> Markdown version of [/jobs/ext/733377-kuberenets-engineer](https://www.wearedevelopers.com/jobs/ext/733377-kuberenets-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Kuberenets Engineer

- **Company:** Propertyvalue Quantum Technologies Llc
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Microsoft Windows, Application Programming Interfaces (APIs), Android Software Development, Apple IOS, Computer Networks, Linux, Domain Name System (DNS), Github, Identity and Access Management, Key Management, Network Control, Role-Based Access Control, Prometheus, SAS (Software), Management of Software Versions, Google Cloud, Cloud Monitoring, Autoscaling, Grafana, Git, Kubernetes, Oracle Cloud Infrastructure
- **Published:** June 29, 2026
- **Apply:** https://www.dice.com/job-detail/d16ea2f7-bc87-45a8-9d2d-6cbb92d2aeaa

## About the Role

7+ years in Kubernetes engineering, with 3+ years on GKE specifically

Deep GKE expertise: private clusters, Workload Identity, Config Sync, Policy Controller, Fleet management

Strong understanding of Kubernetes internals: API server, etcd, scheduler, kubelet, kube-proxy, CNI

Experience with Config Connector (KCC) or similar Kubernetes-native Google Cloud Platform resource management

Hands-on ARC (Actions Runner Controller) deployment and management on Kubernetes

External Secrets Operator (ESO) configuration and troubleshooting

Helm chart management: values customization, chart versioning, Helm-sourced Config Sync

Kubernetes networking: Calico/Cilium network policies, Services, Ingress, DNS (CoreDNS)

Kubernetes security: Pod Security Admission, RBAC, SecurityContexts, secrets management

Kustomize expertise for manifest composition and overlay management

Monitoring: Prometheus, Grafana, Cloud Monitoring for GKE, PodMonitoring resources

Strong kubectl skills and Kubernetes troubleshooting methodology

## Description

Design, deploy, and operate GKE clusters: private clusters with Shielded Nodes, Workload Identity, CMEK encryption, custom node SAs

Manage Config Connector (KCC) on the management cluster: namespace isolation, ConfigConnectorContext per project, IAM SA bindings

Operate Config Sync across multiple clusters: RootSync/RepoSync configuration, Git/OCI/Helm sources, drift detection and remediation

Deploy and manage ARC (Actions Runner Controller) on runner clusters: scale-set configuration, autoscaling, ephemeral runner lifecycle

Implement and manage External Secrets Operator (ESO): ClusterSecretStore for Google Cloud Platform Secret Manager, ExternalSecret resources for GitHub App credentials

Configure and enforce Policy Controller / Gatekeeper: constraint templates (no-public-IP, require-CMEK, require-labels, require-private-networking, restrict-owner-role)

Manage node pools: machine types, taints/tolerations, autoscaling, surge upgrades, maintenance windows

Build and maintain runner pod specs for Linux, Windows, Android, and iOS runners with appropriate resource limits and security contexts

Implement Kubernetes RBAC: ClusterRoles, RoleBindings, service account management aligned with IAM tiering (ADR-016)

Monitor cluster health: node readiness, pod scheduling, Config Sync sync status, KCC resource reconciliation

Manage GKE Fleet membership, Binary Authorization policies, and GKE security bulletin monitoring

Troubleshoot Kubernetes issues: pod failures, scheduling problems, network policies, DNS resolution, storage classes

Perform cluster upgrades (control plane and node pools) with zero-downtime strategies


## Related Videos

- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)
- [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices)

## Related Articles

- [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries)