Domain Architect - Kubernetes, Terraform

Sapsf

United States

On-site

USD 150,000 - 210,000

Full time

6 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Sapsf is seeking an experienced Kubernetes Platform Engineer/Architect to design, build, automate, and support enterprise-grade container platforms powering business-critical applications across global environments.

The role requires deep expertise in Kubernetes, cloud-native technologies, platform engineering, automation, observability, and DevOps. You will collaborate with cloud, security, and SRE teams to deliver a robust, scalable cloud-native platform.

Qualifications

10+ years of IT experience with a focus on Kubernetes.
Experience deploying enterprise Kubernetes platforms.
Strong collaboration with cloud, security, and SRE teams.

Responsibilities

Design enterprise Kubernetes platforms across cloud and hybrid environments.
Define platform standards, governance controls, and architectural best practices.
Deploy, manage, and upgrade Kubernetes clusters with lifecycle care.
Implement IaC and GitOps for automated provisioning and configuration.
Ensure security, compliance, and RBAC across platforms.
Lead observability, reliability engineering, and platform optimization.

Skills

Kubernetes architecture

Kubernetes administration

Cloud-native solutions

IaC & GitOps

Platform automation

CI/CD enablement

Security best practices

Monitoring & observability

Education

Bachelor's Degree in CS/IT/Engineering

Master's degree preferred

Tools

Terraform

Ansible

Helm

ArgoCD

FluxCD

GitHub Actions

Azure DevOps

Job description

Seeking an experienced Kubernetes Platform Engineer / Architect to design, build, automate, and support enterprise-grade container platforms that power business-critical applications across global environments. The ideal candidate will have deep expertise in Kubernetes, container orchestration, cloud-native technologies, platform engineering, automation, observability, and DevOps practices. This role will be responsible for developing a scalable, secure, and highly available Kubernetes ecosystem that enables application teams to rapidly deploy, manage, and modernize workloads. The candidate will work closely with cloud teams, infrastructure teams, application development teams, security teams, and SRE teams to deliver a robust cloud-native platform.

Key Responsibilities

Kubernetes Platform Architecture
- Design and implement enterprise Kubernetes platforms across cloud and hybrid environments.
- Define platform standards, governance controls, and architectural best practices.
- Build scalable, resilient, and highly available Kubernetes clusters.
- Develop container platform roadmaps aligned with cloud strategy.
- Establish multi-cluster and multi-region Kubernetes architectures.
- Support application modernization and cloud-native transformation initiatives.
Kubernetes Administration & Operations
- Deploy, upgrade, patch, and manage Kubernetes clusters.
- Perform cluster lifecycle management and capacity planning.
- Optimize cluster performance, resource utilization, and availability.
- Configure namespaces, RBAC, network policies, storage classes, and quota management.
- Troubleshoot complex platform, networking, storage, and container issues.
- Ensure platform reliability and operational excellence.
Containerization & Cloud-Native Solutions
- Design and implement containerized application environments.
- Support Docker and OCI-compliant container technologies.
- Develop best practices for:
  - Container security
  - Container lifecycle management
  - Image management
  - Registry management
- Enable microservices architecture adoption.
- Support modern cloud-native application deployments.
Platform Automation
- Implement Infrastructure as Code (IaC) and GitOps practices.
- Automate Kubernetes provisioning and configuration management.
- Develop reusable deployment templates and platform services.
- Build self-service capabilities for development teams.
- Automate platform monitoring, compliance, and operational processes.
- Tools:
  - Terraform
  - Ansible
  - Helm
  - ArgoCD
  - FluxCD
  - GitHub Actions
  - Azure DevOps
DevOps & CI/CD Enablement
- Design and support CI/CD pipelines for Kubernetes workloads.
- Integrate Kubernetes with enterprise DevOps toolchains.
- Support continuous deployment and release automation.
- Improve deployment speed, reliability, and application availability.
- Establish standardized deployment frameworks.
- Platforms:
  - Azure DevOps
  - GitHub Enterprise
  - Jenkins
  - GitLab CI/CD
Kubernetes Security
- Implement Kubernetes security best practices and governance controls.
- Configure and manage:
  - RBAC
  - Pod Security Standards
  - Network Policies
  - Secrets Management
  - Service Mesh Security
- Integrate security scanning into CI/CD pipelines.
- Support Zero Trust architecture initiatives.
- Conduct platform security assessments and remediation activities.
- Security Technologies:
  - HashiCorp Vault
  - Aqua Security
  - Prisma Cloud
  - Microsoft Defender for Containers
  - Trivy
  - Falco
Service Mesh & Traffic Management
- Design and support service mesh implementations.
- Configure traffic routing, ingress controllers, and API gateways.
- Implement secure service-to-service communication.
- Enable application observability and resilience patterns.
- Technologies:
  - Istio
  - Linkerd
  - NGINX Ingress
  - Kong
  - Ambassador
Monitoring & Observability
- Build enterprise observability solutions for Kubernetes platforms.
- Implement centralized logging, monitoring, and alerting.
- Define SLOs, SLIs, and platform health metrics.
- Support Site Reliability Engineering (SRE) practices.
- Monitoring Tools:
  - Prometheus
  - Grafana
  - ELK Stack
  - OpenTelemetry
  - Datadog
  - Splunk
  - Dynatrace
Cloud Platform Integration
- Integrate Kubernetes with public cloud platforms.
- Design and manage managed Kubernetes services.
- Cloud Platforms:
  - Azure Kubernetes Service (AKS)
  - Amazon EKS
  - Google GKE
  - Preferred expertise in AKS due to Azure cloud strategy.