AKS Platform Lead - Azure DevOps & Security

Capgemini; Mississauga; On-site; CAD 103,000 - 131,000; Full time

Job summary

Capgemini is seeking an experienced Azure engineer to lead the design, implementation, and security integration of an enterprise AKS platform. You will own detailed AKS architecture for dev, QA, production, and disaster recovery, validating landing zones, quotas, identities, and policies.

The role focuses on private clusters, node pools, autoscaling, upgrades, and security controls, with IaC module and pipeline leadership across AKS and dependencies.

Qualifications

• 8+ years in Azure engineering and 4+ years delivering production AKS platforms in enterprise environments.
• Proven ability to design and implement AKS platforms across Dev, QA, Prod, and DR environments.

Responsibilities

• Own AKS detailed design for Dev, QA, Prod, and DR.
• Validate Azure landing-zone prerequisites, subscriptions, quotas, identity, policies, and shared services.
• Design private clusters, node pools, autoscaling, PDBs, upgrade and maintenance patterns.
• Lead IaC module and pipeline implementation for AKS and dependencies.
• Implement Entra ID, RBAC, workload identity, Key Vault, registry, policy, and admission controls.
• Integrate networking, observability, backup, DR, and FinOps controls.
• Design and execute AKS platform, security, performance, resilience, upgrade, and recovery tests.
• Lead AKS pilot application onboarding and production-readiness evidence.
• Produce AKS build books, runbooks, administration guides, and KT.

Skills

AKS design

Azure administration

Azure DevOps

Terraform/Bicep

Azure Monitor

Kubernetes security

Helm/Kustomize

Tools

Terraform/Bicep

Azure DevOps/GitHub

Job description

Capgemini is seeking an experienced Azure engineer to lead the design, implementation, and security integration of an enterprise AKS platform. You will own detailed AKS architecture for dev, QA, production, and disaster recovery, validating landing zones, quotas, identities, and policies.

The role focuses on private clusters, node pools, autoscaling, upgrades, and security controls, with IaC module and pipeline leadership across AKS and dependencies.