Familiarity with OPA/Gatekeeper policy authoring and CIS Kubernetes benchmarks

• Experience with Kafka/Strimzi (AMQ Streams) for event streaming in Kubernetes

• Knowledge of Azure networking: VNets NSGs Private DNS Zones hub-spoke topology ExpressRoute

• Experience with Velero for cluster backup and restore

• Experience with cert-manager or PKI certificate lifecycle management

• CKA CKAD or CKS certification

• Experience in financial services or other highly regulated industries

Thanks & Regards

Kumar K

IT Recruiter

Email:

LinkedIn: