Kubernetes Platform Engineer

AIS (Applied Information Sciences)•Groton, CT

23h•$102,000 - $154,000

About The Position

As an initial project assignment, you will support the unique needs of our client as a Kubernetes Platform Engineer. The Kubernetes / Platform Engineer is responsible for deploying, configuring, securing, and validating the AKS platform layer within Azure Government. This role owns the Kubernetes configuration required to support enterprise workloads, including node pools, namespaces, RBAC, ingress, storage classes, network policies, secrets integration, workload identity, observability, deployment patterns, and platform operations. The engineer will support the onboarding of Adexone, BdBridge, Pipestress, and UiPath Automation Suite into AKS while ensuring the platform is secure, scalable, supportable, and aligned with customer operational standards.

Requirements

5+ years of infrastructure, platform, cloud, or DevOps engineering experience.
3+ years of hands-on Kubernetes administration or engineering experience.
Experience deploying, configuring, and operating AKS or equivalent managed Kubernetes platforms.
Strong experience with Kubernetes objects including deployments, services, ingress, ConfigMaps, Secrets, StatefulSets, DaemonSets, storage classes, persistent volumes, and persistent volume claims.
Experience with Kubernetes networking, DNS, service discovery, ingress controllers, and network policies.
Experience with Helm, Kustomize, YAML-based deployment assets, and pipeline-driven deployment approaches.
Experience integrating Kubernetes with Azure Container Registry, Azure Key Vault, Azure Monitor, Log Analytics, managed identities, and Azure storage.
Ability to troubleshoot Kubernetes issues using kubectl, logs, events, metrics, probes, and cluster diagnostics.
Ability to document platform configuration, workload onboarding patterns, and operational procedures.

Nice To Haves

Certifications such as Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer, Microsoft Certified: Azure Administrator Associate, and/or Microsoft Certified: DevOps Engineer Expert.
Experience with AKS in Azure Government, GCC High, DoD, Federal, or regulated environments.
Experience deploying UiPath Automation Suite or similar enterprise platforms on AKS.
Experience with Flux, Argo CD, Azure DevOps, GitHub Actions, or other GitOps / CI/CD tooling.
Experience with Azure Policy for AKS, Gatekeeper, Kyverno, or similar admission control/policy tooling.

Responsibilities

Configure AKS platform components including node pools, namespaces, service accounts, Kubernetes RBAC, resource quotas, limit ranges, network policies, ingress controllers, storage classes, and workload identity.
Implement secure private AKS operating patterns, including Kubernetes API access controls, administrative access paths, DNS validation, and cluster access procedures.
Configure approved ingress and service exposure models using internal load balancers, ingress controllers, Application Gateway integration, or other customer-approved patterns.
Configure Kubernetes storage integrations using Azure Disk, Azure Files, CSI drivers, persistent volumes, persistent volume claims, and workload-specific storage requirements.
Configure secrets and certificate integration using Azure Key Vault, Key Vault CSI driver, managed identities, workload identity, and approved certificate management processes.
Support deployment of Adexone, BdBridge, Pipestress, and UiPath Automation Suite workloads into AKS.
Develop and maintain Kubernetes manifests, Helm charts, Kustomize overlays, deployment standards, and reusable workload onboarding patterns.
Support observability integration, including logs, metrics, probes, dashboards, alerts, and workload telemetry.
Implement Kubernetes security controls, including namespace isolation, least-privilege RBAC, pod security controls, network segmentation, admission controls, and image deployment constraints.
Troubleshoot platform and workload issues involving scheduling, node health, ingress, DNS, service discovery, storage mounts, pod identity, probes, container startup failures, and application runtime issues.