> Markdown version of [/jobs/ext/2017493-platform-engineer-kubernetes-rke2-argocd-cilium-for-nato-with-security-clearance](https://www.wearedevelopers.com/jobs/ext/2017493-platform-engineer-kubernetes-rke2-argocd-cilium-for-nato-with-security-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Engineer (Kubernetes RKE2, ArgoCD, Cilium) for NATO with security clearance - **Company:** WLG - **Location:** Brussel, Belgium - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Computer Networks, Key Management, Network Architecture, Nginx, Role-Based Access Control, Prometheus, Software Engineering, Zabbix, Data Logging, SUSE Linux, Grafana, Kubernetes, CIS Benchmarks, Vulnerability Analysis - **Published:** August 11, 2026 - **Apply:** https://www.adzuna.be/details/5836035711 ## About the Role * A university degree plus three years of relevant experience, or the equivalent. * Three or more years of hands-on Kubernetes operations. * Experience with SUSE RKE2. * Real experience of monitoring, logging, registries, ingress, CNI and backup tooling. * Nice to have: an international environment with both military and civilian colleagues, and an understanding of NATO's structure. Practical detail * Brussels, Belgium - on site; most daily activity has to be done in the office. No travel. * 28 September to 31 December 2026, 570 hours in total. * You must hold a valid clearance and be a citizen of a NATO member country with the right to work in Belgium. ## Description A NATO organisation in Brussels runs its own Kubernetes platform on premise, and it is looking for the person who keeps it healthy. This is a pure platform-operations role: the clusters, the tooling inside them, and the monthly evidence that the whole thing is compliant and under control. Application development and the underlying virtual, storage and network infrastructure sit with other teams. What you would be doing * Daily monitoring of cluster health and alerts, and node lifecycle operations - join, drain, cordon, replacement. * Managing the Kubernetes components: CNI, CSI, ingress, metrics server and CoreDNS. * Certificate rotation and secrets management, RBAC administration with periodic audits, and network policy management. * Upgrades and patching, including quarterly upgrade readiness. * Vulnerability scanning and remediation inside the cluster. * Backup operations with Velero or K10 (disaster recovery testing stays with the customer). * Maintaining documentation and runbooks, and helping application teams troubleshoot their deployments. * Producing the monthly artefacts: cluster health, security compliance (CIS benchmarks, RBAC audit, network policy, vulnerabilities), capacity and performance, patching and upgrades, incidents and root cause analysis, configuration drift against the approved baseline, the change log and the risk register. The stack inside the cluster * Prometheus and Grafana, a logging stack, NGINX or another ingress, Cilium CNI. * Backup tooling, an on-premise registry such as Harbor or SUSE, ArgoCD for GitOps, metrics server, cert-manager and Zabbix integration hooks. ## Related Videos - [5 steps for running a Kubernetes environment at scale](https://www.wearedevelopers.com/videos/88-5-steps-for-running-a-kubernetes-environment-at-scale) - [How I saved 200K/yr in direct costs writing 0 code lines in K8s](https://www.wearedevelopers.com/videos/1055-how-i-saved-200k-yr-in-direct-costs-writing-0-code-lines-in-k8s) - [Post-Quantum Cryptography: Preparing for Q-Day](https://www.wearedevelopers.com/videos/100179-post-quantum-cryptography-preparing-for-q-day) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Streaming AI Responses in Real-Time with SSE in Next.js & NestJS](https://www.wearedevelopers.com/videos/1630-streaming-ai-responses-in-real-time-with-sse-in-next-js-nestjs) - [All your telemetry data from any source in one place](https://www.wearedevelopers.com/videos/57-all-your-telemetry-data-from-any-source-in-one-place) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)