Domain Architect - Kubernetes, Terraform

HCL America, Inc.
United States
24 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source

Tech stack

Kubernetes Security Application Release Automation Microsoft Azure Cloud Computing Cloud Engineering Cloud Foundry Configuration Management Computer Networks Continuous Delivery DevOps Github Monitoring of Systems
+38 more
Image Management Industry Standard Architecture Key Management Nginx Role-Based Access Control Reliability Engineering Ansible Prometheus Zero Trust Network Access Software Engineering Tripwire Datadog Data Logging Cloud Platform System Istio System Availability Grafana Infrastructure as Code (IaC) Containerization Gitlab-ci Kubernetes Infrastructure Automation Frameworks Information Technology Github Enterprise Hashicorp Linkerd (Service Mesh) Azure AKS Cloud Optimization Api Gateway Terraform Prisma Cloud Platform Oracle Cloud Infrastructure Splunk Dynatrace Docker Elk Stack Jenkins Microservices

Job description

Seeking an experienced Kubernetes Platform Engineer / Architect to design, build, automate, and support enterprise-grade container platforms that power business-critical applications across global environments. The ideal candidate will have deep expertise in Kubernetes, container orchestration, cloud-native technologies, platform engineering, automation, observability, and DevOps practices. This role will be responsible for developing a scalable, secure, and highly available Kubernetes ecosystem that enables application teams to rapidly deploy, manage, and modernize workloads. The candidate will work closely with cloud teams, infrastructure teams, application development teams, security teams, and SRE teams to deliver a robust cloud-native platform., Kubernetes Platform Architecture * Design and implement enterprise Kubernetes platforms across cloud and hybrid environments. * Define platform standards, governance controls, and architectural best practices. * Build scalable, resilient, and highly available Kubernetes clusters. * Develop container platform roadmaps aligned with cloud strategy. * Establish multi-cluster and multi-region Kubernetes architectures. * Support application modernization and cloud-native transformation initiatives. ______________ Kubernetes Administration & Operations * Deploy, upgrade, patch, and manage Kubernetes clusters. * Perform cluster lifecycle management and capacity planning. * Optimize cluster performance, resource utilization, and availability. * Configure namespaces, RBAC, network policies, storage classes, and quota management. * Troubleshoot complex platform, networking, storage, and container issues. * Ensure platform reliability and operational excellence. ______________ Containerization & Cloud-Native Solutions * Design and implement containerized application environments. * Support Docker and OCI-compliant container technologies. * Develop best practices for: o Container security o Container lifecycle management o Image management o Registry management * Enable microservices architecture adoption. * Support modern cloud-native application deployments. ______________ Platform Automation * Implement Infrastructure as Code (IaC) and GitOps practices. * Automate Kubernetes provisioning and configuration management. * Develop reusable deployment templates and platform services. * Build self-service capabilities for development teams. * Automate platform monitoring, compliance, and operational processes. Tools: * Terraform * Ansible * Helm * ArgoCD * FluxCD * GitHub Actions * Azure DevOps ______________ DevOps & CI/CD Enablement * Design and support CI/CD pipelines for Kubernetes workloads. * Integrate Kubernetes with enterprise DevOps toolchains. * Support continuous deployment and release automation. * Improve deployment speed, reliability, and application availability. * Establish standardized deployment frameworks. Platforms: * Azure DevOps * GitHub Enterprise * Jenkins * GitLab CI/CD ______________ Kubernetes Security * Implement Kubernetes security best practices and governance controls. * Configure and manage: o RBAC o Pod Security Standards o Network Policies o Secrets Management o Service Mesh Security * Integrate security scanning into CI/CD pipelines. * Support Zero Trust architecture initiatives. * Conduct platform security assessments and remediation activities. Security Technologies: * HashiCorp Vault * Aqua Security * Prisma Cloud * Microsoft Defender for Containers * Trivy * Falco ______________ Service Mesh & Traffic Management * Design and support service mesh implementations. * Configure traffic routing, ingress controllers, and API gateways. * Implement secure service-to-service communication. * Enable application observability and resilience patterns. Technologies: * Istio * Linkerd * NGINX Ingress * Kong * Ambassador ______________ Monitoring & Observability * Build enterprise observability solutions for Kubernetes platforms. * Implement centralized logging, monitoring, and alerting. * Define SLOs, SLIs, and platform health metrics. * Support Site Reliability Engineering (SRE) practices. Monitoring Tools: * Prometheus * Grafana * ELK Stack * OpenTelemetry * Datadog * Splunk * Dynatrace ______________ Cloud Platform Integration * Integrate Kubernetes with public cloud platforms. * Design and manage managed Kubernetes services. Cloud Platforms: * Azure Kubernetes Service (AKS) * Amazon EKS * Google GKE Preferred expertise in AKS due to Azure cloud strategy. ______________ Leadership & Co

Requirements

Education * Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline. * Master's Degree preferred. ______________ Experience * 10-15+ years of overall IT experience. * 5+ years of hands-on Kubernetes administration and platform engineering. * Experience managing large-scale production Kubernetes environments. * Experience implementing enterprise platform engineering practices. * Strong experience supporting mission-critical applications

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Loading talks and stories from around this role…