We are seeking a senior Kubernetes engineer proficient in Google Kubernetes Engine (GKE) to
provision, secure, operate, and optimize container platforms on Google Cloud Platform (Google Cloud Platform). You
will work hands-on across the full GKE lifecycle, including infrastructure as code, GitOps delivery,
identity and access, networking, service mesh, and policy enforcement, in a regulated enterprise
environment.
Hands-on production experience with Google Cloud Platform is mandatory. Candidates must have designed and
operated GKE on Google Cloud Platform, not just on-premises or on another cloud.
Core Responsibilities
Cluster Provisioning and Lifecycle
• Provision, manage, and upgrade GKE clusters
• Automate infrastructure with Terraform, including reusable modules
• Configure cluster autoscaling and optimize resource usage and cost
Delivery and Platform Management
• Implement GitOps workflows with Argo CD
• Manage Helm charts and releases
• Manage Kubernetes Operators and Custom Resource Definitions (CRDs)
Identity, Access and Secrets
• Manage Google Cloud Platform IAM, service accounts, and Workload Identity Federation
• Implement GKE RBAC controls and access management
• Manage secrets with Google Cloud Platform Secret Manager and certificates with cert-manager
Networking and Service Mesh
• Configure Google Cloud Platform networking and firewall rules
• Define and enforce Kubernetes network policies
• Manage Istio service mesh, including gateways, traffic management, and mTLS
Security and Policy
• Enforce Kubernetes policy using admission controllers and policy-as-code (e.g., OPA
Gatekeeper, Kyverno, or GKE Policy Controller) [VERIFY which tool AXP uses]
• Support audit, risk, and compliance requirements
Observability
• Implement monitoring, logging, and alerting for clusters and workloads [VERIFY AXP tooling]
• Document designs and runbooks, and collaborate with security, network, and application
teams
Required Qualifications
• 7+ years in platform engineering, DevOps, SRE, or cloud infrastructure, with demonstrated
senior-level ownership of production Google Cloud Platform and GKE environments [VERIFY whether 7+ is total
experience or Kubernetes/GKE-specific]
• Mandatory: hands-on production experience with Google Cloud Platform
• Proven experience provisioning, managing, and upgrading GKE clusters
• Strong Terraform skills
• Hands-on Argo CD (GitOps) and Helm experience
• Solid working knowledge of Google Cloud Platform IAM, service accounts, and Workload Identity Federation
• Experience with GKE RBAC, Kubernetes network policies, and Google Cloud Platform VPC and firewall
configuration
• Production experience with Istio, Kubernetes Operators and CRDs, and cert-manager
• Experience with admission controllers and policy enforcement
• Experience with cluster autoscaling and observability tooling
• Ability to work in a security- and risk-conscious regulated environment
Nice to Have
Broader Google Cloud Platform service knowledge
• GitHub Actions (CI/CD)
• Golang, especially for writing operators and controllers
• CKA, CKAD, or CKS; Google Professional Cloud Architect or Cloud DevOps Engineer
• Multi-cloud or hybrid exposure (AWS, Azure, OpenShift)
• SRE practices: SLOs, incident response, and chaos engineering
• Financial services or other regulated-industry experience
