Infrastructure Engineer

Kforce Inc; New York (NY); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

Kforce has a client in NYC seeking an Infrastructure Engineer to design, implement, and secure scalable containerized environments using Amazon EKS and related AI platforms. You will configure Kubernetes policies, build secure image pipelines, and collaborate with security teams to ensure governance and compliance across workloads.

The role emphasizes hardening Kubernetes clusters, vulnerability management, and ensuring high availability and resilience in a complex enterprise environment.

Qualifications

• Experience with AWS cloud services and Kubernetes environments (Amazon EKS).
• Understanding of Docker container lifecycle and Linux administration.
• Scripting fundamentals in Python, Bash, or similar.

Responsabilités

• Provision, configure, and maintain secure sandbox runtime environments within Amazon EKS.
• Support deployment and operation of AI execution environments (NVIDIA OpenShell, AWS Bedrock AgentCore).
• Implement container isolation controls and Kubernetes policies for workload security and resource management.
• Automate image certification, versioning, and release processes; maintain image repositories and artifact management.
• Perform vulnerability remediation and security configuration reviews; participate in security audits.

Description du poste

Responsibilities

Kforce has a client in NYC that is seeking an Infrastructure Engineer. Key Responsibilities:

• Provision, configure, and maintain secure sandbox runtime environments within Amazon EKS


• Support deployment and operation of AI execution environments including NVIDIA OpenShell, AWS Bedrock AgentCore, and future runtime platforms


• Implement container isolation controls to ensure workload separation across users, teams, and business units


• Configure Kubernetes policies governing runtime behavior, resource allocation, and security boundaries


• Support platform scalability, availability, and operational resilience


• Design and maintain container image pipelines that support secure software delivery practices


• Automate image certification, versioning, validation, and release processes


• Implement centralized vulnerability scanning and patch management procedures


• Ensure all container images comply with enterprise security and operational standards


• Maintain image repositories and artifact management platforms


• Implement network segmentation strategies that isolate users, workloads, and data domains


• Configure Kubernetes network policies to enforce least-privilege communication patterns


• Design and manage egress control mechanisms for outbound network traffic


• Support policy-based routing through secure proxy and inspection layers


• Partner with security teams to ensure compliance with organizational governance requirements


• Harden Kubernetes clusters and supporting infrastructure using industry security best practices


• Assist with implementation of container security controls, runtime protection, and workload monitoring


• Support identity, authentication, authorization, and access-control initiatives


• Perform vulnerability remediation and security configuration reviews


• Participate in security audits and compliance assessments

Responsibilities

Kforce has a client in NYC that is seeking an Infrastructure Engineer. Key Responsibilities:

• Provision, configure, and maintain secure sandbox runtime environments within Amazon EKS


• Support deployment and operation of AI execution environments including NVIDIA OpenShell, AWS Bedrock AgentCore, and future runtime platforms


• Implement container isolation controls to ensure workload separation across users, teams, and business units


• Configure Kubernetes policies governing runtime behavior, resource allocation, and security boundaries


• Support platform scalability, availability, and operational resilience


• Design and maintain container image pipelines that support secure software delivery practices


• Automate image certification, versioning, validation, and release processes


• Implement centralized vulnerability scanning and patch management procedures


• Ensure all container images comply with enterprise security and operational standards


• Maintain image repositories and artifact management platforms


• Implement network segmentation strategies that isolate users, workloads, and data domains


• Configure Kubernetes network policies to enforce least-privilege communication patterns


• Design and manage egress control mechanisms for outbound network traffic


• Support policy-based routing through secure proxy and inspection layers


• Partner with security teams to ensure compliance with organizational governance requirements


• Harden Kubernetes clusters and supporting infrastructure using industry security best practices


• Assist with implementation of container security controls, runtime protection, and workload monitoring


• Support identity, authentication, authorization, and access-control initiatives


• Perform vulnerability remediation and security configuration reviews


• Participate in security audits and compliance assessments

Requirements

• 1-3 years of experience in Cloud Engineering, Infrastructure Engineering, Platform Engineering, Systems Administration, or DevOps


• Hands-on experience with AWS cloud services


• Experience working with Kubernetes environments, preferably Amazon EKS


• Understanding of Docker containers and container lifecycle management


• Experience supporting Linux-based infrastructure


• Familiarity with networking concepts including routing, firewalls, DNS, and network segmentation


• Basic scripting experience using Python, Bash, or similar languages


• Strong troubleshooting and analytical skills

Preferred Qualifications

• Experience with Kubernetes security controls and policy frameworks


• Exposure to AI, machine learning, or Generative AI platforms


• Familiarity with NVIDIA GPU environments and AI infrastructure


• Experience with AWS Bedrock services or cloud-native AI platforms


• Knowledge of Infrastructure-as-Code tools such as Terraform or CloudFormation


• Experience with container image scanning and software supply chain security tools


• Familiarity with service mesh, proxy technologies, and zero-trust networking models


• Understanding of compliance, governance, and enterprise security frameworks

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.