Description

You will design, deploy, and manage highly available multi-tenant Kubernetes clusters in on-premises environments.

Responsibilities

• Architect multi-tenant Kubernetes solutions using namespaces, network policies, and resource quotas to ensure tenant isolation.
• Implement RBAC policies and network segmentation using tools like Cilium or Calico to maintain strict security controls.
• Manage the software supply chain by securing container images and conducting vulnerability scans with tools like Chainguard.
• Enforce security constraints on tenant workloads using Kyverno, OPA Gatekeeper, or Pod Security Policies.
• Remediate risks in containerized applications through patching base images, updating dependencies, and hardening configurations.

Required Skills

• 5+ years of hands-on experience with Kubernetes at scale, including both cloud-native and on-premises environments.
• Expertise in multi-tenancy models, resource isolation, and Kubernetes security, networking, and scaling patterns.
• Strong proficiency in Golang or Python, with a preference for Golang.
• Experience with container image security, vulnerability scanning, and supply chain security principles.
• Hands-on experience with CNCF tools such as cert-manager, Kyverno, FluxCD, ArgoCD, and Envoy.
• Deep understanding of automation within containerized infrastructure.
• Any Graduate degree.

Preferred Skills

• CKA, CKS, or CKAD certifications.
• Active contributions to CNCF or open-source Kubernetes projects.
• Expertise with Prometheus Operator and OPA.

Key Skills

Education

Any Graduate