Kubernetes Platform Engineer

Insight Softmax Consulting LLC; Oregon; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Insight Softmax Consulting LLC is hiring a Kubernetes Platform Engineer to design, build, and operate multi-tenant Kubernetes platforms for GPU and HPC workloads. You will implement automation, identity controls, and security layers while delivering scalable infrastructure.

You will work in a security-conscious environment, writing code and building pipelines, with a focus on delivery and self-directed work.

Qualifications

• 5+ years in platform, DevOps or SRE roles, with hands-on Kubernetes production experience.
• Deep Kubernetes knowledge: networking, storage, scheduling, operators, multi-cluster management.
• Strong Linux skills: networking, systemd, kernel and driver troubleshooting.
• Infrastructure as code and CI/CD experience: Terraform, Ansible, GitOps tooling.
• Experience with enterprise identity and security: SSO/SAML/OIDC, IAM, secrets management, network segmentation.

Responsibilities

• Design, deploy and operate Kubernetes clusters on bare metal, cloud and edge, including multi-tenant and air-gapped deployments.
• Build cluster Lifecycle automation: provisioning, immutable images, profiles, upgrades and fleet management.
• Operate GPU workloads on Kubernetes: device plugins, GPU partitioning, high‑speed networking and storage.
• Build and maintain IaC and CI/CD pipelines (Terraform, Ansible, GitLab/GitHub, Helm, GitOps).
• Implement identity and access: SSO, SAML, OIDC, IAM, secrets management, RBAC across clusters and cloud accounts.
• Harden platforms for enterprise environments: network policy, image signing, audit logs, compliance evidence.
• Own day-2 operations for managed service customers: monitoring, alerting, incident response and runbooks.
• Coordinate with customer teams to obtain access, approvals and changes through processes.
• Reserve weekly time for pre-sales, internal platform work and mentoring.

Skills

Kubernetes

DevOps/SRE

Linux

Automation

Security/Compliance

Cloud (AWS/GCP/Azure)

Programming (Python/Go)

On-call/Incident response

Multi-tenant platforms

Edge/Air-gapped deployments

Tools

Terraform

Ansible

GitLab

GitHub Actions

Helm

Cluster API

Rancher/OpenShift

Job description

Insight Softmax is a leading organization in the fields of machine learning, data science, and high-performance computing (HPC). We are dedicated to providing innovative solutions in computing technology to solve complex problems in various sectors including research, science, manufacturing, finance, and data analytics.

Description

• We are hiring a Kubernetes Platform Engineer for our engineering team. You will design, build and operate multi-tenant Kubernetes platforms for GPU and HPC workloads, and the automation, identity and security layers around them.
• Our customers include a Kubernetes platform vendor who has us build and deliver their product, enterprises and telcos deploying GPU clusters inside strict security perimeters, and neoclouds standing up multi-tenant capacity at scale.
• Much of this work happens inside large-enterprise security and compliance processes. You need to be comfortable getting things done in those environments: understanding why the controls exist, designing within them, and knowing when and how to push for an exception.
• This is a platform engineering role, not IT administration. You write code, build automation, and leave behind systems that run without you.
• Our team requires individuals with focus on delivery and results, hunger to learn, ability to adapt, and can thrive in a self-directed environment where you'll figure out what's needed to deliver rather than wait for detailed instructions

Key Responsibilities

• Design, deploy and operate Kubernetes clusters on bare metal, cloud and edge, including multi-tenant and air-gapped deployments.
• Build cluster lifecycle automation: bare metal provisioning, immutable node images, cluster profiles and packages, upgrades and fleet management.
• Operate GPU workloads on Kubernetes: device plugins, Dynamic Resource Allocation, GPU partitioning, node tuning, high-speed networking and storage.
• Build and maintain infrastructure as code and CI/CD pipelines (Terraform, Ansible, GitLab or GitHub, Helm, GitOps).
• Implement identity and access: SSO and SAML, OIDC, Entra ID, Okta, AWS Organizations and IAM, role-based access across clusters and cloud accounts.
• Harden platforms for enterprise and sovereign environments: network policy, secrets management, image signing and scanning, FIPS, audit logging, compliance evidence.
• Own day-2 operations for managed service customers: monitoring, alerting, on-call rotations, patching, incident response and runbooks.
• Work with customer security, network and platform teams to get access, approvals and changes through their processes.
• Reserve time each week for pre-sales support, internal platform work and mentoring.

Qualifications

• At least 5 years in platform, DevOps or SRE roles, with at least 3 years running production Kubernetes you built yourself.
• Deep Kubernetes knowledge: networking (CNI, Gateway API, service mesh), storage (CSI), scheduling, operators, multi-cluster management.
• Strong linux chops, including networking, systemd, kernel and driver level troubleshooting.
• Robust infrastructure as code and CI/CD experience with Terraform, Ansible and a GitOps toolchain.
• Hands-on experience with enterprise identity and security: SSO, SAML and OIDC, IAM design, secrets management, network segmentation, security review processes.
• Deep knowledge of at least one of AWS, GCP, or Azure. Preferably AWS.
• Experience running on-call and incident response for production platforms.
• Proficient in Python, Go or a similar language for automation and tooling.

Optional Experience and Skills

• Spectro Cloud Palette, PaletteAI and VerteX, or comparable cluster management platforms (Rancher, OpenShift, Cluster API).
• Bare metal provisioning with MAAS, Ironic, PXE or BCM, and immutable OS images such as Kairos.
• GPU operators, NVIDIA and AMD device plugins, RDMA and InfiniBand on Kubernetes.
• Air-gapped or sovereign deployments, FIPS 140-3, DISA STIG or similar hardening.
• Multi-tenancy design: namespaces, virtual clusters, quotas, chargeback.
• Security tooling such as Vault, cert-manager, OPA or Kyverno, Falco, Trivy or Cosign.
• Telco or large enterprise experience.

Bonus Experience and Skills

• Slurm or other batch schedulers alongside Kubernetes.
• AWS Outposts or other hybrid cloud hardware.
• Observability stacks: Prometheus, Grafana, OpenTelemetry, PagerDuty.
• Rust.
• Using linux as your primary desktop workstation environment.

Attributes that we value

• Transparency
• Grit
• Effectiveness
• Willingness to learn

Location and Hours

• Full time position
• Remote work environment
• 80% of your work schedule will be during the business time zones for Latin America and Canada.
• Some customer meetings will occur each week at non-standard / nighttime hours, as we currently support a global team across 3-4 continents.
• Some customer engagements include on-site work at US customer sites, typically for workshops, platform bring-up and go-live. Expect occasional US travel.
• Participation in an on-call rotation for managed service customers.

References

• 3 references will be required.

Notes

• AI systems may be used with the recruitment and screening processes for this job requisition.