Kubernetes Platform Engineer

Kubernetes Platform Engineer (W2)

Location: Remote, USA

Role Overview

Own and operate Kubernetes platforms across on-prem and cloud, including cluster operations, networking (Cilium CNI), and contributions to an internal developer platform.

Responsibilities

• Cluster Operations & Administration

  • Manage the full lifecycle of Kubernetes clusters on on-prem (K3s/RKE2) and in the cloud (GKE/EKS): upgrades, security patching, scaling, and capacity planning.
  • Troubleshoot cluster-level issues (control plane problems, node failures, resource constraints).
  • Implement security hardening using CIS benchmarks and organizational policies.
  • Manage etcd health, backups, and disaster recovery.
  • Monitor performance and optimize resource utilization across multi-tenant workloads.
  • Coordinate with datacenter operations for infrastructure changes and maintenance windows.

• Networking & Cilium CNI

  • Implement and maintain Cilium CNI on-prem and in cloud Kubernetes.
  • Design/enforce network policies for secure multi-tenant isolation.
  • Troubleshoot pod networking issues (DNS, service discovery, connectivity).
  • Configure and maintain BGP peering for on-prem integration.
  • Collaborate on firewall rules, VLANs, IPv6, and network architecture (with network engineering).

• Internal Developer Platform & Enablement

  • Help build an internal developer platform inspired by Backstage to improve developer efficiency and security.
  • Work with security teams on secure image baselines and automate container image patching pipelines.
  • Support development teams with Kubernetes workload deployment, configuration, and troubleshooting.
  • Review deployment manifests and advise on best practices and optimization.
  • Create and maintain platform documentation, runbooks, and self-service guides.

Required Qualifications

• 8+ years related experience (or 6+ with a Master’s, or equivalent) plus a Bachelor’s degree or equivalent.
• Kubernetes administration on on-prem infrastructure (K3s, RKE2, or similar bare-metal distributions).
• Experience with managed Kubernetes: GKE and/or EKS.
• Strong Linux networking fundamentals: iptables/nftables, routing, DNS, TCP/IP, and network troubleshooting.
• GitOps experience with ArgoCD or Flux.
• Automation/scripting: Bash, Python, Go.
• Production experience with Cilium CNI.
• Collaboration and clear technical communication.
• Kubernetes security best practices: Pod Security Standards, RBAC, and secrets management.
• GCP and/or AWS experience.

Preferred Qualifications

• Go experience for operator maintenance and platform tooling.
• CKA or CKS certifications.