Kubernetes Platform Architect

Insight Global; United States; On-site; USD 150,000 - 200,000; Full time

Job summary

Ecolab is seeking a Senior Enterprise Kubernetes Platform Architect to own the enterprise design for networking, storage, observability, ingress, multi-tenancy, and lifecycle management of the Kubernetes platform. This role will drive security, governance, and scalable platform initiatives.

You will collaborate with global engineering teams (US and India) to establish cloud-native standards, stand up Azure AKS reference architecture modeled after the current AWS EKS deployment, and advance a

Qualifications

• 8+ years building and operating enterprise Kubernetes environments.
• 3+ years in an Architect-level role.
• Experience with AKS, EKS, or GKE.

Responsibilities

• Own enterprise Kubernetes reference architecture across networking, storage, ingress, observability, multi-tenancy, and lifecycle management.
• Lead AKS architecture and deployment based on an existing EKS model.
• Establish Kubernetes networking standards and address pod IP/CIDR scalability challenges.
• Bring developer-provisioned clusters under a secure, governed, templated platform model.
• Define Terraform, Helm, CI/CD, and GitOps standards.
• Partner with Security to implement CIS hardening, policy-as-code, and observability standards.
• Lead architecture reviews and mentor engineering teams across the US and India.

Skills

Kubernetes architecture

Managed Kubernetes platforms (AKS/EKS/

Tools

ArgoCD

Azure DevOps

GitHub Actions

Prometheus

Grafana

Job description

• 8+ years building and operating enterprise Kubernetes environments
• 3+ years in an Architect-level role
• Deep expertise with managed Kubernetes platforms (AKS, EKS, or GKE)
• Experience designing cloud-agnostic Kubernetes solutions across Azure and AWS (GCP a plus)
• Strong Kubernetes networking experience, including pod IP allocation, CIDR strategy, CNI architecture, ideally Cilium/eBPF
• Hands-on Terraform and Helm
• Experience defining CI/CD and GitOps standards using Azure DevOps, GitHub Actions, ArgoCD, or similar tools
• CIS hardening and Kubernetes security best practices
• Strong scripting skills (Python, Bash, PowerShell, or Go)
• Ability to communicate effectively with both technical and executive stakeholders

NICE TO HAVES

• ArgoCD, Flux, GitOps, and Progressive Delivery
• Istio or Linkerd
• Observability tools (Elastic, Prometheus, Grafana, Datadog)
• CKA, CKAD, CKS, or Cloud Architect certifications

KEY RESPONSIBILITIES

• Own Ecolab's enterprise Kubernetes reference architecture across networking, storage, ingress, observability, multi-tenancy, and lifecycle management
• Lead AKS architecture and deployment based on an existing EKS model
• Establish Kubernetes networking standards and address pod IP/CIDR scalability challenges
• Bring developer-provisioned clusters under a secure, governed, templated platform model
• Define Terraform, Helm, CI/CD, and GitOps standards
• Partner with Security to implement CIS hardening, policy-as-code, Mythos remediation efforts, and observability standards
• Lead architecture reviews and mentor engineering teams across the US and India

Ecolab is investing heavily in its enterprise container platform as part of its broader cloud modernization and security strategy. AWS EKS is already operational, and the immediate priority is standing up a secure, scalable Azure AKS reference architecture modeled after the existing environment.

The organization currently has a rapidly growing Kubernetes footprint, much of which has been provisioned directly by development teams. Ecolab is looking to bring these clusters under a centralized, governed, secure, and repeatable platform model.

The Kubernetes Platform Architect will own the enterprise design for networking, storage, observability, ingress, multi-tenancy, lifecycle management, CI/CD standards, GitOps strategy, and security controls. This person will establish the standards that Kubernetes, Platform Engineering, Security, and SRE teams build against moving forward.

This individual will work closely with the Mythos Security team to implement security controls, policy enforcement, vulnerability remediation standards, and CIS hardening across the container ecosystem.