Platform Architect – Kubernetes & Cloud Native

About the role

We are looking for a Platform Architect to own and evolve our production‑grade Kubernetes platforms across managed, on‑premises and bare‑metal environments. You will define reference architectures, standards and lifecycle strategies, while ensuring security, observability and scalability. The role also involves advising clients, mentoring engineers and shaping our AI‑infrastructure direction.

Key responsibilities

• Own the architecture of production‑grade Kubernetes platforms spanning multi‑environment, multi‑cluster, networking, storage and security.
• Define reference architectures, platform standards and upgrade/lifecycle strategies for engineering teams.
• Design advanced cluster networking, including CNI (Cilium), ingress, load balancing and BGP‑based routing for on‑premises and bare‑metal environments.
• Establish infrastructure‑as‑code and GitOps operating model using Terraform/OpenTofu, Argo CD or Flux, and Helm/Kustomize.
• Define observability, resilience and scaling strategies covering monitoring, backup, disaster recovery, autoscaling and capacity planning.
• Lead security architecture implementation: RBAC, Pod Security Standards, network policies, secrets management and image policy guardrails.
• Conduct client advisory workshops, training sessions and act as senior technical authority.
• Provide architectural escalation and design guidance to Platform Engineers.
• Shape AI‑infrastructure direction, including model serving, GPU scheduling and ML platform patterns on Kubernetes.
• Mentor engineers and promote cloud‑native best practices.

Required profile

• Deep expertise in Kubernetes architecture, workloads, scheduling, RBAC, networking (CNI) and storage (CSI) at design level.
• Proven track record designing production Kubernetes platforms and reference architectures for managed and on‑premises/bare‑metal environments, with experience in OpenShift or Rancher (RKE2).
• Advanced networking knowledge covering TCP/IP, DNS, routing, firewalls and load balancing.
• Strong background in infrastructure‑as‑code, GitOps and cloud‑native tooling.
• Experience with security best practices for container platforms.
• Ability to lead workshops, mentor teams and communicate complex technical concepts.

Required skills

• Kubernetes
• Cilium (CNI)
• Terraform / OpenTofu
• Argo CD
• Flux
• Helm
• Kustomize
• BGP routing
• TCP/IP, DNS, firewalls, load balancing
• CSI storage drivers
• RBAC
• Pod Security Standards
• Network policies
• Secrets management
• Image policy enforcement
• OpenShift
• Rancher (RKE2)
• GitOps
• AI/ML infrastructure (model serving, GPU scheduling)