Tanzu Engineer

Chemcastle Sdn Bhd; Kuala Lumpur; On-site; MYR 240,000 - 320,000; Full time

Job summary

Chemcastle Sdn Bhd is seeking a Tanzu Engineer to design, deploy and maintain VMware Tanzu‑based container platforms across our insurance organization. You will work with Cloud, DevOps, Security and Application teams to deliver secure, scalable platforms aligned with regulatory requirements.

You will deploy and manage TKG clusters across on‑prem and cloud (vSphere, AWS, Azure), manage TMC for governance, and implement TAP for developer onboarding and CI/CD integration.

Qualifications

• Hands-on design, deployment and maintenance of VMware Tanzu-based container platforms for an insurance organization.
• Strong experience with Kubernetes, TKG, TMC, TAP, and automation tooling.
• Deploy/configure/maintain TKG clusters across on-prem and cloud (vSphere, AWS, Azure).
• Manage TMC for lifecycle, policy enforcement and governance.

Responsibilities

• Implement TAP for developer onboarding and CI/CD integration.
• Build and maintain cluster add-ons (Ingress, Service Mesh, Logging, Monitoring).
• Automate cluster provisioning using Terraform, YAML, Helm, and GitOps (ArgoCD, Flux).
• Integrate Tanzu with CI/CD pipelines (Jenkins, GitLab CI, Bamboo).
• Develop reusable automation modules for upgrades, scaling, patching.
• Enforce security policies with TMC, OPA/Gatekeeper, Pod Security Standards, network segmentation.
• Ensure insurance regulatory compliance (auditability, data protection, workload isolation).
• Manage secrets via Vault or Kubernetes Secrets.
• Configure monitoring with Prometheus, Grafana, Tanzu Observability, vROps.

Skills

Kubernetes

Tanzu Kubernetes Grid

Tanzu Mission Control

Tanzu Application Platform

Terraform

YAML

Helm

GitOps

ArgoCD

Flux

CI/CD tooling

Jenkins

GitLab CI

Bamboo

security & compliance

OPA/Gatekeeper

Pod Security Standards

networking

monitoring tools

Prometheus

Grafana

vRealize Operations

Istio

Ingress controllers

API gateways

vSphere

NSX-T

cloud platforms (AWS/Azure/OCI)

Vault

Kubernetes Secrets

Harbor/ECR/ACR/OCI Registry

RBAC

Tools

Terraform

Git

CI/CD pipelines

Python

Bash

Terraform modules

ArgoCD

Flux

Job description

The Tanzu Engineer will be responsible for designing, deploying, and maintaining VMware Tanzu‑based container platforms across the insurance organization. This role requires strong hands‑on experience with Kubernetes, Tanzu Kubernetes Grid (TKG), Tanzu Mission Control (TMC), Tanzu Application Platform (TAP), and automation tooling. The engineer will collaborate with Cloud, DevOps, Security, and Application teams to deliver secure, scalable, and compliant container platforms aligned with insurance regulatory and operational requirements.

Deploy, configure, and maintain Tanzu Kubernetes Grid (TKG) clusters across on‑prem and cloud environments (vSphere, AWS, Azure).

Manage Tanzu Mission Control (TMC) for cluster lifecycle, policy enforcement, and governance.Implement Tanzu Application Platform (TAP) for developer onboarding, CI/CD integration, and secure supply chain.

Build and maintain cluster add‑ons (Ingress, Service Mesh, Logging, Monitoring).

Automation & CI/CD

Automate cluster provisioning using Terraform, YAML, Helm, and GitOps workflows (ArgoCD, Flux).

Integrate Tanzu with CI/CD pipelines (Jenkins, GitLab CI, Bamboo).Develop reusable automation modules for cluster upgrades, scaling, and patching.

Security & Compliance

Implement security policies using TMC, OPA/Gatekeeper, Pod Security Standards, and network segmentation.

Ensure compliance with insurance regulatory requirements (auditability, data protection, workload isolation).Manage secrets using Vault, Kubernetes Secrets, or external secret stores.

Monitoring & Reliability

Configure monitoring using Prometheus, Grafana, Tanzu Observability, or vRealize Operations.

Troubleshoot cluster issues (networking, storage, workloads, control plane).Implement backup and DR strategies for Kubernetes workloads.

Work with App‑Dev teams to onboard microservices and modernize legacy insurance applications.

Partner with Security and Cloud teams to enforce governance, tagging, and policy frameworks.Document platform architecture, SOPs, and incident RCA reports.

Strong experience with TKG, TMC, TAP, vSphere with Tanzu.

Deep understanding of Kubernetes architecture, networking, RBAC, storage, and workload management.Experience with Helm, Kustomize, YAML, and GitOps.

Hands‑on experience with vSphere, NSX‑T, AWS, OCI, or Azure.

Knowledge of container registries (Harbor, ECR, ACR, OCI Registry).

DevOps & Automation

Strong skills in Terraform, Git, CI/CD pipelines, and automation scripting (Python, Bash).

Experience with service mesh (Istio), ingress controllers, and API gateways.

Security & Compliance

Knowledge of OPA/Gatekeeper, Pod Security Standards, image scanning, and secure supply chain.

Familiarity with insurance compliance requirements (audit logs, data residency, workload isolation).

Non‑Technical Requirements

Strong analytical and troubleshooting skills.

Excellent communication and cross‑team collaboration.Ability to translate platform concepts for business stakeholders.

High adaptability and eagerness to stay current with Kubernetes and Tanzu technologies.

Preferred Certificate

VMware Certified Professional – Application Modernization (VCP‑AM)

Mandatory for any Tanzu engineer.

HashiCorp Terraform Associate

Strong ownership, accountability, and teamwork mindset.

Ability to lead platform modernization initiatives.

Proactive in improving platform reliability and developer experience.