Description

You will define the target reference architecture for greenfield Azure Kubernetes Service (AKS) clusters and lead the design migration from NGINX to Azure Managed Gateway API. You will architect the migration from kubenet to Azure CNI (Cilium), handling IP planning, subnet sizing, and service-by-service cutover strategies.

Responsibilities

• Define target reference architecture for greenfield AKS clusters in collaboration with the engineering team.
• Lead the design and implementation of the migration from NGINX to Azure Managed Gateway API, including HTTPRoute/Gateway modeling, TLS/WAF strategy, and weighted/canary traffic cutover.
• Architect the transition from kubenet to Azure CNI (Cilium), managing IP planning, subnet sizing, pod density, and surge capacity.
• Validate and select dataplane features such as Cilium network policies, kube-proxy replacement, and Hubble visibility to ensure performance and SNAT compatibility.

Required Skills

• 7+ years of experience with Azure Kubernetes Service (AKS) and platform engineering.
• Deep expertise in Azure CNI and Cilium networking, including IP planning, subnetting, and pod density optimization.
• Strong production operations experience with Kubernetes Gateway API.
• Proven track record of migrating NGINX workloads to Azure Managed Gateway API.
• Experience with HTTPRoute and Gateway API modeling.
• Ability to design TLS/WAF strategies and policy attachments.
• Knowledge of canary deployments and weighted traffic routing.

Preferred Skills

• Experience with Hubble visibility and observability in Cilium environments.
• Understanding of SNAT implications and kube-proxy replacement.

Key Skills

Education

Any Graduate