Hello,
I am Mohammed Dastagir with Saxon Global Inc wanted to let you know about the job opportunity for Cloud Kubernetes platform engineer position if interested please share your updated resume along with expecting rate.
Position: Cloud Kubernetes platform engineer
Location: Jersey city, NJ
Days in office: 3 days a week
Contract: 12 months extendable
Interview process: video interview to face to face (manager will not hire someone unless they go for a face to face)
Status: anything is fine but we can NOT do transfer candidates, they must be on our w-2
Must have: Kubernetes, Public cloud experience (azure or Google Cloud Platform), terraform (IAAC), security & vulnerability remediation
Position Summary
We are seeking an experienced Cloud Kubernetes Platform Engineer to join the App Engine Engineering team. This role focuses on building, operating, and maintaining production-grade Kubernetes clusters across Azure AKS and Google GKE, managing GitOps workflows with ArgoCD, developing Terraform infrastructure-as-code modules, and remediating security vulnerabilities across our container and cluster estate.
The ideal candidate has deep hands-on experience with Kubernetes in a large enterprise environment and is comfortable working across the full lifecycle — from provisioning new clusters to day-2 operations, upgrades, security hardening, and decommissioning.
Key Responsibilities
Kubernetes Cluster Build & Operations
- Build, configure, and maintain AKS and GKE clusters across multiple environments (lab, nonprod, preprod, production) and regions
- Manage cluster lifecycle including provisioning, upgrades, scaling, patching, and decommissioning
- Configure and manage node pools, namespaces, RBAC, network policies (Calico), and resource quotas
- Implement and maintain cluster bootstrap components: ingress controllers (Nginx), monitoring (PrometheGrafana), logging (Fluentd/Splunk integration), and service mesh (Istio)
- Manage cluster identity and access: Azure AD integration, Managed Identities, Service Principals, PIM, and Workload Identity Federation
- Support disaster recovery operations across primary and DR clusters
Terraform & Infrastructure as Code
- Develop, maintain, and enhance Terraform modules for AKS/GKE cluster provisioning, IAM, bootstrap, namespaces, and node pools
- Work with Terraform Enterprise (TFE) workspaces — manage workspace configuration, variable sets, VCS integration, and Sentinel policies
- Maintain Storefront (SF) product definitions and composite workflows for automated cluster provisioning via Genie
- Ensure infrastructure code follows GitLab branching strategy, release tagging, and merge request workflows
- Collaborate with CloudOps and Platform teams on landing zone configurations, networking, and DNS
ArgoCD & GitOps
- Deploy, configure, and maintain ArgoCD across all cluster environments
- Manage ArgoCD application definitions, projects, RBAC policies, and repository configurations
- Implement and maintain GitOps workflows for application and platform component deployments
- Troubleshoot ArgoCD sync issues, drift detection, and webhook integrations
- Manage ArgoCD hub-spoke architecture across multiple clusters
Security & Vulnerability Remediation
- Triage and remediate container image vulnerabilities identified by Wiz.io, Microsoft Defender, and X-Ray scanning
- Maintain and update base images across the container registry (Hubble/Artifactory)
- Implement and enforce Azure Policy / OPA Gatekeeper constraints for CIS Kubernetes benchmarks
- Manage CCM findings, exemptions, and compliance documentation
- Perform security hardening: FIPS-enabled nodes, host encryption, private clusters, seccomp/AppArmor profiles, read-only root filesystems
- Manage PKI certificates and Service Principal certificate lifecycle (creation, renewal, rotation)
- Maintain secrets management using SMS2, Azure Key Vault, and Secrets Store CSI driver
Monitoring, Alerting & Support
- Monitor cluster health, resource utilization, and platform service availability
- Investigate and resolve platform incidents — node failures, network issues, pod scheduling problems
- Support application teams with onboarding, namespace provisioning, and troubleshooting
- Participate in on-call rotation for production cluster support
Required Qualifications
- 5+ years of hands-on experience with Kubernetes in production environments
- 3+ years with Azure AKS and/or Google GKE
- 3+ years with Terraform (HCL) — writing modules, managing state, working with Terraform Enterprise or Terraform Cloud
- 2+ years with ArgoCD or equivalent GitOps tooling (Flux)
- Strong experience with container security scanning and vulnerability remediation
- Proficiency with Linux, shell scripting (Bash), and at least one of: Go, Python
- Deep understanding of Kubernetes networking: CNI plugins (Azure CNI, Calico, Kubenet), network policies, ingress controllers, DNS, load balancers
- Experience with Kubernetes RBAC, Azure AD/Entra ID integration, Managed Identities, and Workload Identity
- Experience with CI/CD pipelines using GitLab CI, Jenkins, or TeamCity
- Familiarity with monitoring stacks: Prometheus, Grafana, Splunk, or equivalent
Preferred Qualifications
- Experience with OpenShift (OCP) in addition to AKS/GKE
- Experience with Helm chart development and management
- Familiarity with OPA/Gatekeeper policy authoring and CIS Kubernetes benchmarks
- Experience with Kafka/Strimzi (AMQ Streams) for event streaming in Kubernetes
- Knowledge of Azure networking: VNets, NSGs, Private DNS Zones, hub-spoke topology, ExpressRoute
- Experience with Velero for cluster backup and restore
- Experience with cert-manager or PKI certificate lifecycle management
- CKA, CKAD, or CKS certification
- Experience in financial services or other highly regulated industries
Mohammed Dastagir
Sr Resource Manager
Saxon Global Inc.
a:
Linked in:
w: e: dastagir.m
