T
Cloud Kubernetes Platform Engineer
Tekfortune
3 days ago
Contract
On-site
Summit, New Jersey, United States
Tekfortune is a fast-growing consulting firm specialized in permanent, contract & project-based staffing services for world’s leading organizations in a broad range of industries. In this quickly changing economic landscape, virtual recruiting and remote work are critical for the future of work. To support the active project demands and skills gaps, our staffing experts can help you find the best job for you.
Position: Cloud Kubernetes Platform Engineer
Location: Jersey City, NJ
Days in office: 3 days a week
Interview process: video interview to face to face (manager will not hire someone unless they go for a face to face)
Contract: 12 months extendable
Status: anything is fine, but we can NOT do transfer candidates, they must already be on your w-2
Must have: Kubernetes, Public cloud experience (azure or GCP), terraform (IAAC), security & vulnerability remediation
Position Summary
We are seeking an experienced Cloud Kubernetes Platform Engineer to join the App Engine Engineering team. This role focuses on building, operating, and maintaining production-grade Kubernetes clusters across Azure AKS and Google GKE, managing GitOps workflows with ArgoCD, developing Terraform infrastructure-as-code modules, and remediating security vulnerabilities across our container and cluster estate.
The ideal candidate has deep hands-on experience with Kubernetes in a large enterprise environment and is comfortable working across the full lifecycle — from provisioning new clusters to day-2 operations, upgrades, security hardening, and decommissioning.
Key Responsibilities
Kubernetes Cluster Build & Operations
For more information and other jobs available please contact our recruitment team at careers@tekfortune.com. To view all the jobs available in the USA and Asia please visit our website at https://www.tekfortune.com/careers/.
Position: Cloud Kubernetes Platform Engineer
Location: Jersey City, NJ
Days in office: 3 days a week
Interview process: video interview to face to face (manager will not hire someone unless they go for a face to face)
Contract: 12 months extendable
Status: anything is fine, but we can NOT do transfer candidates, they must already be on your w-2
Must have: Kubernetes, Public cloud experience (azure or GCP), terraform (IAAC), security & vulnerability remediation
Position Summary
We are seeking an experienced Cloud Kubernetes Platform Engineer to join the App Engine Engineering team. This role focuses on building, operating, and maintaining production-grade Kubernetes clusters across Azure AKS and Google GKE, managing GitOps workflows with ArgoCD, developing Terraform infrastructure-as-code modules, and remediating security vulnerabilities across our container and cluster estate.
The ideal candidate has deep hands-on experience with Kubernetes in a large enterprise environment and is comfortable working across the full lifecycle — from provisioning new clusters to day-2 operations, upgrades, security hardening, and decommissioning.
Key Responsibilities
Kubernetes Cluster Build & Operations
- Build, configure, and maintain AKS and GKE clusters across multiple environments (lab, nonprod, preprod, production) and regions
- Manage cluster lifecycle including provisioning, upgrades, scaling, patching, and decommissioning
- Configure and manage node pools, namespaces, RBAC, network policies (Calico), and resource quotas
- Implement and maintain cluster bootstrap components: ingress controllers (Nginx), monitoring (Prometheus/Grafana), logging (Fluentd/Splunk integration), and service mesh (Istio)
- Manage cluster identity and access: Azure AD integration, Managed Identities, Service Principals, PIM, and Workload Identity Federation
- Support disaster recovery operations across primary and DR clusters
- Develop, maintain, and enhance Terraform modules for AKS/GKE cluster provisioning, IAM, bootstrap, namespaces, and node pools
- Work with Terraform Enterprise (TFE) workspaces — manage workspace configuration, variable sets, VCS integration, and Sentinel policies
- Maintain Storefront (SF) product definitions and composite workflows for automated cluster provisioning via Genie
- Ensure infrastructure code follows GitLab branching strategy, release tagging, and merge request workflows
- Collaborate with CloudOps and Platform teams on landing zone configurations, networking, and DNS
- Deploy, configure, and maintain ArgoCD across all cluster environments
- Manage ArgoCD application definitions, projects, RBAC policies, and repository configurations
- Implement and maintain GitOps workflows for application and platform component deployments
- Troubleshoot ArgoCD sync issues, drift detection, and webhook integrations
- Manage ArgoCD hub-spoke architecture across multiple clusters
- Triage and remediate container image vulnerabilities identified by Wiz.io, Microsoft Defender, and X-Ray scanning
- Maintain and update base images across the container registry (Hubble/Artifactory)
- Implement and enforce Azure Policy / OPA Gatekeeper constraints for CIS Kubernetes benchmarks
- Manage CCM findings, exemptions, and compliance documentation
- Perform security hardening: FIPS-enabled nodes, host encryption, private clusters, seccomp/AppArmor profiles, read-only root filesystems
- Manage PKI certificates and Service Principal certificate lifecycle (creation, renewal, rotation)
- Maintain secrets management using SMS2, Azure Key Vault, and Secrets Store CSI driver
- Monitor cluster health, resource utilization, and platform service availability
- Investigate and resolve platform incidents — node failures, network issues, pod scheduling problems
- Support application teams with onboarding, namespace provisioning, and troubleshooting
- Participate in on-call rotation for production cluster support
- 5+ years of hands-on experience with Kubernetes in production environments
- 3+ years with Azure AKS and/or Google GKE
- 3+ years with Terraform (HCL) — writing modules, managing state, working with Terraform Enterprise or Terraform Cloud
- 2+ years with ArgoCD or equivalent GitOps tooling (Flux)
- Strong experience with container security scanning and vulnerability remediation
- Proficiency with Linux, shell scripting (Bash), and at least one of: Go, Python
- Deep understanding of Kubernetes networking: CNI plugins (Azure CNI, Calico, Kubenet), network policies, ingress controllers, DNS, load balancers
- Experience with Kubernetes RBAC, Azure AD/Entra ID integration, Managed Identities, and Workload Identity
- Experience with CI/CD pipelines using GitLab CI, Jenkins, or TeamCity
- Familiarity with monitoring stacks: Prometheus, Grafana, Splunk, or equivalent
- Experience with OpenShift (OCP) in addition to AKS/GKE
- Experience with Helm chart development and management
- Familiarity with OPA/Gatekeeper policy authoring and CIS Kubernetes benchmarks
- Experience with Kafka/Strimzi (AMQ Streams) for event streaming in Kubernetes
- Knowledge of Azure networking: VNets, NSGs, Private DNS Zones, hub-spoke topology, ExpressRoute
- Experience with Velero for cluster backup and restore
- Experience with cert-manager or PKI certificate lifecycle management
- CKA, CKAD, or CKS certification
- Experience in financial services or other highly regulated industries
For more information and other jobs available please contact our recruitment team at careers@tekfortune.com. To view all the jobs available in the USA and Asia please visit our website at https://www.tekfortune.com/careers/.