Azure Kubernetes Platform Engineer
Job Location:
Monthly Salary:
Experience Required:
Posted:
Application Deadline:
Vacancies:
Job Summary
Role: Kubernetes Engineer (AKS)
Location: Mississauga (Hybrid: 3 days onsite)
Must Have Technical/Functional Skills:
- Define the target reference architecture for greenfield AKS clusters along with engineering team and ensure how bluefield cluster remain undisruptive: control plane choices private clusters node pool strategy upgrade/runway and regional topology.
- Lead design for NGINX Azure Managed Gateway API: HTTPRoute/Gateway modeling TLS/WAF strategy policy attachments and weighted/canary traffic for cutover.
- Architect kubenet Azure CNI (Cilium) migration with new clusters with Engineering team: IP planning subnet sizing pod density surge capacity cordon/drain and service-by-service move plan.
- Choose/validate dataplane features: Cilium network policy kubeproxy replacement (if enabled) Hubble visibility and implications on performance/SNAT.
- Standardize identity/secrets: Azure - Key Vault CSI; cert lifecycle (Key Vault and/or Gateway API).
- Establish platform guardrails: Azure Policy RBAC leastprivilege multitenancy boundaries (namespace/project isolation).
- Define/Follow the GitHub standards: reusable workflows CODEOWNERS branch protections environment approvals and artifact provenance/signing.
- Own nonfunctional requirements: SLOs HA/DR capacity modeling performance budgets and failover patterns for ingress and data plane.
- Govern delivery: roadmap cutover criteria readiness gates; mentor Platform/DevOps on architectural compliance.
- Own the target platform architecture and cutover from NGINX Azure Managed Gateway API and kubenet Azure CNI (Cilium) using new clusters/existing cluster. Closely work with Engineering and operation team.
Roles & Responsibilities:
- Required experience- AKS/Platform strong Gateway API (prod ops) NGINX Azure Managed Gateway API migrations and deep Azure CNI/Cilium networking (IP planning subnetting pod density)
- Define the target reference architecture for greenfield AKS clusters along with engineering team and ensure how bluefield cluster remain undisruptive: control plane choices private clusters node pool strategy upgrade/runway and regional topology.
- Lead design for NGINX Azure Managed Gateway API: HTTPRoute/Gateway modeling TLS/WAF strategy policy attachments and weighted/canary traffic for cutover.
- Architect kubenet Azure CNI (Cilium) migration with new clusters with Engineering team: IP planning subnet sizing pod density surge capacity cordon/drain and service-by-service move plan.
- Choose/validate dataplane features: Cilium network policy kubeproxy replacement (if enabled) Hubble visibility and implications on performance/SNAT.
- Standardize identity/secrets: Azure - Key Vault CSI; cert lifecycle (Key Vault and/or Gateway API).
- Establish platform guardrails: Azure Policy RBAC leastprivilege multitenancy boundaries (namespace/project isolation).
- Define/Follow the GitHub standards: reusable workflows CODEOWNERS branch protections environment approvals and artifact provenance/signing.
- Own nonfunctional requirements: SLOs HA/DR capacity modeling performance budgets and failover patterns for ingress and data plane.
- Govern delivery: roadmap cutover criteria readiness gates; mentor Platform/DevOps on architectural compliance..
Required Skills:
60-70
Required Education:
Backend Engineer Kotlin Microservices & AKSRole Overview:We are seeking a highly skilled backend developer with strong experience in modern programming languages and frameworks with primary expertise in Kotlin and exposure to Java microservices and cloud Skills:Proficiency in Kotlin with additional experience in Java (Spring Boot Spring Security) and JavaScript () 5 years of backend development experience including: oUnit testing frameworks (e.g.
