Role overview
Operate the production‑grade Azure Kubernetes Service (AKS) foundation that powers a globally deployed healthcare data platform built on FHIR standards. As an Azure Platform Engineer, you will own the platform end‑to‑end, from cluster architecture and CI/CD through performance tuning, observability, vulnerability management, and incident response, acting as the subject‑matter expert for Kubernetes across application, security, and platform teams.
Responsibilities
- Design and deploy AKS clusters with private configurations, managed identities, and RBAC, then own their ongoing health, scaling, upgrades, and capacity planning.
- Configure AKS networking including Azure CNI, internal load balancers, and ingress controllers (NGINX, Traefik).
- Integrate AKS with Azure Container Registry, Key Vault via CSI driver, Azure Monitor, Azure SQL, Kafka/Event Hubs, Azure Storage, and supporting private endpoints and firewall rules.
- Manage containerized deployments with Docker and Helm, with reusable chart standards, namespaces, resource quotas, and Azure Policy enforcement.
- Run container and cluster vulnerability scanning, triage findings, and coordinate remediation with engineering teams.
- Maintain Terraform‑based infrastructure as code and CI/CD pipelines using Azure DevOps or equivalent tooling.
- Participate in on‑call rotation, lead root‑cause analysis on Kubernetes and infrastructure incidents, and drive preventative follow‑ups.
- Document runbooks, post‑incident reviews, and operational knowledge to reduce tribal knowledge.
Requirements
- 5+ years of hands‑on Kubernetes experience with strong knowledge of scheduling, networking, storage, and RBAC internals.
- Proficiency with Azure CNI networking and AKS private cluster configuration.
- Hands‑on experience with Azure PaaS services (ACR, Key Vault, Azure SQL, Kafka, managed identities) and troubleshooting DNS, firewall, and private endpoint dependencies.
- Experience with Helm and working knowledge of Terraform and Azure DevOps or similar CI/CD tools.
- Practical background in container and cluster vulnerability management and remediation.
- Scripting in Bash and Python, plus clear written and verbal communication for both technical and non‑technical audiences.
Benefits and work setup
- Remote work environment based in Ontario.
- Salary range of $115,000 to $130,000.
- Flexible time‑away policy covering PTO, personal, and sick days.
- Health and medical benefits, RRSP/TFSA/401K employee contribution support, life and disability coverage, and an employee assistance program.
- Learning programs including a FHIR study track and Skillsoft access.
- Inclusive culture that emphasizes respect, belonging, and accommodating candidates throughout the interview and employment experience.