Senior AWS EKS Platform Architect-GitOps, Istio & Security

Jobtailor

California (MO)

On-site

USD 180,000 - 240,000

Full time

5 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

Jobtailor seeks a seasoned Platform Engineer to lead containerization of a large-scale API estate for a financial services client. You will convert an approved AWS EKS reference into a secure, repeatable production platform with multi-AZ Auto Mode and golden path using VPC CNI, Karpenter, KEDA, Terraform, Helm, and Kustomize.

You will own Flux as the production delivery path with continuous reconciliation, signed digest-pinned images, and GitLab CI integration.

Qualifications

12+ years in software, infrastructure, or platform engineering.
5+ years of hands-on production Kubernetes on AWS, including EKS architecture, operations, networking, upgrades, scaling, and incident troubleshooting
Proven track record of standing up EKS platforms end to end and containerizing existing API workloads at enterprise scale
Strong Terraform, Helm, and Kustomize skills
Reusable platform-module design experience
Defensible architecture decisions and cross-team leadership in a regulated environment
Production service mesh ownership, including Istio architecture, policy, rollout, performance, and troubleshooting; Ambient mode especially relevant
Deep GitOps experience with continuous reconciliation, drift management, environment promotion, and Flux implementation
Practical Kubernetes and AWS security knowledge: PSS, policy as code, NetworkPolicy, IAM, KMS, certificate management, image signing, and SBOMs
API gateway and regulated audit/event-ingestion design experience; direct Tyk experience strongly preferred
Working knowledge of gRPC, HTTP/2, and Protobuf
Enough Java 21 / Spring Boot familiarity to review the reference runtime pattern
Observability depth across metrics, logs, traces, SLOs, and rollout analysis with OpenTelemetry
Performance validation at tens of thousands of TPS
Requires US Pacific hours overlap
Requires an escalation rotation during build-out
Requires client background screening
Nice to have: Tyk Operator/Pump and custom Go or gRPC plugins; Flux image automation; Flagger progressive delivery; Kinesis/Firehose/S3 Object Lock compliance-grade event capture; Graviton; Kubecost/OpenCost and cloud-cost optimization; Fluent Bit, AMP, Splunk, Honeycomb, Grafana; PCI-scoped, SOC 2, or fintech platform engineering; AWS Solutions Architect Professional; CKA/CKS

Responsibilities

Lead containerization and production platform initiatives for an enterprise client.
Architect and operate a secure, scalable EKS-based API platform across multiple AZs.
Oversee Flux as the production GitOps path with automated reconciliation and canaries.
Define and enforce security, observability, and compliance across the platform.
Coach platform, SRE, and application engineers and represent Opplane in client reviews.
Collaborate on architecture decisions and threat modeling for the fintech environment.
Maintain close alignment with code, pipelines, and operational data to validate platform operation